Cross-site Scripting (XSS) attacks involve an attacker embedding malicious code in a trusted website, which then executes in the user's browser. The other options do not involve embedding malicious code in a trusted website.