Authenticated (Contributor+) Stored CrossSite Scripting vulnerability
26 February, 2025
Admin+ Stored XSS vulnerability
14 February, 2025
Reflected CrossSite Scripting via Title Parameter vulnerability
30 January, 2025
Insecure Direct Object Reference to Submission Manipulation vulnerability
31 October, 2024
Missing Authorization to Authenticated Form Update and Creation vulnerability
28 October, 2024