CSRF, XSS, limitations bypass.
vulners.com/securityvulns/securityvulns:doc:31979
vulners.com/securityvulns/securityvulns:doc:31980
vulners.com/securityvulns/securityvulns:doc:31981