Typo fix in "cross site script" warning type.

Added a hyphen to the warning type. Sorry. I know it's nit-picky. (https://www.owasp.org/index.php/Cross-site_Scripting_(XSS))