Authenticated (Contributor+) Stored CrossSite Scripting via Countdown Widget vulnerability
11 June, 2025
Broken Access Control vulnerability
19 December, 2024
Authenticated (Contributor+) DOMBased Stored CrossSite Scripting via Video Box Widget vulnerability
29 October, 2024
Authenticated (Contributor+) Stored CrossSite Scripting via Media Grid Widget vulnerability
27 September, 2024
Missing Authorization to Authenticated (Contributor+) Arbitrary Content Deletion and Arbitrary Title Update vulnerability
8 August, 2024