Web application vulnerabilities

The application accepts user-supplied session identifiers and does not regenerate the session ID after authentication. This allows an attacker to predefine a session ID and reuse it after victim authentication, resulting in session takeover.

An attacker can construct a request that, if issued by another application user, will cause JavaScript code supplied by the attacker to execute within the user's browser in the context of that user's session with the application. This is a classic cross-site scripting (XSS) vulnerability.

The application uses unsafe functions that allow execution of inline scripts and string evaluation functions. This may lead to execution of untrusted JavaScript code.

Attackers inject malicious scripts (e.g., JavaScript) into the target system. When other users visit infected pages, the scripts execute in their browsers, enabling cookie theft, session hijacking, and content tampering.

Cross-site Scripting (XSS) vulnerability due to improper neutralization of input during web page generation (CWE-79).

Multiple Cross-site Scripting (XSS) vulnerabilities due to improper neutralization of input during web page generation (CWE-79).

The web application allows an unauthenticated remote attacker to learn information about existing user accounts with their corresponding role due to missing authentication for critical function.