How cross-site scripting attacks work, why they're common, and how attackers use them to target users.