Vulnerability history

Broken Access Control vulnerability

Authenticated (Susbscriber+) SQL Injection vulnerability

Unauthenticated SQL Injection via get_members Function vulnerability

Insecure Direct Object References (IDOR) Vulnerability

Authenticated (Subscriber+) Stored Cross-Site Scripting via Profile Avatar vulnerability

Privilege Escalation vulnerability

Authenticated (Subscriber+) Arbitrary File Read in update vulnerability

Unauthenticated Sensitive Data Exposure vulnerability

Insecure Direct Object References (IDOR) vulnerability

Authenticated (Contributor+) SQL Injection vulnerability

Cross Site Scripting (XSS) vulnerability

Cross Site Request Forgery (CSRF) on Sign-out vulnerability

Broken Access Control + CSRF vulnerability

Privilege Escalation vulnerability

Reflected Cross-Site Scripting vulnerability

Authenticated (Subscriber+) Local File Include, Server-Side Request Forgery, and PHAR Deserialization via file_get_contents vulnerability

Auth. HTML Injection vulnerability

Cross-Site Request Forgery (CSRF) vulnerability

Arbitrary File Upload vulnerability

Cross-Site Request Forgery (CSRF) vulnerability

Insecure direct object references (IDOR) vulnerability

Insecure direct object references (IDOR) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability

Open Redirect vulnerability

Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated SQL Injection (SQLi) vulnerability