[lima]

JavaScript is commonly used for writing server software or even systems software nowadays.

Also, an exploitable XSS in your web application can be just as damaging as a server compromise.

[enraged_camel]

Can XSS be used to drop your Users table?