Content is hidden
Broken Access Control (BAC)
Spoof HTML Content
OAuth Misconfiguration
Using Components with Known Vulnerabilities
Sensitive Data Exposure
Cross-site Scripting (XSS) - Reflected
Login Credentials
Cross-site Scripting (XSS) - Generic
Information Exposure
Unauthenticated Action