Private Comment Exposure via IDOR vulnerability
19 May, 2025
Authenticated (Subscriber+) Stored CrossSite Scripting via 'invitee_name' vulnerability
1 May, 2025
Authenticated (Subscriber+) Stored CrossSite Scripting via 'link_title' vulnerability
27 February, 2025
Insecure Direct Object Reference on Like Comment vulnerability
4 June, 2024
SQL Injection (SQLi) vulnerability
16 September, 2021