. . . "5.4.1.2 Cross-Site Scripting By using the cross-site scripting technique, an attacker might be able to execute pieces of client-side scripting languages, such as JavaScript, and steal cookies or other sensitive data." .