Which of the following attack types BEST describes a client-side attack that is used to mandate an HTML iframe with JavaScript code via web browser?

Buffer overflow is a memory corruption vulnerability where data overwrites adjacent memory buffers, typically leading to server-side application crashes or arbitrary code execution, not client-side browser script injection.

Man-in-the-Middle (MITM) describes an attack where an attacker intercepts communication between two parties, but it refers to the interception method rather than the specific client-side script injection vulnerability itself.

Cross-Site Scripting (XSS) is a client-side code injection attack where an attacker injects malicious scripts, typically JavaScript, into a legitimate website or web application. These scripts are then executed by the victim's web browser, allowing the attacker to manipulate the DOM, such as mandating an HTML iframe, steal session cookies, or redirect users.

SQL Injection (SQLi) is a code injection technique used to attack data-driven applications by inserting malicious SQL statements into an entry field for execution by the database, not for client-side browser manipulation.