Web Penetration Testing - Motivations Of Attackers

What is a cross-site scripting (XSS) attack? What is the purpose of attackers?