Reflected CrossSite Scripting via mepr_screenname and mepr_key Parameters vulnerability
30 August, 2024
Broken Access Control vulnerability
26 August, 2024
Authenticated (Contributor+) Stored CrossSite Scripting via arglist Parameter vulnerability
22 May, 2024
Authenticated (Contributor+) Blind ServerSide Request Forgery via mepruserfile Shortcode vulnerability
22 May, 2024
Reflected CrossSite Scripting via message and error vulnerability
22 March, 2024