Meditab Software interview question

What is XSS? What is SQL Injection? Describe you finding bugs or any experience.