Vulnerability history

Unauthenticated Sensitive Information Exposure vulnerability

Authenticated (Subscriber+) Stored Cross-Site Scripting via 'value' vulnerability

Authenticated (Subscriber+) Profile Privacy Setting Bypass vulnerability

Arbitrary Function Call vulnerability

Unauthenticated Blind SQL Injection vulnerability

Unauthenticated SQL Injection via search Parameter vulnerability

Authenticated SQL Injection vulnerability

Information Exposure vulnerability

Unauthenticated SQL Injection vulnerability

Missing Authorization to Authenticated (Subscriber+) Arbitrary User Profile Picture Update vulnerability

Cross-Site Request Forgery to Membership Status Change vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated SQL Injection vulnerability

Cross-Site Request Forgery vulnerability

Unauthenticated Privilege Escalation

Cross Site Request Forgery (CSRF) vulnerability

Auth. Directory Traversal vulnerability

Auth. Directory Traversal vulnerability

Auth. Remote Code Execution vulnerability

Auth. Limited Remote Code Execution vulnerability

Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Open Redirect vulnerability

Authenticated Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated/Authenticated Privilege Escalation

Insecure Direct Object Reference (IDOR) vulnerability

Cross-Site Scripting (XSS) vulnerability

Cross-Site Request Forgery (CSRF) and Stored Cross-Site Scripting (XSS) vulnerabilities

Multiple vulnerabilities

Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability

Authenticated Cross-Site Scripting (XSS) vulnerability

Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Change Passwords

Local File Inclusion

Reflected Cross Site Scripting

Cross Site Scripting

Multiple Vulnerabilities