In particular, the number of cross-site scripting (XSS) vulnerabilities has remained largely stable, accounting for 18% of all vulnerabilities found.
This is consistent with reports by white hat hacking community platform HackerOne that XSS is the most commonly exploited vulnerability across all vulnerability hunting deployments.
This is despite XSS being listed in the Owasp top 10 security problems for a number of years and the availability of guidance on how to avoid it.
