Cross-site scripting is a security vulnerability which is basically allowing an attacker to execute potentially malicious script code in the website visitor's browser.