Something phish-y

Phishing is the fraudulent acquisition, through deception, of sensitive personal information such as passwords and credit card details, by masquerading as someone trustworthy with a real need for such information.

Banks and financial institutions are prone to phishing attacks caused by cross site scripting (XSS) and script injection

Web programmers can prevent most cross-site scripting attacks by validating form input, and ensuring that all user data is correctly encoded before it is displayed or stored. "Never trust user input" is a basic security tenet designed to reduce the risk posed by web forms.