A malicious user manages to get code (script) to execute by masking it as user input from a form or as a link.

• 恶意用户设法获取要执行的代码(脚本),方法是将其屏蔽为窗体中的用户输入或屏蔽为链接。