Currently small informational tidbits about Cross Site
Scripting holes exist but none really explain them to an 
average person or administrator. This FAQ was written to 
provide a better understanding of this emerging threat, 
and to give guidance on detection and prevention. 

This article also covers practicle examples of cookie
theft, and also provides tools for public use.

Read more below
The Cross Site Scripting FAQ (HTML)