Content is hidden
Use of Insufficiently Random Values
Broken Authentication and Session Management
Broken Access Control (BAC)
Cross-site scripting XSS