Vulnerability history

Hotel Manager+ SQL Injection vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Unauthenticated Insufficient Verification of Data Authenticity to Payment Bypass vulnerability

Reflected Cross-Site Scripting vulnerability

Subscriber+ Missing Authorization in Multiple AJAX Handlers vulnerability

Sensitive Data Exposure vulnerability

Cross Site Request Forgery (CSRF) vulnerability

Cross Site Scripting (XSS) vulnerability

Subscriber+ Rating Manipulation vulnerability

Cross Site Request Forgery (CSRF) Vulnerability

Missing Authorization to Authenticated (Subscriber+) User Email Retrieval vulnerability

Missing Authorization vulnerability

Local File Inclusion vulnerability

Authenticated (Subscriber+) Arbitrary File Upload vulnerability

Unauthenticated SQL Injection vulnerability

Broken Access Control vulnerability

Unauthenticated Arbitrary Settings Update vulnerability

Cross-Site Request Forgery (CSRF) vulnerability

Unauthenticated Remote Code Execution (RCE) via Arbitrary Object Deserialisation vulnerability

Cross-Site Request Forgery (CSRF) vulnerability