Authenticated (Contributor+) Stored DOMBased CrossSite Scripting via FancyBox JavaScript Library
3 December, 2024
Authenticated (Subscriber+) SQL Injection via exclude Parameter vulnerability
19 July, 2024
Cross Site Scripting (XSS) vulnerability
27 May, 2024
Server Side Request Forgery (SSRF) vulnerability
22 April, 2024
Unvalidated Redirects and Forwards vulnerability
11 April, 2024