Cross-site scripting is a web application which allow code injection by malicious web users.