Now, an attacker would need to find somewhere to input a malicious script.

现在，攻击者需要找到某个地方来输入恶意脚本。