In which of the following exploits does an attacker insert malicious code into a link that appears to be from a trustworthy source?

Cross-Site Scripting (XSS) attacks inject malicious scripts into web pages viewed by other users. The attacker crafts a malicious link that appears to come from a trusted source (the vulnerable website), and when victims click it, the script executes in their browsers with the site's permissions. Buffer overflows (B), command injection (C), and path traversal (D) are different vulnerability classes.