Groundhogg

Authenticated (Administrator+) Arbitrary File Deletion vulnerability <= 4.1.1.2

Authenticated (Administrator+) Stored CrossSite Scripting via label Parameter vulnerability <= 3.7.4.1

Authenticated (Author+) Arbitrary File Upload via gh_big_file_upload Function vulnerability <= 3.7.3.5

Reflected Cross Site Scripting (XSS) vulnerability <= 3.7.3.3

Reflected Cross Site Scripting (XSS) vulnerability <= 3.4.2.3