Vulnerability history

Unauthenticated Stored Cross-Site Scripting vulnerability

Arbitrary File Upload vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Cross Site Scripting (XSS) vulnerability

Authenticated (Contributor+) PHP Object Injection to Arbitrary File Deletion via 'unfurl_data' Parameter vulnerability

Podcast Contributor/Group/Role Creation and Deletion vulnerability

Cross Site Scripting (XSS) vulnerability

Unauthenticated Arbitrary File Upload vulnerability

Open Redirection Vulnerability

Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability

Cross-Site Request Forgery via ajax_transcript_delete Function vulnerability

Authenticated (Admin+) Stored Cross-Site Scripting via Feed Name vulnerability

Admin+ Remote Code Execution (RCE) vulnerability

CSRF to Remote Code Execution (RCE) vulnerability

Cross Site Scripting (XSS) vulnerability

Server Side Request Forgery (SSRF) vulnerability

Broken Access Control vulnerability

Broken Access Control vulnerability

SQL Injection vulnerability

Reflected Cross Site Scripting (XSS) vulnerability

Missing Authorization to Unauthenticated Data Export vulnerability

Missing Authorization to Settings Import vulnerability

Cross Site Request Forgery (CSRF) vulnerability

Cross Site Scripting (XSS)

SQL Injection (SQLi) vulnerability

SQL injection (SQLi) vulnerability

Multiple Vulnerabilities