Content is hidden
Sensitive Data Exposure
Information Exposure
Cross-site scripting XSS
No Rate Limiting on Form
Open Redirect
Using Components with Known Vulnerabilities
Unsecure Design
Broken Access Control (BAC)