Vulnerability history

Unauthenticated Arbitrary Directory Deletion via 'data[...][files][][subdir]' Parameter vulnerability

Authenticated (Subscriber+) Arbitrary File Upload via 'extensions' Form Element Attribute vulnerability

Authenticated (Subscriber+) Privilege Escalation vulnerability

Unauthenticated Path Traversal to Arbitrary File Read vulnerability

Unauthenticated Privilege Escalation vulnerability

Authenticated (Subscriber+) Arbitrary File/Directory Deletion vulnerability

Arbitrary File Download vulnerability

Unauthenticated Arbitrary File Upload vulnerability

Reflected Cross-Site Scripting (XSS) vulnerability

Arbitrary File Upload leading to Remote Code Execution (RCE) vulnerability