Web-based Security Flaws: Due to their partly web-based nature, hybrid applications are vulnerable to web-based threats such as injection attacks and cross-site scripting (XSS).