with easy-to-find vulnerabilities, and it is often a target for
beginning researchers. The large number of these ‘fish-in-abarrel’ applications is probably a major contributor to the overall
trends.
3) With XSS, every input has the potential to be an attack vector,