[gallypette]

Saying XSS is not serious is encouraging those bad behaviors; XSS are actually serious flaws when properly exploited (http://beefproject.com/).

[orf]

Sure it's serious in its own way, but not on the same level as SQL injection.