What criteria must be met for an XXS attack to occur on a specific website?
The website must accept user input while validating it and use that input in a response.
The website must accept user input without validating it and use that input in a response.
The website must not accept user input without validating it and use that input in a response.
The website must accept user input while validating it and omit that input in a response.