Insecure Direct Object Reference to Authenticated (Custom+) Arbitrary Post/Page Updates vulnerability
8 March, 2025
Authenticated (Custom+) Stored CrossSite Scripting via Album Title Size vulnerability
8 March, 2025
Reflected CrossSite Scripting vulnerability
4 March, 2025
Authenticated (Contributor+) Stored CrossSite Scripting via Gallery Custom URL vulnerability
14 June, 2024
Authenticated (Author+) Stored CrossSite Scripting via Image Attachment Fields vulnerability
8 April, 2024