What is Cross-Site Scripting (XSS)?

• A.An attack where a forged request is sent from a logged-in browser to a payment site, potentially triggering an unwanted transfer of funds from the victim
• B.An attack where malicious scripts are injected into web pages viewed by other users, potentially stealing session data or cardholder information
• C.An attack where crafted operating system commands are passed through form fields, potentially giving the intruder shell access to the web server hosting the checkout
• D.An attack where a flood of requests is sent to the checkout page, potentially making the payment service unavailable