Vulnerability history
4 present
4 patched
Reflected Cross Site Scripting (XSS) vulnerability
7.1
26 June, 2025
SQL Injection Vulnerability
9.3
24 June, 2025
Missing Authorization to Authenticated (Subscriber+) Arbitrary Reservation & Post Deletion vulnerability
4.3
1 May, 2025
Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Deletion vulnerability
4.3
1 May, 2025
CrossSite Request Forgery to User Verification vulnerability
4.3
6 March, 2025
