cross-site scripting

Here's the scenario: Attackers compromise a major brand's Web site. But instead of stealing customer records, the attacker installs malware that infects the computers of thousands of visitors to the site. The issue goes unnoticed until it's exposed publicly.

Researchers have posted a new cross site scripting attack that could spread like a worm on Twitter.