Which of the following attack types BEST describes a client-side attack that is used to manipulate an HTML iframe with JavaScript code via a web browser?

Buffer overflow attacks exploit memory vulnerabilities by writing more data to a buffer than it can hold, corrupting adjacent memory, and are not specific to client-side HTML/JavaScript manipulation.

Man-in-the-Middle (MITM) attacks involve an attacker intercepting and potentially altering communications between two parties, which is different from directly manipulating a client's web browser content with injected scripts.

Cross-Site Scripting (XSS) is a client-side web application vulnerability that allows attackers to inject malicious scripts, typically JavaScript, into web pages viewed by other users. These injected scripts execute in the victim's browser, enabling manipulation of the Document Object Model (DOM), including HTML elements like iframes, to steal session cookies, deface websites, or redirect users.

SQL Injection (SQLi) is a server-side attack where an attacker injects malicious SQL code into input fields to manipulate or retrieve data from a backend database, not a client-side browser attack manipulating HTML iframes.