Vulnerability history

Broken Access Control vulnerability

Privilege Escalation vulnerability

Cross Site Scripting (XSS) vulnerability

Backdoor vulnerability

Authenticated (Subscriber+) PHP Object Injection to Arbitrary User Password Change vulnerability

Unauthenticated Stored Cross-Site Scripting via Draft Form Submission vulnerability

Missing Authorization to Unauthenticated Arbitrary Attachment Deletion vulnerability

Missing Authorization to Unauthenticated Payment Status modification vulnerability

Authenticated (Subscriber+) Server-Side Request Forgery via 'saveDataSource' vulnerability