Adam is evaluating the security of a web server before it goes live. He believes that an issue in the code allows a cross$-$site scripting attack against the server. What term describes the issue that Adam discovered?

Question $2$ options:

Threat

Vulnerability

Risk

Impact