Please click this link below to give you the basic idea about this type of security attack on the websites.
XSS - Cross Site Scripting explained in cartoon.