Which of the following is a type of web application vulnerability where malicious scripts are injected into legitimate and trusted websites?