In a attack, the attacker attempts to use scripting commands in the url itself, or through a device, such as a web form, to gain administrator, or some other elevated level of user privileges in an attempt to force the victim's server to display the desired data on screen.

In a cross-site scripting attack, the attacker attempts to use scripting commands in the URL itself, or through a device, such as a web form, to gain administrator, or some other elevated level of user privileges in an attempt to force the victim's server to display the desired data on screen. Malicious scripts are injected into otherwise benign and trusted websites during this type of attack.

When you ask a question you should see a camera at the bottom left, click on it and take your photo!

The answer is phishing : )