XSS that is reflected (AKA Non-Persistent or Type I)
XSS that has been saved (AKA Persistent or Type II)
XSS in the DOM (AKA Type-0)