Vulnerability history

Authenticated (Subscriber+) Arbitrary File Read via actionExportAll vulnerability

Authenticated (Administrator+) SQL Injection via `sliderid` Parameter vulnerability

Missing Authorization to Limited File Upload vulnerability

Contributor+ Stored XSS vulnerability

Auth. Stored Cross-Site Scripting (XSS) vulnerability

Auth. PHP Object Injection vulnerability

PHP Object Injection vulnerability

Authenticated Stored Cross-Site Scripting (XSS) vulnerability