Authenticated (Administrator+) DOMBased Stored CrossSite Scripting vulnerability
28 February, 2025
Cross Site Request Forgery (CSRF) to Settings Change vulnerability
24 January, 2025
Counter Deletion via CSRF vulnerability
2 May, 2024
Authenticated Local File Inclusion (LFI) vulnerability
16 May, 2022