Vulnerability history

Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via ThickBox JavaScript Library vulnerability

Authenticated (Contributor+) Local File Inclusion via 'template' vulnerability

Stored DOM-Based Cross-Site Scripting via SimpleLightbox JavaScript Library

Admin+ Stored XSS vulnerability

Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library

Admin+ Stored XSS vulnerability

Cross Site Scripting (XSS) vulnerability

Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability

Missing Authorization to Unauthenticated Information Disclosure vulnerability

Cross Site Request Forgery (CSRF) vulnerability

Admin+ Local File Inclusion vulnerability

Admin+ Arbitrary File Read and Delete vulnerability

Admin+ PHAR Deserialization vulnerability

Reflected Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery (CSRF) vulnerability leading to file upload

Cross-Site Request Forgery (CSRF) leading to XSS and RCE via file upload and LFI

SQL Injection vulnerability

Authenticated Option Update vulnerability (Fremius Library security issue)

Sensitive Information Disclosure

Authenticated Remote Code Execution (RCE) Vulnerability

Authenticated Path Traversal

Arbitrary File Upload

Directory Traversal

Cross Site Scripting

Full Path Disclosure

Stored XSS

Multiple XSS

Multiple Vulnerabilities

Full Path Disclosure

Directory Traversal

Arbitrary File Upload

Path Disclosure Vulnerability

Cross Site Scripting

XSS Vulnerability

XSS