Cross-Site Scripting (XSS) is a type of security vulnerability that enables an attacker to inject malicious code into a web page viewed by other users. XSS attacks allow the attacker to execute arbitrary JavaScript code in the context of the affected website, potentially stealing sensitive information such as login credentials, or even taking full control of the affected user's session.

There are two main types of XSS attacks: stored and reflected. Stored XSS attacks are those in which the malicious code is permanently stored on the targeted website, such as in a database or user-generated comment. Reflected XSS attacks are those in which the attacker's code is temporarily reflected back to the user's browser, such as in a search result or form input.

XSS attacks can be prevented by properly sanitizing user-generated input and encoding any dynamic content that is displayed on a web page. It is also important for developers to stay up-to-date on known XSS vulnerabilities and to regularly test their web applications for any potential security weaknesses.
spam fails_task lang_mismatch pii not_appropriate hate_speech sexual_content quality toxicity humor helpfulness creativity violence