In-House Apps and Cross-site Scripting Dominate Web Security Issues
Cross-site scripting and SQL injection were revealed as still being the most common weaknesses found, with XSS making up 55% of vulnerabilities discovered by High-Tech Bridge Research in 2013, and SQL injections accounting for 20% of the total. Again, in-house web applications are the most likely to be vulnerable to these types of attacks.