MStore API

Authenticated (Subscriber+) HTML File Upload (Stored CrossSite Scripting) vulnerability <= 4.16.4

Authenticated (Subscriber+) SQL Injection vulnerability <= 4.15.7

Unauthorized User Registration vulnerability <= 4.15.3

Authenticated (Subscriber+) Limited Arbitrary File Upload vulnerability <= 4.15.3

Authentication Bypass to Account Takeover vulnerability <= 4.15.2