📎

In depth explaination

We have to differentiate between cross site scripting XSS and remote code execution RCE attacks.

<?php echo $_GET["argument"]; ?> 
<?php system($_GET["argument"]); ?>
<?php eval($_GET["argument"]); ?>