Site-specific Cross-site Scripting Vulnerabilities

During the last six months of 2007, there were 11,253 site-specific cross-site scripting vulnerabilities that were documented by the XSSed project. At the time of writing, only 473 of these vulnerabilities had been fixed by the maintainer of the affected Web site. In the first six months of 2007, the total was 6,961, although data collection only began in February, which factors into the lower total. Of the 6,961, only 330 had been fixed at the time of writing.

Symantec Internet Security Threat Report, Vol. XIII