| Missing Encryption of Sensitive Data | |
| Open Redirect | |
| Open Redirect | |
| Uncontrolled Recursion | |
| Insufficiently Protected Credentials | |
| Directory Traversal | |
| Improper Handling of Insufficient Permissions or Privileges | |
| Improper Neutralization of Special Elements Used in a Template Engine | |
| Improper Neutralization of Special Elements Used in a Template Engine | |
| Improper Neutralization | |
| Insufficient Compartmentalization | |
| Arbitrary Code Injection | |
| Incorrect Resource Transfer Between Spheres | |
| Cross-site Scripting (XSS) | |
| Cross-site Scripting (XSS) | |
| Information Exposure | |
| Information Exposure | |
| Insufficient Verification of Data Authenticity | |
| Information Exposure | |
| Open Redirect | |
| Use of a Broken or Risky Cryptographic Algorithm | |