Cross-Site Scripting

Injecting client-side scripts — reflected, stored, and DOM-based XSS chains leading to session hijacking or credential phishing.