The Open Web Application Security Project (OWASP) Top Ten is a list of the most critical web application security flaws. The list is produced by security experts from around the world every 3 years.
Here’s the current 2013 Top Ten list.
Interestingly, XSS moved from the second place to the third compared to the 2010 list.