Cross-site scripting (XSS) occurs when cybercriminals insert malicious code into webpages to steal data or facilitate phishing scams. WhiteHat Security: XSS accounts for nearly half of all web-based exploits last year. These vulnerabilities are expected to grow by 166 percent in 2017, which would be the biggest jump in the past five years. Understanding the threat XSS poses to all websites, as well as the most effective defensive techniques, can help organizations avoid becoming a victim.”]
Source: https://securityintelligence.com/a-primer-on-cross-site-scripting-xss/