XSS attacks are being used in combination with spear phishing, social engineering and drive-by attacks