Content is hidden
Information Exposure
Cross-site scripting XSS
Insecure Direct Object Reference (IDOR)