Translations:Cross-site scripting/9/en

The attacker sends the victim to a URL such as: