An XSS vulnerability can allow an untrusted user to take data from other users' session cookies or sensitive data and use it on web pages they create. An XSS vulnerability can also allow an attacker to take over a site or application that an administrative or highly privileged user is using.