Vulnerability history

Unauthenticated Stored Cross-Site Scripting via 'name' Parameter via popup-submit REST Route vulnerability

Missing Authorization to Unauthenticated Arbitrary Content Injection vulnerability

Unauthenticated DOM-Based Cross-Site Scripting via 'nx-preview' vulnerability

Missing Authorization to Authenticated (Contributor+) Analytics Reset vulnerability

Broken Access Control vulnerability

Cross Site Scripting (XSS) vulnerability

Authenticated (Admin+) Stored Cross-Site Scripting vulnerability

Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection (SQLi) vulnerability

Unauthenticated Blind SQL Injection (SQLi) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability