Vulnerability history

Unauthenticated Stored Cross-Site Scripting via Aggregated Review Form vulnerability

Subscriber+ Missing Authorization via Multiple Settings AJAX Actions vulnerability

Cross Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting via 'crsearch' vulnerability

Unauthenticated Authentication Bypass to Arbitrary Review Submission via 'key' Parameter vulnerability

Unauthenticated Stored Cross-Site Scripting via media[].href Parameter vulnerability

Authenticated (Subscriber+) Stored Cross-Site Scripting via displayName Parameter vulnerability

Unauthenticated Stored Cross-Site Scripting via `author` Parameter vulnerability

Missing Authorization to Authenticated (Subscriber+) Import Cancellation vulnerability

Reflected Cross-Site Scripting via 's' vulnerability

Missing Authorization to Authenticated (Subscriber+) Coupon Search vulnerability

Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending vulnerability

Improper Authorization via submit_review vulnerability

Authenticated Arbitrary File Upload vulnerability

Broken Access Control vulnerability

Broken Access Control vulnerability

Contributor+ Stored XSS vulnerability

Contributor+ LFI vulnerability

Authenticated Broken Access Control vulnerability

Cross-Site Request Forgery (CSRF) vulnerability

Sensitive Information Disclosure vulnerability