Vulnerability history
0 present
24 patched
Authenticated(Contributor+) Stored CrossSite Scripting via `mftemplate` DOM Element vulnerability
6.5
29 July, 2025
Server Side Request Forgery (SSRF) vulnerability
4.4
27 March, 2025
Unauthenticated DoubleExtension Arbitrary File Upload vulnerability
9.0
19 August, 2024
Unauthenticated Sensitive Information Exposure vulnerability
5.3
11 June, 2024
Broken Access Control vulnerability
4.3
25 April, 2024
