Content is hidden
Code Injection
Insecure Authorization
Subdomain Takeover
Broken Access Control (BAC)
Cross-site Scripting (XSS) - Stored
Broken Authentication and Session Management
Cache poisoning
Sensitive Information Leak to third-parties