Web Penetration Testing - Stored Xss

What is a cross-site scripting (XSS) attack? What is the purpose of attackers?