1. The most widespread XSS vulnerability affected 65% of all websites in 2022
2. A single XSS worm once infected 1 million social media profiles in 24 hours
3. The longest-living XSS vulnerability remained exploitable for 9 years on a major banking website