Identify the web application attack where the attackers exploit vulnerabilities in dynamically generated web pages to inject client-side script into web pages viewed by other users.

SQL injection targets back-end database queries by injecting malicious SQL syntax, not client-side scripts delivered to other users' browsers.

XSS exploits insufficient output encoding or input validation in web applications to inject malicious JavaScript or HTML into pages served to other users. When a victim's browser renders the page, it executes the attacker's script in the context of the trusted site, enabling session hijacking, credential theft, or defacement. This precisely matches the description of exploiting dynamically generated pages to inject client-side script.

LDAP injection manipulates LDAP queries sent to directory services by injecting special characters, affecting server-side directory lookups rather than injecting client-side scripts.

CSRF tricks an authenticated user's browser into sending unintended requests to a trusted site, but does not involve injecting scripts into web pages viewed by other users.