Xss

What is it?

[keithww]

When trying to load a readymade site onto the server I got an error message regarding php.ini file. When I asked my hosting people they said the site needed updating and was vulnerable to XSS. What does this mean please?

[coopster]

Welcome to WebmasterWorld, keithww.

XSS stands for Cross-Site Scripting. XSS attacks exploit the trust a user has for a particular site and often allow the attacker to inject their own content. It comes down to poor programming of the site.

[keithww]

Thanks Coopster,

My site is a web store. Would someone be able to divert payment or mess up the site using XSS? In other words could serious damage be caused.