Vulnerability history
0 present
17 patched
Authenticated (Contributor+) Stored CrossSite Scripting via Inline SVG vulnerability
6.5
16 May, 2025
Cross Site Scripting (XSS) Vulnerability
6.5
7 May, 2025
Unauthenticated PHP Object Injection via PHAR vulnerability
9.8
25 April, 2025
Authenticated (Contributor+) SVG Upload to Local File Inclusion (Remote Code Execution) vulnerability
8.8
31 January, 2025
Authenticated (Contributor+) Arbitrary File Read vulnerability
6.5
31 January, 2025
