XSS Hunter Express before 2021-09-17 does not properly enforce authentication requirements for paths.
- https://docs.google.com/document/d/12rq4YIFZLSmZlEsq7d7hYCI1qO5xyIxA1Wrs1m4y9-4/preview
No PoCs found on GitHub currently.