Authenticated (Contributor+) Stored DOMBased CrossSite Scripting via FancyBox JavaScript Library
3 December, 2024
Author+ Stored XSS vulnerability
11 September, 2024
Broken Access Control vulnerability
26 August, 2024
CSRF leading to notice dismissal vulnerability
20 June, 2024
Missing Authorization to Gallery Modification vulnerability
8 January, 2024