Read
What are cross site scripting attacks?
Cross-site scripting (XSS) bugs are a form of security defect unique to web-based applications that allow user data tied to the vulnerable web server’s domain, usually held in cookies, to be disclosed to a malicious third party.