You can use selectors to gain some information about things like input fields, e.g. https://www.invicti.com/blog/web-security/private-data-stolen-exploiting-css

You can use selectors to gain some information about things like input fields, e.g. https://www.invicti.com/blog/web-security/private-data-stolen-exploiting-css-injection https://www.invicti.com/blog/web-security/private-data-stole... Or I guess you could completely restyle and change the text of UI elements so it looks like the user is doing one thing when they're actually doing something completely different like sending you money