Which of the following is a type of computer security vulnerability typically found in Web applications that allow code injection by malicious Web users into the Web pages viewed by other users?

SID filtering is a Windows Active Directory security feature that strips SID history attributes on cross-domain trust boundaries, unrelated to web application code injection.

Cookie poisoning involves modifying cookie values to manipulate application behavior, but it does not inject executable code into pages viewed by other users.

Cross-site scripting (XSS) occurs when an application includes untrusted data in a web page without proper validation or encoding, allowing attackers to inject scripts that execute in other users' browsers. This can be used to steal session cookies, redirect users, or perform actions on behalf of the victim. XSS is classified as an injection vulnerability and consistently appears in the OWASP Top 10.

Privilege escalation is the act of gaining higher access rights than originally granted, which is a different category of attack and does not involve injecting code into web pages.