What is Cross-Site scripting (XSS) ?
malicious script injected into websites
What is XSS used for?
attacker uses web application to send malicious code to a different user
How does SQL injection attack works and what is it used for?
unexpected input to a web application to gain unauthorized access to an underlying database
What can be compromised in case of web application vulnerabilities?
web front-end and backend databases