Pete, the security administrator, has been notified by the IDS that the company website is under attack.
Analysis of the web logs show the following string, indicating a user is trying to post a comment on the public
bulletin board.
INSERT INTO message `<script>source=http://evilsite</script>
Which of the following is this an example of?

A.
XSS attack

B.
XML injection attack

C.
Buffer overflow attack

D.
SQL injection attack

Explanation:
The <script> </script> tags indicate that script is being inserted.
Cross-site scripting (XSS) is a type of computer security vulnerability typically found in Web applications. XSS
enables attackers to inject client-side script into Web pages viewed by other users.
Cross-site scripting uses known vulnerabilities in web-based applications, their servers, or plug-in systems on
which they rely. Exploiting one of these, attackers fold malicious content into the content being delivered from
the compromised site. When the resulting combined content arrives at the client-side web browser, it has all
been delivered from the trusted source, and thus operates under the permissions granted to that system. By
finding ways of injecting malicious scripts into web pages, an attacker can gain elevated access-privileges to
sensitive page content, session cookies, and a variety of other information maintained by the browser on behalf
of the user.