EVIL0RD

MaxSite CMS 0.94 through 109.6 HTML Upload XSS via admin_page

Lara Dashboard before 1.3.0 Missing Authentication in screenshot-login Route

SiYuan before 3.8.4 Cross-Site Scripting via Document Title

SiYuan before 3.8.4 Cross-Site Scripting via Bookmark Labels

MaxSite CMS through 109.6 Authentication Bypass via Hardcoded Encryption Key

Lara Dashboard before 1.3.2 Missing Authorization in Marketplace Module Install Action

Lara Dashboard 0.9.2 through 1.3.1 Server-Side Request Forgery in Builder Markdown Fetch

MaxSite CMS through 109.6 PHP Object Injection via ci_session

MaxSite CMS through 109.6 Local File Inclusion via ajax dispatcher

Lara Dashboard before 1.3.2 Missing Authorization in Post-Builder Media Upload Endpoints