Cross Site Scripting

I can't remember where but I read there are now more Cross Site Scripting attacks now than SQL injections. When I read that at the time, I thought why do I just keep on reading about SQL injections, well here is one informative post on old and new forms XSS.