In the user's messages, an insertion of javascript code is added. What could it be? Is the problem on the client or on the server?

Question

JavaScript

Here is an example of the code to be inserted:

Answer 1

More like an XSS attack.