Explain Cross-Site Scripting (XSS) to a non-technical project manager and describe how to prevent it.