Cross-site scripting: What is it? Cross-site scripting is one of the biggest, most persistent threats on the internet. Are you at risk for an XSS attack?