Bob is staging an attack against Alice's website. He is able to embed a link on her site that will execute malicious code on a visitor's machine, if the visitor clicks on the link. This is an…

Cross-site scripting (XSS) attacks occur when an attacker injects malicious scripts into content on a trusted website. When a victim's browser executes the malicious script embedded in the legitimate site, it can steal session cookies, deface websites, or redirect the user to malicious sites, matching the scenario of executing malicious code on a visitor's machine via a link.

Broken authentication/session management refers to vulnerabilities in how user identities are confirmed or sessions are managed, leading to unauthorized access.

Security misconfiguration refers to incorrectly configured security settings, default configurations, or insecure permissions on servers, applications, or devices.

Insecure cryptographic storage involves sensitive data being stored without proper encryption or with weak encryption algorithms.