A vulnerability that allows attackers to inject malicious code into an otherwise benign website. These scripts acquire the permissions of scripts generated by the target website and can therefore compromise the confidentiality and integrity of data transfers between the website and client. Websites are vulnerable if they display user supplied data from requests or forms without sanitizing the data so that it is not executable. (SP 800-63) (NISTIR)
Understand more election terms clearly
Get one important election term explained each week, with authoritative sources, practical context and related definitions.
A vulnerability that allows attackers to inject malicious code into an otherwise benign website. These scripts acquire the permissions of scripts generated by the target website and can therefore compromise the confidentiality and integrity of data transfers between the website and client. Websites are vulnerable if they display user supplied data from requests or forms without sanitizing the data so that it is not executable. (SP 800-63) (NISTIR)
Cite this term
Election Security Glossary. (2026). Cross Site Scripting (xss). In Election Security Glossary. Retrieved August 20, 2026, from https://electionsecurityglossary.com/glossary/cross-site-scripting-xss
Sources
01
Single-source
Get the weekly election term
Receive one cited, source-backed election explanation in your inbox each week.