Please check below article for implementation detail:https://aeminmyway.blogspot.com/p/how-to-display-list-of-children-under.html 

Please check below documentation URL:https://experienceleague.adobe.com/docs/experience-manager-65/administering/contentmanagement/tags.html?lang=en#managing-tags-in-different-languages 

Please check below URL's:https://experienceleaguecommunities.adobe.com/t5/adobe-experience-manager/difference-between-scr-as-well-as-r6-annotation/qaq-p/323309https://cqdump.joerghoh.de/2019/01/03/from-scr-annotations-to-osgi-annotations/https://medium.com/adobetech/using-the-osgi-declarative-servic...

@v1101 Can you check if you are using OOTB template or your own. Also please check if template's sling:resourceType points to the correct page component. Ensure you have proper user permissions to perform this task.

Can you please check below Thread for same issue:https://github.com/Adobe-Consulting-Services/acs-aem-commons/issues/1965 

You can check for Tools available for Website Penetration Testing to validate your sites for Vulnerabilities.

Please check below article to have clarity of Sling Model:https://aem.redquark.org/2018/10/day-10-getting-to-know-sling-models.html 

Please refer below articles:https://pentest-tools.com/blog/xss-attacks-practical-scenarios/https://experienceleaguecommunities.adobe.com/t5/adobe-experience-manager/how-to-protect-aem-websites-from-cross-site-scripting-xss-aem/td-p/387608https://experienceleaguecommunities.adobe.com/t5/adobe-experie...

Upgrade Service Pack to 6.5.5.0.

Please check below Reference articles:https://jackrabbit.apache.org/oak/docs/security/user/expiry.htmlhttps://experienceleaguecommunities.adobe.com/t5/adobe-experience-manager/aem-user-password-expiry/qaq-p/192989