Vulnerability history

Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Uploads vulnerability

Authenticated (Subscriber+) Limited JavaScript File Upload vulnerability

Authenticated (Subscriber+) Arbitrary File Upload vulnerability

Unauthenticated Remote Code Execution via Race Condition vulnerability

Admin+ Arbitrary OS File/Folder Access + Path Traversal vulnerability

PHP Object Injection vulnerability

Reflected Cross-Site Scripting (XSS) vulnerability

Arbitrary File Creation/Upload/Deletion vulnerability

Multiple Vulnerabilities

Authenticated Cross-Site Scripting (XSS) vulnerability

Information Disclosure vulnerability