title: How does Cross Site scriptng work between texts?
body: <p>I injected Stored XSS into text field in Webgoat5.4-developer[XSS-LAB : Cross Site Scripting - Stage1 : Stored XSS]. The XSS I injected was</p>
  
  <pre><code>2211 &lt;script&gt;alert('Hi')&lt;/script&gt;HyperThread Rd.
  </code></pre>
  
  <p>where 2211 and HyperThread are just already exsited text which and </p>
  
  <pre><code>&lt;script&gt;alert('Hi Jerry u r hacked lol')&lt;/script&gt;
  </code></pre>
  
  <p>is script command I injected. And then, it works. But the question is I'm wondering how it works even though script command was between texts.</p>