Cross-Site Scripting (XSS) is also called a client-side injection attack. Its purpose is to run malicious scripts on the web browser of a victim by malicious code injection. Cross-Site Scripting may not be possible using the following practices: 1) Encryption of special characters. 2) With the help of XSS HTML Filter 3) Validation of user inputs. 4) With the help of Anti-XSS services or tools