Authenticated (Contributor+) Stored CrossSite Scripting via Typography Settings vulnerability
23 December, 2024
Authenticated (Contributor+) Stored CrossSite Scripting vulnerability
26 November, 2024
Authenticated (Contributor+) Basic Information Exposure via get_image_alt function vulnerability
14 October, 2024
Authenticated (Contributor+) Stored CrossSite Scripting in the URL Parameter in Multiple Widgets vulnerability
11 September, 2024
Arbitrary SVG File Download vulnerability
28 June, 2024