Content is hidden
Text Injection
Insecure Data Transport
Sensitive Data Exposure
Cross-site Scripting (XSS) - DOM
No Rate Limiting on Form
Broken Authentication and Session Management