Top Ten Most Critical Web Application Security Risk

OWASP has officially released the Top Ten Most Critical Web Application Security Risk for 2013.
The Open Web Application Security Project (OWASP) Top Ten represents a broad consensus about what the most critical web application security flaws are.
The OWASP Top 10 - 2013 is as follows:
A1 Injection
A2 Broken Authentication and Session Management
A3 Cross-Site Scripting (XSS)
A4 Insecure Direct Object References
A5 Security Misconfiguration
A6 Sensitive Data Exposure
A7 Missing Function Level Access Control
A8 Cross-Site Request Forgery (CSRF)
A9 Using Known Vulnerable Components
A10 Unvalidated Redirects and Forwards