AlpetGexha

Semantic MediaWiki 4.2.0 before 7.3.1 Stored XSS via FacetedSearch Exploration Labels

REDAXO before 5.21.5 Insufficient Session Expiration on Password Change

svg-sanitizer 0.11.0 before 1.1.0 Uncaught LogicException DoS via sanitize()

WWBN AVideo before 29.4.0 Blind SSRF via getHeaderContentTypeFromURL Redirect

Grav Login OAuth Plugin before 1.4.3 Predictable Local Credentials Authentication Bypass

Grav Data Manager 1.4.0 through 1.4.5 Unauthenticated File Deletion via Admin

Grav Guestbook before 0.5.2 Stored XSS via AJAX Pagination and Admin Views

Grav API Plugin before 1.0.36 Disabled Account Session Access Bypass

Grav Guestbook Plugin 0.5.0 and 0.5.1 Missing Authorization and CSRF in Moderation

Grav Star Ratings 2.0.1 through 2.0.3 Missing Server-Side vote_access Authorization