| Incorrect Privilege Assignment | |
| Use of Incorrectly-Resolved Name or Reference | |
| Insufficient Granularity of Access Control | |
| Insufficient Granularity of Access Control | |
| Use of Password Hash With Insufficient Computational Effort | |
| Improper Input Validation | |
| Cross-site Request Forgery (CSRF) | |
| Improper Authentication | |
| Cross-site Scripting (XSS) | |
| Resource Exhaustion | |
| Cross-site Scripting (XSS) | |
| Cross-site Scripting (XSS) | |
| Cross-site Scripting (XSS) | |
| Cross-site Scripting (XSS) | |
| Cross-site Scripting (XSS) | |
| Cross-site Scripting (XSS) | |
| Cross-site Scripting (XSS) | |
| Cross-site Scripting (XSS) | |
| Cross-site Scripting (XSS) | |
| Arbitrary Code Injection | |
| Information Exposure Through Log Files | |