Cross-site scripting (XSS) is mentioned in the Wikipedia page for CORS. But I don\'t see how they are related. What\'s the connection between CORS and XSS?
For example: You can inject your js code, that allows you to steal users cookies, into some page (xss). You can do this thanks to CORS.
Hope, that I am not false. Maybe someone will give you better answer.