Cross-Site Scripting, or XSS, is a type of security vulnerability often found in web applications. XSS attacks occur when an attacker injects malicious scripts into web content, which runs in the end user's browser, potentially leading to unauthorised access to sensitive information.