Content is hidden
Open Redirect
Authentication Bypass
Cross-site scripting XSS
Information Exposure
Insecure Authorization
Lack of Password Confirmation
Server-Side Request Forgery (SSRF)
Lack of Rate Limiting Protections (i.e. CAPTCHA)
Privilege Escalation