Vulnerability history
1 present
23 patched
Missing Authorization to Unauthenticated Limited File Upload vulnerability
5.3
28 July, 2025
Cross Site Scripting (XSS) vulnerability
6.5
4 April, 2025
Authenticated (Author+) Stored CrossSite Scripting via SVG File Upload vulnerability
5.9
12 February, 2025
Authenticated (Contributor+) Arbitrary File Upload via storeUploads vulnerability
9.9
12 February, 2025
CrossSite Request Forgery vulnerability
4.3
8 August, 2024
