Cross site scripting (XSS) is identified as one of the main threats to web users by the OWASP Foundation. XSS occurs when a malicious third party injects a script into content served by your website.
In computer programming, a script is a program or sequence of instructions that another program interprets or carries rather than the computer processor doing it (as with a compiled program).