CISA, MITRE raise alarm bells on ‘cross-site scripting’ in annual list of dangerous software weaknesses

Improper development practices that can lead to cross-site scripting vulnerabilities are the top software weakness in 2024, according to an annual list based on software security efforts led by the Cybersecurity and Infrastructure Security Agency and MITRE.

MITRE’s Common Weakness Enumeration library is funded by CISA and aimed at uncovering the root causes of defects in the widely-used Common Vulnerabilities and Exposures list for vulnerability management purposes.

“The CWE Top 25 Most Dangerous Software Weaknesses List highlights the most severe...