Paycom interview question

1: Talk about XSS 2: Talk about SQL injection