The attempt to increase awareness about how trouble-free it is for a professional hacker to exploit a vulnerable web application does not seem to be going too far. The “We’ll see when I get hacked” mentality was very common to hackers and still lingering among site owners who ultimately jeopardize losing big chunks of money and also the trust of their clients. Any person with the importance to research this problem will see how even those saying to be security experts feel at ease to say that XSS is over-rated and cannot really be used to achieve serious results on a web application.

However further research will also prove that statistical figures speak for themselves, and those same statistics keep growing at a rate which will eventually overcast the claims of those incredulous “experts”.