XSS attacks can be anything. This script steals the user's cookies.