| Directory Traversal | |
| Missing Authorization | |
| Cross-site Scripting (XSS) | |
| Inefficient Regular Expression Complexity | |
| Directory Traversal | |
| Arbitrary Code Injection | |
| Cross-site Scripting (XSS) | |
| Cross-site Scripting (XSS) | |
| Cross-site Scripting (XSS) | |
| Incomplete Blacklist | |
| Cross-site Scripting (XSS) | |
| Information Exposure | |
| Time-of-check Time-of-use (TOCTOU) | |
| Improper Privilege Management | |
| Inefficient Regular Expression Complexity | |
| Information Exposure | |
| Cross-site Scripting (XSS) | |
| Cross-site Scripting (XSS) | |
| Cross-site Scripting (XSS) | |
| Cross-site Request Forgery (CSRF) | |
| Information Exposure | |
| Incorrect Authorization | |
| Information Exposure | |
| Insufficient Session Expiration | |
| Directory Traversal | |
| Information Exposure | |
| Incorrect Authorization | |
| Directory Traversal | |
| Incorrect Authorization | |
| Reliance on Untrusted Inputs in a Security Decision | |
| Missing Authorization | |
| Incorrect Privilege Assignment | |
| Missing Authorization | |
| Improper Privilege Management | |
| Cross-site Scripting (XSS) | |
| Missing Authorization | |
| Incorrect Authorization | |
| Information Exposure | |