Which attack vector involves an attacker injecting malicious scripts into benign and trusted websites, which are then executed by the victim's browser?