Content is hidden
Sensitive Data Exposure
Business Logic Errors
OAuth Misconfiguration
Improper Access Control
Cache poisoning
Cross-site Scripting (XSS) - Reflected
Token is Not Invalidated After Use
Unsecure Design
Privilege Escalation
Information Exposure