Vulnerability history

Sensitive Data Exposure Vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Cross Site Scripting (XSS) Vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via button_label Parameter vulnerability

Authenticated (Contributor+) Cross-Site Scripting vulnerability

Authenticated (Administrator+) Stored Cross-Site Scripting vulnerability

Auth. Directory Traversal to Arbitrary File Read vulnerability

Cross Site Scripting (XSS) vulnerability

Contributor+ Stored XSS vulnerability

PHAR Deserialization via Cross-Site Request Forgery (CSRF) vulnerability

Directory Traversal vulnerability

Authenticated Arbitrary File Read vulnerability

Authenticated SQL Injection (SQLi) vulnerability

Local File Inclusion

PHP Upload

File Upload