I'm having a problem understanding the Scope of an XSS attack. Does an XSS attack work only on user inputs that lead to dynamic page scripting or all user inputs (like any text box that writes data to a database)... Assuming that the data will be used again later to script other pages (like welcome : 'malicious input')....
I shall be better than me.