What happens when an application takes user inputted data, and sends it to a web browser without proper validation and escaping?
A. Cross Site Scripting
B. Broken Authentication and Session Management
C. Insecure Direct Object References
D. Security Misconfiguration