64 percent of 1,300 Web sites run by 250 enterprises have at least one serious vulnerability. WhiteHat Security specializes in finding vulnerabilities in Web applications. The most prevalent problem is cross-site scripting, a 66 percent a Web site will have such a problem. Other common problems include information leakage issues, content spoofing, insufficient authorization and SQL injection. Only 30 percent to 60 percent of the vulnerabilities ever get fixed, WhiteHat’s CTO says. The awareness of Web-application problems “has never been higher but it needs to be a lot greater””]
Source: https://www.csoonline.com/article/2124568/web-application-errors-pose-danger-to-enterprises.html

