Cross Side Scripting

A vulnerability that allows an attacker to inject code into your site, which then gets served to a victim. This allows the attacker to run arbitrary code snippets on the victim's machine. The attacker could achieve this by providing a link that contains an HTTP GET parameter with malicious code that executes when the victim clicks on it.

You can protect against this by sanatizing all inputs before rendering them.