Vulnerability history

Reflected Cross Site Scripting (XSS) vulnerability

SQL Injection vulnerability

Missing Authorization to Authenticated (Subscriber+) Arbitrary Reservation & Post Deletion vulnerability

Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Deletion vulnerability

Cross-Site Request Forgery to User Verification vulnerability

Limited Authentication Bypass due to Missing Empty Value Check vulnerability

Unauthenticated Privilege Escalation in homey_save_profile vulnerability

Privilege Escalation vulnerability