Engineering English
Cross-site Scripting
Software Engineering · Last updated: July 30, 2026 · How this entry was written
Definition: A security vulnerability that allows attackers to inject malicious scripts into web pages viewed by other users. It typically occurs when user input is not properly sanitized before being rendered.
Example in context
“The security audit revealed that the contact form was vulnerable to cross-site scripting because it did not escape user input.”
“Güvenlik denetimi, iletişim formunun kullanıcı girdisini kaçırmadığı için siteler arası betik çalıştırmaya karşı savunmasız olduğunu ortaya çıkardı.”
Where engineers use it
Cross-site scripting appears in web application security assessments and vulnerability reports. Security engineers use it to describe a common injection flaw where scripts are stored or reflected. Understanding it is crucial for writing secure front-end and back-end code.
Synonyms: XSS
Practice: can you use “Cross-site Scripting” at work?
A developer submits code that embeds user comments directly into a page. Explain why this risks cross-site scripting and how to fix it.
Show a model answer
“We need to mitigate cross-site scripting by sanitizing all user-supplied data.”
“Cross-site Scripting” in 21 languages
| English | Cross-site Scripting |
|---|---|
| Turkish | siteler arası betik çalıştırma |
| French | scripting intersite |
| German | siteübergreifendes Skripting |
| Spanish | secuencias de comandos en sitios cruzados |
| Chinese | 跨站脚本攻击 |
| Arabic | نصوص عبر الموقع |
| Portuguese | scripting entre sites |
| Russian | межсайтовый скриптинг |
| Japanese | クロスサイトスクリプティング |
| Italian | scripting cross-site |
| Vietnamese | ký tự chéo trang web |
| Hindi | क्रॉस-साइट स्क्रिप्टिंग |
| Thai | การเขียนสคริปต์ข้ามไซต์ |
| Indonesian | skrip lintas situs |
| Korean | 사이트 간 스크립팅 |
| Bengali | ক্রস-সাইট স্ক্রিপ্টিং |
| Dutch | cross-site scripting |
| Swedish | skript över webbplatser |
| Finnish | sivustojen välinen skriptaus |
| Ukrainian | міжсайтовий скриптинг |
Frequently asked questions
What does Cross-site Scripting mean in engineering?
A security vulnerability that allows attackers to inject malicious scripts into web pages viewed by other users. It typically occurs when user input is not properly sanitized before being rendered. In Software Engineering, the term carries a usage-frequency rating of 10/10 in the Engineering English library.
How do you pronounce Cross-site Scripting?
Cross-site Scripting is pronounced /krɔːs saɪt skrɪptɪŋ/ (IPA). The Engineering English app plays audio for the term and checks your pronunciation with speech recognition.
How is Cross-site Scripting used in a sentence?
Example from an engineering context: “The security audit revealed that the contact form was vulnerable to cross-site scripting because it did not escape user input.”
This entry is one of 7,806 terms in the Engineering English iOS app — with quizzes, spaced repetition and pronunciation checking.
Get the app on the App Store