Missing Authorization vulnerability
22 October, 2024
Missing Authorization to Authenticated (Subscriber+) Feed State Update vulnerability
16 July, 2024
Authenticated (Admin+) ServerSide Request Forgery via RSS Feed Source vulnerability
7 February, 2024
Authenticated (Admin+) Stored CrossSite Scripting via RSS Feed Source vulnerability
26 January, 2024
Reflected CrossSite Scripting (XSS) vulnerability
26 January, 2022