Most common Medium Risk security issues in the last 30 days
| Issue Type | Category | Percentage |
|---|---|---|
| Absence of Anti-CSRF Tokens | Medium | 10.82 |
| Cross-Domain Misconfiguration | Medium | 5.98 |
| CSP: Wildcard Directive | Medium | 3.13 |
| CSP: style-src unsafe-inline | Medium | 3.11 |
| CSP: script-src unsafe-inline | Medium | 2.95 |
Most common Low Risk security issues in the last 30 days
| Issue Type | Category | Percentage |
|---|---|---|
| Cross-Domain JavaScript Source File Inclusion | Low | 17.88 |
| Strict-Transport-Security Header Not Set | Low | 6.08 |
| X-Content-Type-Options Header Missing | Low | 4.60 |
| Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) | Low | 3.01 |
| Strict-Transport-Security Multiple Header Entries (Non-compliant with Spec) | Low | 2.88 |
Most common Info Risk security issues in the last 30 days
| Issue Type | Category | Percentage |
|---|---|---|
| Information Disclosure - Suspicious Comments | Informational | 11.04 |
| Retrieved from Cache | Informational | 4.92 |
| Re-examine Cache-control Directives | Informational | 3.98 |
| User Controllable HTML Element Attribute (Potential XSS) | Informational | 2.37 |
| User Agent Fuzzer | Informational | 1.53 |