solecist.net

You must know the rules to break them creatively.
(a wholly-owned subsidiary of domesticat.net. Send comments here.)
Tue Oct 14
XSS (Cross Site Scripting) Cheat Sheet

Not a full explanation of how XSS works, but some exploits giving you an idea of how they work.