Tahmid Akbar Omim

Cross-site Scripting (XSS) is possible, which occurs when an application includes untrusted data in a web page without proper validation or escaping, allowing an attacker to execute malicious scripts in the victim's browser.

Incorrect access control allows cross-site scripting (XSS), a technique where malicious scripts are injected into otherwise trusted websites.