Content is hidden
Race Conditions
Tabnabbing
Unsecure Design
No Rate Limiting on Form
Violation of Secure Design Principles
Other
File Inclusion (No execution)
Unsafe File Upload
Cross-site scripting XSS