What is Cross-site scripting?

Cross-site scripting is a vulnerability in which an attacker gets their script executed in another user’s browser in the context of a trusted site, usually because input was rendered without escaping.