That's my understanding of the popular usage, however I have noticed people also using it to refer to people who take advantage of known security issues using "

That's my understanding of the popular usage, however I have noticed people also using it to refer to people who take advantage of known security issues using "simplistic" programming languages and techniques. IE, a script kiddie is more likely to use python or php to SQL inject than to execute a timing attack against a crypto library.