Vulnerability history

Missing Authorization to Authenticated (Subscriber+) Campaign Data Exposure vulnerability

Authenticated (Admin+) Stored Cross-Site Scripting vulnerability

Admin+ Stored XSS vulnerability

Broken Access Control vulnerability

Subscriber+ Edit Entries via Broken Access Control vulnerability

Edit Entries via CSRF vulnerability

Subscriber+ Arbitrary Entry Deletion vulnerability

Authenticated Arbitrary Options Change Vulnerability

Cross-Site Request Forgery (CSRF) vulnerability