cross-site scripting (XSS) explained and demonstrated by pro hacker