The user search functionality is vulnerable to SQL injection attacks, allowing unauthorized access to user data.

Cross-site scripting vulnerability in the comments section allows attackers to inject malicious scripts.

Endpoints are not properly validating user permissions, allowing access to other users' data.

A logic flaw in the authentication system allows bypassing 2FA under specific conditions.