Skip to content

Comment on 16% of web vulnerabilities are still XSS

Comments

Big variance in vulnerability seriousness across that spectrum... but if you've found 100K+ vulns and 2.5% are SQL injection, that's a lot of big holes!

Yup! Some of those are less serious than others, though all are a beachhead you don't want available to an attacker. And SQLi, I agree, is among the worst.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.