In this course, we will cover several secure coding vulnerabilities. In our first module, we cover SQL injection vulnerabilities, which are some of the most well-known and common vulnerabilities in existence. We describe what they are, how they work, how they can be exploited and steps that can be taken to fix them. A case study featuring Starbucks demonstrates how a small mistake can have big consequences. In module two, we move focus on cross-site scripting (XSS) vulnerabilities. XXS vulnerabilities are commonly underrated despite being the most common source of bug bounty payouts. This course describes the different types of XSS vulnerabilities, how to identify and mitigate them, and how they can be exploited to create big-name breaches like the ones pulled off by the Magecart Group. In our final module of the course, we cover cross-site request forgery (CSRF) vulnerabilities , which can force a user to take undesired actions on their account. These vulnerabilities can be easy to identify but harder to fix, since some seemingly logical solutions simply don’t work. This course discusses how the vulnerability works and the best ways to develop resilient code.