Vulnerability history

Authenticated (Author+) Path Traversal to Limited Arbitrary CSS File Actions vulnerability

Authenticated (Author+) Sensitive Information Exposure vulnerability

Improper Authorization to Authenticated (Contributor+) Limited Administrator Actions vulnerability

Broken Access Control Vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets vulnerability

Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Countdown Widget vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via block_css and inner_css vulnerability

Authenticated (Contributor+) Sensitive Information Exposure via template_id vulnerability

JSON Path Traversal vulnerability

Contributor+ Stored Cross-Site Scripting via Multiple Widgets vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Missing Authorization to Options Update vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via Tooltip & Popover Widget vulnerability

Sensitive Data Exposure vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion/FAQ vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Sensitive Information Exposure via purchased_products vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Cross Site Scripting (XSS) vulnerability

Authenticated (Contributor+) Directory Traversal vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via titleTag vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via Post Carousel Widget vulnerability

Cross Site Request Forgery (CSRF) vulnerability

Reflected Cross Site Scripting (XSS) vulnerability

Unauthenticated Privilege Escalation vulnerability

SQL injection (SQLi) vulnerability

Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities