1 CVE of this weakness class.
Exploitation first, with newly exploited CVEs rising above old ones
The admin panel lacks standard security headers, enabling clickjacking and cross-site scripting attacks.