XSS (Cross-Site Scripting)

PCIComplianceHub · Last updated 22 September 2026

An attack in which a script an attacker chose runs in a victim's browser on a site they trust, because the site reflected or stored the attacker's input as code. It is one of the common software attacks 6.2.4 requires developers to prevent, and on a payment page it is a route to e-skimming. The full entry is under Cross-site Scripting (XSS); this one exists because the acronym is what most people search for.