What is Cross-Site Scripting?

Cross-Site Scripting (XSS) is a web security vulnerability that allows an attacker to inject and execute malicious scripts in a trusted web application context within a victim’s browser. Expanded Explanation 1. Technical Function and Core Characteristics XSS occurs when a web application includes untrusted input in a page without proper validation, encoding, or output handling, which allows execution of attacker-controlled scripts in users’ browsers. XSS enables theft of cookies or session

How widely is Cross-Site Scripting used?

13 organizations in our directory are tagged Cross-Site Scripting, referenced across 39 articles and 1 open source project.

What is Cross-Site Scripting most closely associated with?

Cross-Site Scripting is most closely associated with Vulnerabilities and Cybersecurity.

Cross-Site Scripting (XSS)

Last updated August 24, 2026

Human View Machine View

This is the page you're already on — the Human View toggle above shows it in full.

A green key on the record, left, is one Decision Insights added. It doesn't exist on the company's site or in a wire feed. The same key labels its row on the right, so you can match them directly. More on how DI enriches a record.

The record

This is what the machine sees: the exact JSON-LD an agent receives for this listing.

WebSite

{
  "@context": "https://schema.org",
  "@id": "https://decisioninsights.ai/#website",
  "@type": "WebSite",
  "name": "Decision Insights",
  "potentialAction": {
    "@type": "SearchAction",
    "target": {
      "@type": "EntryPoint",
      "urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}\u0026submit=1"
    }
  },
  "publisher": {
    "@id": "https://decisioninsights.ai/#organization"
  },
  "url": "https://decisioninsights.ai"
}

Organization

{
  "@context": "https://schema.org",
  "@id": "https://decisioninsights.ai/#organization",
  "@type": "Organization",
  "contactPoint": {
    "@type": "ContactPoint",
    "contactType": "customer support",
    "email": "[email protected]"
  },
  "description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
  "logo": {
    "@type": "ImageObject",
    "url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
  },
  "name": "Decision Insights",
  "parentOrganization": {
    "@type": "Organization",
    "name": "Wiretap Labs",
    "sameAs": [
      "https://www.linkedin.com/company/wiretap-labs",
      "https://www.crunchbase.com/organization/wiretap-labs"
    ],
    "url": "https://wiretaplabs.com"
  },
  "publishingPrinciples": "https://decisioninsights.ai/standards/",
  "sameAs": [
    "https://www.linkedin.com/company/decisioninsights"
  ],
  "url": "https://decisioninsights.ai"
}

BreadcrumbList

{
  "@context": "https://schema.org",
  "@type": "BreadcrumbList",
  "itemListElement": [
    {
      "@type": "ListItem",
      "item": "https://decisioninsights.ai",
      "name": "Decision Insights",
      "position": 1
    },
    {
      "@type": "ListItem",
      "item": "https://decisioninsights.ai/term/",
      "name": "Glossary",
      "position": 2
    },
    {
      "@type": "ListItem",
      "item": "https://decisioninsights.ai/term/cross-site-scripting-xss/",
      "name": "Cross-Site Scripting",
      "position": 3
    }
  ]
}

DefinedTerm

{
  "@context": "https://schema.org",
  "@id": "https://decisioninsights.ai/term/cross-site-scripting-xss/#definedterm",
  "@type": "DefinedTerm",
  "additionalProperty": [
    {
      "@type": "PropertyValue",
      "name": "Articles mentioning this entity",
      "value": 39
    },
    {
      "@type": "PropertyValue",
      "name": "Open source projects",
      "value": 1
    },
    {
      "@type": "PropertyValue",
      "name": "Organizations tagged",
      "value": 13
    },
    {
      "@type": "PropertyValue",
      "name": "Organizations",
      "propertyID": "https://decisioninsights.ai/ns#taggedOrganizations",
      "value": [
        {
          "@id": "https://decisioninsights.ai/registry/appcheck/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/appcheck/",
          "name": "AppCheck"
        },
        {
          "@id": "https://decisioninsights.ai/registry/atomicorp-unified-security-built-on-ossec/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/atomicorp-unified-security-built-on-ossec/",
          "name": "Atomicorp"
        },
        {
          "@id": "https://decisioninsights.ai/registry/cloudbric/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/cloudbric/",
          "name": "Cloudbric"
        },
        {
          "@id": "https://decisioninsights.ai/registry/cybermedia-net/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/cybermedia-net/",
          "name": "Cybermedia Net"
        },
        {
          "@id": "https://decisioninsights.ai/registry/django/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/django/",
          "name": "Django"
        },
        {
          "@id": "https://decisioninsights.ai/registry/f5-networks/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/f5-networks/",
          "name": "F5"
        },
        {
          "@id": "https://decisioninsights.ai/registry/portswigger/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/portswigger/",
          "name": "PortSwigger"
        },
        {
          "@id": "https://decisioninsights.ai/registry/impreva/prevoty/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/impreva/prevoty/",
          "name": "Prevoty"
        },
        {
          "@id": "https://decisioninsights.ai/registry/secure-code-warrior/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/secure-code-warrior/",
          "name": "Secure Code Warrior"
        },
        {
          "@id": "https://decisioninsights.ai/registry/security-journey/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/security-journey/",
          "name": "Security Journey"
        },
        {
          "@id": "https://decisioninsights.ai/registry/signal-sciences-now-part-of-fastly/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/signal-sciences-now-part-of-fastly/",
          "name": "Signal Sciences now part of Fastly"
        },
        {
          "@id": "https://decisioninsights.ai/registry/sucuri-security/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/sucuri-security/",
          "name": "Sucuri Security"
        },
        {
          "@id": "https://decisioninsights.ai/registry/wallarm/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/wallarm/",
          "name": "Wallarm"
        }
      ]
    },
    {
      "@type": "PropertyValue",
      "name": "Related terms",
      "valueReference": [
        {
          "@id": "https://decisioninsights.ai/term/cross-site-request-forgery-csrf/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/cross-site-request-forgery-csrf/",
          "name": "Cross-Site Request Forgery"
        },
        {
          "@id": "https://decisioninsights.ai/term/script-accss/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/script-accss/",
          "name": "script accss"
        },
        {
          "@id": "https://decisioninsights.ai/term/vulnerability-scanning/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/vulnerability-scanning/",
          "name": "Vulnerability Scanning"
        },
        {
          "@id": "https://decisioninsights.ai/term/cross-access-authentication/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/cross-access-authentication/",
          "name": "Cross-Access Authentication"
        },
        {
          "@id": "https://decisioninsights.ai/term/common-vulnerability-scoring-system-cvss/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/common-vulnerability-scoring-system-cvss/",
          "name": "Common Vulnerability Scoring System"
        },
        {
          "@id": "https://decisioninsights.ai/term/vulnerabilities/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/vulnerabilities/",
          "name": "Vulnerabilities"
        },
        {
          "@id": "https://decisioninsights.ai/term/exploit/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/exploit/",
          "name": "Exploit"
        },
        {
          "@id": "https://decisioninsights.ai/term/scripting-tool/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/scripting-tool/",
          "name": "scripting tool"
        }
      ]
    },
    {
      "@type": "PropertyValue",
      "name": "Related terms (co-occurring topics)",
      "valueReference": [
        {
          "@id": "https://decisioninsights.ai/term/vulnerabilities/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/vulnerabilities/",
          "name": "Vulnerabilities"
        },
        {
          "@id": "https://decisioninsights.ai/term/cybersecurity/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/cybersecurity/",
          "name": "Cybersecurity"
        },
        {
          "@id": "https://decisioninsights.ai/term/network-operator/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/network-operator/",
          "name": "Network Operator"
        },
        {
          "@id": "https://decisioninsights.ai/term/data-center/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/data-center/",
          "name": "Data Center"
        },
        {
          "@id": "https://decisioninsights.ai/term/ai-infrastructure/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/ai-infrastructure/",
          "name": "AI infrastructure"
        },
        {
          "@id": "https://decisioninsights.ai/term/common-vulnerability-scoring-system-cvss/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/common-vulnerability-scoring-system-cvss/",
          "name": "Common Vulnerability Scoring System"
        },
        {
          "@id": "https://decisioninsights.ai/term/virtual-private-network-vpn/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/virtual-private-network-vpn/",
          "name": "Virtual Private Network"
        },
        {
          "@id": "https://decisioninsights.ai/term/common-vulnerabilities-and-exposures-cve/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/common-vulnerabilities-and-exposures-cve/",
          "name": "Common Vulnerabilities and Exposures"
        },
        {
          "@id": "https://decisioninsights.ai/term/known-exploited-vulnerabilities-kev/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/known-exploited-vulnerabilities-kev/",
          "name": "Known Exploited Vulnerabilities"
        },
        {
          "@id": "https://decisioninsights.ai/term/antivirus-software-av/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/antivirus-software-av/",
          "name": "Antivirus Software"
        },
        {
          "@id": "https://decisioninsights.ai/term/binding-operational-directive-bod/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/binding-operational-directive-bod/",
          "name": "Binding Operational Directive"
        },
        {
          "@id": "https://decisioninsights.ai/term/server/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/server/",
          "name": "Server"
        },
        {
          "@id": "https://decisioninsights.ai/term/automation/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/automation/",
          "name": "Automation"
        },
        {
          "@id": "https://decisioninsights.ai/term/denial-of-service-dos/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/denial-of-service-dos/",
          "name": "Denial of Service"
        },
        {
          "@id": "https://decisioninsights.ai/term/enterprise/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/enterprise/",
          "name": "Enterprise"
        },
        {
          "@id": "https://decisioninsights.ai/term/social-engineering/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/social-engineering/",
          "name": "Social Engineering"
        },
        {
          "@id": "https://decisioninsights.ai/term/software/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/software/",
          "name": "Software"
        },
        {
          "@id": "https://decisioninsights.ai/term/structured-query-language-sql/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/structured-query-language-sql/",
          "name": "Structured Query Language"
        },
        {
          "@id": "https://decisioninsights.ai/term/ai-artificial-intelligence/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/ai-artificial-intelligence/",
          "name": "Artificial Intelligence"
        },
        {
          "@id": "https://decisioninsights.ai/term/authentication/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/authentication/",
          "name": "Authentication"
        },
        {
          "@id": "https://decisioninsights.ai/term/internet/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/internet/",
          "name": "Internet"
        },
        {
          "@id": "https://decisioninsights.ai/term/intrusion-detection-system-ids/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/intrusion-detection-system-ids/",
          "name": "Intrusion Detection System"
        },
        {
          "@id": "https://decisioninsights.ai/term/operating-system/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/operating-system/",
          "name": "Operating System"
        },
        {
          "@id": "https://decisioninsights.ai/term/ransomware/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/ransomware/",
          "name": "Ransomware"
        },
        {
          "@id": "https://decisioninsights.ai/term/secure-shell-ssh-protocol/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/secure-shell-ssh-protocol/",
          "name": "Secure Shell"
        },
        {
          "@id": "https://decisioninsights.ai/term/application/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/application/",
          "name": "Application"
        },
        {
          "@id": "https://decisioninsights.ai/term/database/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/database/",
          "name": "Database"
        },
        {
          "@id": "https://decisioninsights.ai/term/internet-of-things-iot/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/internet-of-things-iot/",
          "name": "Internet of Things"
        },
        {
          "@id": "https://decisioninsights.ai/term/malware/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/malware/",
          "name": "Malware"
        },
        {
          "@id": "https://decisioninsights.ai/term/multifactor-authentication-mfa/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/multifactor-authentication-mfa/",
          "name": "Multifactor Authentication"
        },
        {
          "@id": "https://decisioninsights.ai/term/networking/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/networking/",
          "name": "Networking"
        },
        {
          "@id": "https://decisioninsights.ai/term/threats/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/threats/",
          "name": "Threats"
        },
        {
          "@id": "https://decisioninsights.ai/term/backup/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/backup/",
          "name": "Backup"
        },
        {
          "@id": "https://decisioninsights.ai/term/connectivity/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/connectivity/",
          "name": "Connectivity"
        },
        {
          "@id": "https://decisioninsights.ai/term/endpoint-detection-and-response-edr/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/endpoint-detection-and-response-edr/",
          "name": "Endpoint Detection And Response"
        },
        {
          "@id": "https://decisioninsights.ai/term/exploit/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/exploit/",
          "name": "Exploit"
        },
        {
          "@id": "https://decisioninsights.ai/term/firewall/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/firewall/",
          "name": "Firewall"
        },
        {
          "@id": "https://decisioninsights.ai/term/partnership/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/partnership/",
          "name": "Partnership"
        },
        {
          "@id": "https://decisioninsights.ai/term/patch/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/patch/",
          "name": "Patch"
        },
        {
          "@id": "https://decisioninsights.ai/term/remediation/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/remediation/",
          "name": "Remediation"
        },
        {
          "@id": "https://decisioninsights.ai/term/remote-desktop-protocol-rdp/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/remote-desktop-protocol-rdp/",
          "name": "Remote Desktop Protocol"
        },
        {
          "@id": "https://decisioninsights.ai/term/services/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/services/",
          "name": "Services"
        },
        {
          "@id": "https://decisioninsights.ai/term/ssh-file-transfer-protocol/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/ssh-file-transfer-protocol/",
          "name": "SSH File Transfer Protocol"
        },
        {
          "@id": "https://decisioninsights.ai/term/active-performance-probe-app/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/active-performance-probe-app/",
          "name": "Active Performance Probe"
        },
        {
          "@id": "https://decisioninsights.ai/term/attack/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/attack/",
          "name": "Attack"
        },
        {
          "@id": "https://decisioninsights.ai/term/edge/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/edge/",
          "name": "Edge"
        },
        {
          "@id": "https://decisioninsights.ai/term/elastic-load-balancer-elb/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/elastic-load-balancer-elb/",
          "name": "Elastic Load Balancer"
        },
        {
          "@id": "https://decisioninsights.ai/term/encryption/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/encryption/",
          "name": "Encryption"
        },
        {
          "@id": "https://decisioninsights.ai/term/government/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/government/",
          "name": "Government"
        },
        {
          "@id": "https://decisioninsights.ai/term/indicators-of-compromise-ioc/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/indicators-of-compromise-ioc/",
          "name": "Indicators of Compromise"
        },
        {
          "@id": "https://decisioninsights.ai/term/industrial-control-systems-ics/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/industrial-control-systems-ics/",
          "name": "Industrial Control Systems"
        },
        {
          "@id": "https://decisioninsights.ai/term/optical-coherence-tomography-oct/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/optical-coherence-tomography-oct/",
          "name": "Optical Coherence Tomography"
        },
        {
          "@id": "https://decisioninsights.ai/term/phishing/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/phishing/",
          "name": "Phishing"
        },
        {
          "@id": "https://decisioninsights.ai/term/power/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/power/",
          "name": "Power"
        },
        {
          "@id": "https://decisioninsights.ai/term/802.11be-wi-fi-7/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/802.11be-wi-fi-7/",
          "name": "802.11be"
        },
        {
          "@id": "https://decisioninsights.ai/term/ai-driven/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/ai-driven/",
          "name": "AI-Driven"
        },
        {
          "@id": "https://decisioninsights.ai/term/application-binary-interface-abi/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/application-binary-interface-abi/",
          "name": "Application Binary Interface"
        },
        {
          "@id": "https://decisioninsights.ai/term/authorization/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/authorization/",
          "name": "Authorization"
        },
        {
          "@id": "https://decisioninsights.ai/term/bandwidth-on-demand/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/bandwidth-on-demand/",
          "name": "Bandwidth on Demand"
        },
        {
          "@id": "https://decisioninsights.ai/term/border-gateway-protocol-bgp/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/border-gateway-protocol-bgp/",
          "name": "Border Gateway Protocol"
        },
        {
          "@id": "https://decisioninsights.ai/term/broadband/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/broadband/",
          "name": "Broadband"
        },
        {
          "@id": "https://decisioninsights.ai/term/certification/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/certification/",
          "name": "Certification"
        },
        {
          "@id": "https://decisioninsights.ai/term/cloud/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/cloud/",
          "name": "Cloud"
        },
        {
          "@id": "https://decisioninsights.ai/term/compliance/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/compliance/",
          "name": "Compliance"
        }
      ]
    }
  ],
  "description": "Cross-site scripting (XSS) is a web application vulnerability that enables execution of attacker-controlled scripts in users’ browsers, risking account compromise and data exposure. It matters in enterprise contexts because it targets authenticated sessions in critical business applications and portals.",
  "inDefinedTermSet": {
    "@id": "https://decisioninsights.ai/term/#termset",
    "@type": "DefinedTermSet",
    "url": "https://decisioninsights.ai/term/"
  },
  "name": "Cross-Site Scripting",
  "subjectOf": [
    {
      "@id": "https://decisioninsights.ai/cisa-and-readwise-reader-android-report-multiple-stored-xss-vulnerabilities/#blogposting",
      "@type": "BlogPosting",
      "headline": "CISA and Readwise Reader Android report multiple stored XSS vulnerabilities",
      "isBasedOn": {
        "@type": "CreativeWork",
        "author": {
          "@type": "Person",
          "name": "Alex Lewis"
        },
        "sourceOrganization": {
          "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
          "name": "Department of Homeland Security"
        },
        "url": "https://kb.cert.org/vuls/id/699627"
      },
      "url": "https://decisioninsights.ai/cisa-and-readwise-reader-android-report-multiple-stored-xss-vulnerabilities/"
    },
    {
      "@id": "https://decisioninsights.ai/vu487613:-alinto-sogo-v5.12.7-vulnerable-to-cross-site-scripting-via-malformed-ics-calendar-invitations/#blogposting",
      "@type": "BlogPosting",
      "headline": "VU#487613: Alinto SOGo v5.12.7 vulnerable to cross-site scripting via malformed ICS calendar invitations",
      "isBasedOn": {
        "@type": "CreativeWork",
        "sourceOrganization": {
          "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
          "name": "Department of Homeland Security"
        },
        "url": "https://kb.cert.org/vuls/id/487613"
      },
      "url": "https://decisioninsights.ai/vu487613:-alinto-sogo-v5.12.7-vulnerable-to-cross-site-scripting-via-malformed-ics-calendar-invitations/"
    },
    {
      "@id": "https://decisioninsights.ai/cisa-issues-update-on-radware-alteon-reflected-xss-vulnerability/#blogposting",
      "@type": "BlogPosting",
      "headline": "CISA issues update on Radware Alteon reflected XSS vulnerability",
      "isBasedOn": {
        "@type": "CreativeWork",
        "author": {
          "@type": "Person",
          "name": "Timur Snoke"
        },
        "sourceOrganization": {
          "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
          "name": "Department of Homeland Security"
        },
        "url": "https://kb.cert.org/vuls/id/890999"
      },
      "url": "https://decisioninsights.ai/cisa-issues-update-on-radware-alteon-reflected-xss-vulnerability/"
    },
    {
      "@id": "https://decisioninsights.ai/cisa-issues-alert-on-log-injection-vulnerability-in-librechat-rag-api/#blogposting",
      "@type": "BlogPosting",
      "headline": "CISA issues alert on log-injection vulnerability in LibreChat RAG API",
      "isBasedOn": {
        "@type": "CreativeWork",
        "author": {
          "@type": "Person",
          "name": "Dr. Elke Drennan, CISSP"
        },
        "sourceOrganization": {
          "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
          "name": "Department of Homeland Security"
        },
        "url": "https://kb.cert.org/vuls/id/624941"
      },
      "url": "https://decisioninsights.ai/cisa-issues-alert-on-log-injection-vulnerability-in-librechat-rag-api/"
    },
    {
      "@id": "https://decisioninsights.ai/cisa-updates-vulnerabilities-and-nokia-extends-telefonica-ran-contract-november-2025-week-of-december-1-2025/#blogposting",
      "@type": "BlogPosting",
      "headline": "CISA updates vulnerabilities and Nokia extends Telefónica RAN contract November 2025 - Week of December 1, 2025",
      "url": "https://decisioninsights.ai/cisa-updates-vulnerabilities-and-nokia-extends-telefonica-ran-contract-november-2025-week-of-december-1-2025/"
    },
    {
      "@id": "https://decisioninsights.ai/cisa-adds-known-exploited-vulnerability-to-catalog/#blogposting",
      "@type": "BlogPosting",
      "headline": "CISA adds known exploited vulnerability to catalog",
      "isBasedOn": {
        "@type": "CreativeWork",
        "author": {
          "@type": "Person",
          "name": "CISA"
        },
        "sourceOrganization": {
          "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
          "name": "Department of Homeland Security"
        },
        "url": "https://www.cisa.gov/news-events/alerts/2025/11/28/cisa-adds-one-known-exploited-vulnerability-catalog"
      },
      "url": "https://decisioninsights.ai/cisa-adds-known-exploited-vulnerability-to-catalog/"
    },
    {
      "@id": "https://decisioninsights.ai/cisa-updates-advisory-on-akira-ransomware-with-new-attack-details/#blogposting",
      "@type": "BlogPosting",
      "headline": "CISA updates advisory on Akira ransomware with new attack details",
      "isBasedOn": {
        "@type": "CreativeWork",
        "author": {
          "@type": "Person",
          "name": "CISA"
        },
        "sourceOrganization": {
          "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
          "name": "Department of Homeland Security"
        },
        "url": "https://www.cisa.gov/news-events/alerts/2025/11/13/cisa-and-partners-release-advisory-update-akira-ransomware"
      },
      "url": "https://decisioninsights.ai/cisa-updates-advisory-on-akira-ransomware-with-new-attack-details/"
    },
    {
      "@id": "https://decisioninsights.ai/cisa-issues-alert-on-automated-logic-webctrl-premium-server-vulnerabilities/#blogposting",
      "@type": "BlogPosting",
      "headline": "CISA issues alert on Automated Logic WebCTRL premium server vulnerabilities",
      "isBasedOn": {
        "@type": "CreativeWork",
        "author": {
          "@type": "Person",
          "name": "CISA"
        },
        "sourceOrganization": {
          "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
          "name": "Department of Homeland Security"
        },
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-324-01"
      },
      "url": "https://decisioninsights.ai/cisa-issues-alert-on-automated-logic-webctrl-premium-server-vulnerabilities/"
    },
    {
      "@id": "https://decisioninsights.ai/cisa-issues-alert-on-cross-site-scripting-vulnerability-in-lectora-products/#blogposting",
      "@type": "BlogPosting",
      "headline": "CISA issues alert on cross-site scripting vulnerability in Lectora products",
      "isBasedOn": {
        "@type": "CreativeWork",
        "author": {
          "@type": "Person",
          "name": "Laurie Tyzenhaus"
        },
        "sourceOrganization": {
          "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
          "name": "Department of Homeland Security"
        },
        "url": "https://kb.cert.org/vuls/id/780141"
      },
      "url": "https://decisioninsights.ai/cisa-issues-alert-on-cross-site-scripting-vulnerability-in-lectora-products/"
    },
    {
      "@id": "https://decisioninsights.ai/cisa-issues-alert-on-kiwire-captive-portal-vulnerabilities-and-vendor-fixes/#blogposting",
      "@type": "BlogPosting",
      "headline": "CISA issues alert on Kiwire Captive Portal vulnerabilities and vendor fixes",
      "isBasedOn": {
        "@type": "CreativeWork",
        "author": {
          "@type": "Person",
          "name": "Christopher Cullen"
        },
        "sourceOrganization": {
          "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
          "name": "Department of Homeland Security"
        },
        "url": "https://kb.cert.org/vuls/id/887923"
      },
      "url": "https://decisioninsights.ai/cisa-issues-alert-on-kiwire-captive-portal-vulnerabilities-and-vendor-fixes/"
    },
    {
      "@id": "https://decisioninsights.ai/cisa-issues-alert-on-vulnerabilities-in-zenitel-tciv-3-devices/#blogposting",
      "@type": "BlogPosting",
      "headline": "CISA issues alert on vulnerabilities in Zenitel TCIV-3+ devices",
      "isBasedOn": {
        "@type": "CreativeWork",
        "author": {
          "@type": "Person",
          "name": "CISA"
        },
        "sourceOrganization": {
          "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
          "name": "Department of Homeland Security"
        },
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-329-03"
      },
      "url": "https://decisioninsights.ai/cisa-issues-alert-on-vulnerabilities-in-zenitel-tciv-3-devices/"
    },
    {
      "@id": "https://decisioninsights.ai/aveva-reports-vulnerability-in-application-server-ide/#blogposting",
      "@type": "BlogPosting",
      "headline": "AVEVA Reports Vulnerability in Application Server IDE",
      "isBasedOn": {
        "@type": "CreativeWork",
        "author": {
          "@type": "Person",
          "name": "CISA"
        },
        "sourceOrganization": {
          "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
          "name": "Department of Homeland Security"
        },
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-317-02"
      },
      "url": "https://decisioninsights.ai/aveva-reports-vulnerability-in-application-server-ide/"
    }
  ],
  "termCode": "XSS",
  "url": "https://decisioninsights.ai/term/cross-site-scripting-xss/"
}

CollectionPage

{
  "@context": "https://schema.org",
  "@id": "https://decisioninsights.ai/term/cross-site-scripting-xss/",
  "@type": "CollectionPage",
  "dateModified": "2026-08-24T03:12:34Z",
  "description": "Cross-site scripting (XSS) is a web application vulnerability that enables execution of attacker-controlled scripts in users’ browsers, risking account compromise and data exposure. It matters in enterprise contexts because it targets authenticated sessions in critical business applications and portals.",
  "isPartOf": {
    "@id": "https://decisioninsights.ai/#website"
  },
  "mainEntity": {
    "@id": "https://decisioninsights.ai/term/cross-site-scripting-xss/#definedterm"
  },
  "name": "Cross-Site Scripting",
  "sdDatePublished": "2026-08-24",
  "sdPublisher": {
    "@id": "https://decisioninsights.ai/#organization"
  },
  "url": "https://decisioninsights.ai/term/cross-site-scripting-xss/"
}

What we add

Graph

A glossary entry defines a term and stops there. It doesn't show where the term is actually being used or written about. We track and link every article that covers it.

BlogPosting CISA and Readwise Reader Android report multiple stored XSS vulnerabilities BlogPosting VU#487613: Alinto SOGo v5.12.7 vulnerable to cross-site scripting via malformed ICS calendar invitations BlogPosting CISA issues update on Radware Alteon reflected XSS vulnerability and 9 more on this page

Counted facts

A dictionary definition doesn't say how often a term is actually used. This counts it across the graph -- articles that mention it, open source projects tagged with it, and the organizations tagged with it, listed here alongside the count. A term has no peer companies, and nothing here claims otherwise.

Articles mentioning this entity 39 Open source projects 1 Organizations tagged 13 Organizations AppCheck, Atomicorp, Cloudbric, Cybermedia Net, Django, F5, PortSwigger, Prevoty, Secure Code Warrior, Security Journey, Signal Sciences now part of Fastly, Sucuri Security, Wallarm Related terms Related terms (co-occurring topics)

The person who sent this agent gets an answer they can act on

Somebody dispatched this agent to evaluate Cross-Site Scripting for a real decision: a shortlist, a vendor comparison, a purchase. "Cross-Site Scripting makes X" isn't something they can act on; they need to know the claim is real and where it came from. Follow one enriched link from Act 2 and see what the agent can actually hand back to them:

The record DefinedTerm Cross-Site Scripting
One of its 12 linked records BlogPosting CISA and Readwise Reader Android report multiple stored XSS vulnerabilities https://decisioninsights.ai/cisa-and-readwise-reader-android-report-multiple-stored-xss-vulnerabilities/
The primary source CreativeWork kb.cert.org https://kb.cert.org/vuls/id/699627 Original author: Alex Lewis

Our summary is written by Decision Insights Threat Desk. The source keeps its own byline, credited above. Both are in the JSON.