XSS is a vulnerability that allows attackers to inject malicious scripts into web pages viewed by others.