Content is hidden
Content Spoofing
Unsecure Design
Business Logic Errors
Violation of Secure Design Principles
Cross-site Scripting (XSS) - Stored
CRLF Injection
Improper Access Control
Cross-site scripting XSS