Web security still outstandingly mediocre, experts report

XSS marks the spot

Black Hat EU Cross-site scripting (XSS) vulnerabilities continue to dominate the list of most common vulnerabilities found in real-world tests."