| URL Redirection to Untrusted Site ('Open Redirect') | low |
| Permissive List of Allowed Inputs | low |
| Permissive List of Allowed Inputs | low |
| Missing Encryption of Sensitive Data | medium |
| Missing Encryption of Sensitive Data | medium |
| Missing Authentication for Critical Function | high |
| Missing Authentication for Critical Function | medium |
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | medium |
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | low |
| Cleartext Transmission of Sensitive Information | medium |