Security Audit Prompt

Perform a security audit on this [language] code:
```
[code]
```
Check for: SQL injection, XSS, CSRF, insecure deserialization, broken authentication, sensitive data exposure, XML/JSON injection, rate limiting gaps, hardcoded secrets, and OWASP Top 10. For each vulnerability: severity (Critical/High/Medium/Low), CVSS score estimate, exploitation scenario, and remediation code.