George obtains code that steals user session keys. He is able to post the code on a compromised website where Alice has an account. When she accesses the site he session key is sent to George? What type of attack is this ?
SQL Injection
Cross site scripting (XSS)
Buffer Overflow
None of the choices