Performing XSS Attack On A Website

Performing XSS Attack On A Website.

Suppose,u got a website.to execute a xss command,u hv to find out an input area that will be executed in the page just after submitting the input.a search box on a website can be a nice example.we imagine,we got a site with search box.we try to execute a html line as example :
XSSED By Wax Vampire
where we hv included the "big" html tag and then submit.if we see "search result for XSSED By Wax Vampire",where sentence we injected,is in big font,then we are successful in xss attack.some often,we can insert a full html deface there.also,if we find in address bar something like this,
www. example.com/index.php?msg=please complete the box first
we try to change the sentence after msg= to our deserved one(including html tags!),and if it is executed in page,then we successfully xssed the site.we can try there with html tags too.
XSS Attack can be persistant and non persistant.
thanks for reading.
./W@X V@MP!R3