How does XSS work?

Question

Can someone explain how XSS works in plain english? Maybe with an example. Googling didn\'t help much.

Answer 1

An XSS vulnerability exists whenever a string from outside your application can be interpreted as code.

For example, if you're generating HTML by doing this:

then if the $myQueryParameter variable contains a