Only two things are infinite: the universe, and script kiddies, and I'm not sure about the former.
There will always be another garishly-named group willing to sql-inject and xss the low-hanging fruit.
There will always be another garishly-named group willing to sql-inject and xss the low-hanging fruit.