Vulnerability history
1 present
4 patched
Unauthenticated SQL Injection vulnerability
9.3
7 January, 2025
Unauthenticated Price Manipulation vulnerability
5.3
9 September, 2024
Unauthenticated Arbitrary Email Sending vulnerability
5.3
18 June, 2024
Authenticated (Subscriber+) ServerSide Request Forgery vulnerability
6.4
17 May, 2024
Unauthenticated CrossSite Scripting via SVG Upload vulnerability
7.1
30 April, 2024
