HT Mega

Authenticated (Author+) Path Traversal to Limited Arbitrary CSS File Actions vulnerability <= 2.9.1

4.3

31 July, 2025

Authenticated (Author+) Sensitive Information Exposure vulnerability <= 2.9.1

4.3

31 July, 2025

Improper Authorization to Authenticated (Contributor+) Limited Administrator Actions vulnerability <= 2.9.1

4.3

31 July, 2025

Broken Access Control Vulnerability <= 2.9.0

5.4

30 July, 2025

Authenticated (Contributor+) Stored CrossSite Scripting via Multiple Widgets vulnerability <= 2.8.3

6.5

20 March, 2025