SAP Interview Question

SQL injection and XSS cause and fix