A type of XSS where the malicious script is stored on the server.
Stored XSS occurs when an attacker injects malicious scripts into a server-side database, which are then served to other users. For instance, a comment field in an e-commerce site could be exploited to store a script that executes whenever another user views the comment, stealing session cookies.