References
OWASP Top 10
An awareness document covering significant web application risks.
The OWASP Top 10 is a starting point for awareness and prioritization of web application risks. It is not a complete testing methodology or a guarantee of coverage.
Use it alongside verifiable requirements, threat modeling, architecture review, automated testing, and authorized manual assessment.
Open the official OWASP Top 10 page