I know XSS and CSRF are security issues for the attacked site (had to deal with that stuff with MantisBT somewhat recently), but can you enlighten on how XSS or

I know XSS and CSRF are security issues for the attacked site (had to deal with that stuff with MantisBT somewhat recently), but can you enlighten on how XSS or CSRF can compromise your cookies for a third party site? I didn't realize that was possible.