Content is hidden
Cross-site Scripting (XSS) - DOM
Business Logic Errors
Weak Registration Implementation
Subdomain Takeover
Server Security Misconfiguration
Broken Access Control (BAC)