I got security issue in our application. I am not understanding below question, Please any one let me know, what it is and how to solve this generic issue? How to scan website with security related tools?
Thread – XSS vulnerabilities occur when the Web application echoes user-supplied data in an HTML response sent to the Web browser. For example, a Web application might include the user’s name as part of a welcome message or display a home address when confirming a shipping destination. If the user-supplied data contain characters that are interpreted as part of an HTML element instead of literal text, then an attacker can modify the HTML that is received by the victim’s Web browser.
Ex: http://mydomain/Products.aspx?category=%22%20onEvent%3dX151232644Y1Z%20&name=Healthcare
OWASP goes into some great detail on the subject in their “XSS (Cross Site Scripting) Prevention Cheatsheet“.