Vulnerability history

Authenticated (Sales Representative+) Arbitrary File Deletion vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Privilege Escalation to Support User Identity Confusion vulnerability

Authenticated (Custom+) Privilege Escalation to 'user' Parameter vulnerability

Sensitive Data Exposure vulnerability

SQL Injection vulnerability

Authenticated (Sales Person+) Privilege Escalation vulnerability

Path Traversal vulnerability

Open Redirect vulnerability

Unauthenticated Stored XSS vulnerability

Authenticated (Vendor+) SQL Injection via 'tag_query' Parameter vulnerability

Insecure Direct Object Reference vulnerability

Arbitrary File Deletion vulnerability

Authenticated (Custom+) SQL Injection vulnerability

SQL Injection vulnerability

Authenticated (Sales Rep+) SQL Injection vulnerability

Authenticated (Marketer+) SQL Injection vulnerability

Authenticated (Custom+) SQL Injection vulnerability

Broken Access Control vulnerability

Arbitrary File Deletion vulnerability

Cross Site Scripting (XSS) vulnerability

Authenticated (Admin+) SQL Injection vulnerability

PHP Object Injection vulnerability

Arbitrary File Upload vulnerability

Authenticated (Administrator+) Arbitrary File Deletion vulnerability

Authenticated (Administrator+) Stored Cross-Site Scripting via label Parameter vulnerability

Authenticated (Author+) Arbitrary File Upload via gh_big_file_upload Function vulnerability

Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting (XSS) vulnerability

Cross Site Request Forgery (CSRF) vulnerability

Cross Site Scripting (XSS) vulnerability

SQL Injection vulnerability

Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery to Privilege Escalation vulnerability

Multiple Missing Authorization vulnerability

Auth. Stored Cross-Site Scripting (XSS) vulnerability

Admin+ SQLi vulnerability