MPG

Authenticated (Editor+) ServerSide Request Forgery via fileUrl vulnerability <= 4.0.5

Authenticated (Editor+) Directory Traversal to Limited File Deletion vulnerability <= 4.0.2

Missing Authorization vulnerability <= 4.0.1

SQL Injection vulnerability <= 3.4.7

Cross Site Request Forgery (CSRF) vulnerability <= 3.4.0