Missing Authorization to Authenticated (Contributor+) Safe File Type Upload vulnerability
5 November, 2025
Unauthenticated SQL Injection via 's' Parameter vulnerability
5 May, 2025
Authenticated (Author+) Stored CrossSite Scripting vulnerability
6 December, 2024
Cross Site Scripting (XSS) vulnerability
30 September, 2024
Broken Access Control vulnerability
30 September, 2024