Edit: This has since been resolved in IE7, so the vulnerability described here is no longer a threat except to old versions of IE. A cross site scripting attack is where you get JavaScript to run from within the context of a website that isn't yours. It's usually used to retrieve the cookies of a user of that website, which the browser will only send to the website that created it, and using JavaS
{{#tags}}- {{label}}
{{/tags}}