From a high level, cross site scripting (short: XSS) can be described as the embedding of foreign code into a trusted context for execution.