Question

Can any one tell me how XSS (Cross site scripting) works in detail ???
please help me, i need to know about XSS in details for academic purposes.

Answer 1

http://stackoverflow.com/questions/2905886/what-makes-an-input-vulnerable-to-xss

https://www.owasp.org/index.php/DOM_Based_XSS

http://stackoverflow.com/questions/5560295/xss-practical-example

http://stackoverflow.com/questions/2047992/is-this-a-valid-xss-attack

Answer 2

Cross Site Scripting is, at it's most basic level, an issue where the users of a site that takes input from users (i.e. OpenStudy) are able to execute arbitrary JavaScript on the page by typing the script into an input box and posting that script to the server as a normal piece of content.

This opens the door for all sorts of nastiness like stealing passwords, etc, etc.