---
title: "Hacker-Powered Data: The Most Common Security Weaknesses and How to Avoid Them"
url: "https://gosec.tv/fr/videos/hacker-powered-data-the-most-common-security-weaknesses-and-how-to-avoid-them/"
type: "video"
published: "2020-09-24T12:15:00+00:00"
modified: "2026-09-25T16:50:18+00:00"
author: "admin"
---

Miju Han uses eight years of bug bounty data to show why cross-site scripting tops real payouts and why the OWASP Top 10 is a floor, not a ceiling.

   To access this content, you must purchase [GoSec.TV membership – Individual](https://gosec.tv/product/gosec-tv-individual/) or [GoSec.TV membership – Team](https://gosec.tv/product/gosec-tv-team/).