riskfindingfound by
highAPI key visible in the frontendscan
highAdmin page missing access checkhuman
medNo limit on login attemptsscan
medOther users' data visible by changing a URLhuman
lowError pages reveal internal detailsscan
example layout: replace with real findings