Vulnerability history

Authenticated (Contributor+) Privilege Escalation via eh_crm_edit_agent AJAX Action vulnerability

Unauthenticated Arbitrary File Upload vulnerability

Missing Authorization to Authenticated (Subscriber+) Role Removal vulnerability

Authenticated (Subscriber+) Insecure Direct Object Reference via 'eh_crm_ticket_single_view_client' vulnerability

Missing Authorization to Authenitcated (Subscriber+) to Scheduled Trigger Deletion vulnerability

Arbitrary File Upload vulnerability

Missing Authorization to Authenticated (Subscriber+) Privilege Escalation vulnerability