Top 10 web applicatioh vulnerabilities (2017 list)
Small PHP site with private/public posts to play with