A hacking technique that leverages vulnerabilities in the code of a web application to allow an attacker to send malicious content from an end user and collect some type of data from the victim.