Paycom interview question

What is the difference between SQL Injection and XSS?