In a attack, the attacker attempts to use scripting commands in the url itself, or through a device, such as a web form, to gain administrator, or some other elevated level of user privileges in an attempt to force the victim's server to display the desired data on screen.

In a cross-site scripting attack, the attacker attempts to use scripting commands in the URL itself, or through a device, such as a web form, to gain administrator, or some other elevated level of user privileges in an attempt to force the victim's server to display the desired data on screen. Malicious scripts are injected into otherwise benign and trusted websites during this type of attack.

To level up and to reward the people who answer your questions 

Music would be the most troublesome for film editors