A malicious user manages to get code (script) to execute by masking it as user input from a page or as a link.

• 恶意用户设法获取要执行的代码(脚本),方法是将其屏蔽为页面中的用户输入或屏蔽为链接。