DOM-based XSS
XSS
HTML Injection
IFRAME Injection
Sensitive Information Disclosure
Cookie Theft (Simulated)
Sensitive Data in URL
Source Code Disclosure
Insecure Direct Object Reference (IDOR)
Insecure Forms
Login Bypass
Login Bypass 2
Captcha Bypass
Open Redirect
Clickjacking
Client Side Request Forgery
Improper Input Validation
HTTP Parameter Pollution