Hello How are you?

 

Asume you are on a trusted website, and this website is vulnerable to persistent XSS, and is including a file from hissite.googlepages.com

If you, the victim, have GOOGLE.COM as a trusted domain, then, the script at GOOGLEPAGES.COM will be executed.