Authenticated (Contributor+) Stored CrossSite Scripting via Gallery Custom URL vulnerability
14 June, 2024
Authenticated (Author+) Stored CrossSite Scripting via Image Attachment Fields vulnerability
8 April, 2024
Authenticated Stored CrossSite Scripting vulnerability
14 February, 2024
Reflected Cross Site Scripting (XSS) vulnerability
29 September, 2023
Cross Site Request Forgery (CSRF) vulnerability
29 September, 2023