Vulnerability history

Unauthenticated Stored XSS vulnerability

Arbitrary Post Deletion vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability

Subscriber+ Missing Authorization vulnerability

Subscriber+ Cookie Scan Schedule Disclosure vulnerability

Subscriber+ Banner Settings Overwrite and A/B Test Data Reset vulnerability

Unauthenticated IAB TCF Consent Option Update vulnerability

Admin+ SQLi vulnerability

Unauthenticated Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability

Cross Site Scripting (XSS) vulnerability

Authenticated (Subscriber+) Stored Cross-Site Scripting via 'regionArray' Parameter vulnerability

Cross-Site Request Forgery vulnerability

Authenticated (Administrator+) SQL Injection vulnerability

Missing Authorization to Authenticated (Subscriber+) Scan Schedule Modification vulnerability

Authenticated (Administrator+) SQL Injection vulnerability

Missing Authorization to Sensitive Information Exposure vulnerability

Broken Access Control vulnerability

Missing Authorization to Unauthenticated Arbitrary Post Deletion vulnerability

Broken Access Control vulnerability

Broken Access Control vulnerability

Cross Site Request Forgery (CSRF) Vulnerability

Missing Authorization to Authenticated (Subscriber+) Whitelist Script vulnerability

Unauthenticated Stored Cross-Site Scripting via Client-IP header vulnerability

Missing Authorization to Unauthenticated Arbitrary Post Deletion vulnerability

CSV Injection vulnerability