Cross-site scripting (XSS) errors that allow attackers to inject malicious code into otherwise benign websites continue to be the most common web application vulnerability across organizations. Bug bounty firm HackerOne recently analyzed data on more than 120,000 security vulnerabilities reported to organizations through the end of 2018 by the hacker community via public and private bug bounty programs.

Read full article on Dark Reading