vendor x Web Application Vulnerabilities