Content is hidden
Cross-site scripting XSS
Sensitive Data Exposure
Application-Level Denial-of-Service (DoS)
EXIF Geolocation Data Not Stripped From Uploaded Images
Authentication Bypass
Business Logic Errors
Broken Access Control (BAC)
Other