Insecure Direct Object Reference to Authenticated (Custom+) Arbitrary Post/Page Updates vulnerability
5 days ago
Authenticated (Custom+) Stored CrossSite Scripting via Album Title Size vulnerability
5 days ago
Reflected CrossSite Scripting vulnerability
4 March, 2025
Authenticated (Contributor+) Stored CrossSite Scripting via Gallery Custom URL vulnerability
14 June, 2024
Authenticated (Author+) Stored CrossSite Scripting via Image Attachment Fields vulnerability
8 April, 2024