Today’s SY0-701 CompTIA Security+ Pop Quiz: Keep scrolling

An attacker has found a way to post a comment containing a hidden script on a social media site. Each user who views the comment section will automatically run the script in their own browser. Which of the following best describes this attack?