Your question is Security Review of Vulnerabilities. Take a moment with it on the right.
Talk me through your thinking if you like. When you're confident, submit your answer and I'll grade it like a real screen (7/10 or better passes).
How did you find the vulnerabilities in this example application, what vulnerabilities did you find, and how would you fix them?
Treat the application as a black-box and white-box security review. Explain your investigation workflow, show how you would validate findings without causing harm, and distinguish confirmed vulnerabilities from false positives.
Discuss prioritization, remediation, verification, and how you would prevent regressions.