Get the Whitepaper called Truth of Cross Site Scripting. It gives an overview of types of cross site scripting and how the attacks are achieved.
You can download it from the following link: https://packetstormsecurity.com/files/download/162984/truth-of-xss.pdf
Source: https://packetstormsecurity.com/files/162984/Truth-Of-Cross-Site-Scripting.html