Content is hidden
Information Exposure
Cross-site Scripting (XSS) - Reflected
Action-Specific
Using Components with Known Vulnerabilities
Violation of Secure Design Principles
Content Spoofing
Lack of Security Headers
Sensitive Data Exposure
Sensitive Data Hardcoded