An analysis of many recent studies suggests that over 80 percent of applications contain simple vulnerabilities. Threat agents have been wildly successful at exploitation because virtually all web applications have simple flaws that allow them to be compromised. “There are two kinds of people: those who know that their code is insecure and those who don’t,” says Jeff Williams-founder of the Open Web Application Security Project (OWASP) “Jeff Williams is both a co-founder and co-chair of the OWASP””]
Source: https://www.inforisktoday.com/blogs/5-application-security-tips-p-1156