What is cross site scripting ?

Cross-Site Scripting (XSS) attacks are a type of injection, in which malicious scripts are injected into otherwise benign and trusted web sites. XSS attacks occur when an attacker uses a web application to send malicious code, generally in the form of a browser side script, to a different end user. The consequences of XSS may range from petty nuisance like displaying an alert box to a significant security risk like stealing session cookies.

 

http://www.c-sharpcorner.com/UploadFile/b182bf/what-is-cross-site-scripting-attack-in-mvc/

http://www.c-sharpcorner.com/article/cross-site-scripting-xss-attack-and-its-prevention-mechanism/

http://www.c-sharpcorner.com/UploadFile/1c8574/cross-site-scripting-xss/

https://blog.detectify.com/2015/12/16/what-is-cross-site-scripting-and-how-can-you-fix-it/