Testing Your Web Applications for Cross-Site Scripting Vulnerabilities

Cross-site scripting attacks occur when a malicious person, the attacker, can force an unknowing user, the victim, to run client-side script of the attacker’s choice.

To learn more about XSS and how to test your web apps from it check this article