Cross Site Scripting or called XSS is one of the most common application-layer web intrusions. XSS mostly targets scripts embedded in a site which are executed on the client-side, which is in the user’s side, rather than on the server-side. XSS in itself is a menace which is brought by the internet security weak point of client-side scripting languages such as HTML, JavaScript among others VBScript, ActiveX, HTML, or Flash, as the prime culprits for this exploit.

The concept of XSS is to control client-side scripts of a website application to perform in the means desired by the malicious user. Such a exploitation can inserted a script in a page which can be carry out every time the page is loaded or can executed whenever an associated event is performed.