Open Web Application Security Project (OWASP) members say app security is half a decade behind where it should be. “Web 2.0″ can refer to browser plug-ins and client-side techs used for rich internet apps has seen their share of vulnerabilities. The risk there — particularly on a wiki — is that you don’t have any control over the content being supplied. Many of these applications have a long history of insecurity and are subject to worms and worse, all of which have the potential to damage your online brand.”]
Source: https://www.csoonline.com/article/2124547/6-steps-to-pull-app-security-back-to-the-future.html