The paper https://github.com/Otojon/vulnerable-application/blob/main/Analyzing%20the%20Severity%20and%20Exploit%20Complexity%20of%20Server-Side%20Web%20Application%20Vulnerabilities-1.pdf