Which of the following is/are known as Cross-site scripting (XSS) attacks?

These attacks bypass the application's input or output filters to execute malicious scripts in the browser of the application's user.

The attackers use automated tools to guess passwords that use known dictionary words or that are otherwise predictable.

This attack bypass the application's input filters to gain unrestrained access to the underlying database.

Both (1) and (3)

None of the above