XSS Hunter Express prior to 2021-09-17 does not properly enforce authentication requirements for paths.
xss hunter express project xss hunter express