Question

From the list of OWASP Top 10 vulnerabilities, which one should be given more considerations and why? Articulate your answers with an example.

Answer 1

Answer:---------
OWASP Top 10 vulnerabilities:----------

1. Injection
2. Broken Authentication.
3. Sensitive Data Exposure.
4. Security Misconfiguration
5. XML External Entities (XXE).
6. Broken Access Control.
7. Cross-Site Scripting XSS.
8. Insecure Deserialization.
9. Using Components with Known Vulnerabilities.
10. Insufficient Logging & Monitoring.

Cross Site Scripting (XSS) should be more considerable because It is a widespread vulnerability that affects many web applications. XSS attacks consist of injecting malicious client-side scripts into a website and using the website as a propagation method. The risks behind XSS is that it allows an attacker to inject content into a website and modify how it is displayed, forcing a victim’s browser to execute the code provided by the attacker while loading the page.