Question: is xss client or server side?
Answer: An XSS attack is not much different from an SQL injection. Both are caused by not controlling user input properly. XSS attacks are generally stored in your database and distributed through your system to your clients. ... Its a server-side vulnerability that can be exploited via client-side applications.