Cross-site scripting is a type of web application security vulnerability typically found in web applications. XSS attacks enable attackers to inject client-side scripts into web pages viewed by other users.It can be easily use for phishing attack. Types of XSS :-
1.Reflected XSS :- Malicious script comes from the current HTTP request.
2.Stored XSS :- malicious script comes from the website’s database.
3.DOM-based XSS :- Vulnerability exists in client-side code rather than server-side code.