EVIL0RD

LaraDashboard before 1.4.9 Stored XSS via LaraBuilder design_json Block Content

LaraDashboard before 1.4.5 Incorrect Authorization via SettingPolicy Core Upgrades

LaraDashboard 1.4.0 before 1.4.9 Improper Authorization via MCP send-email Tool

LaraDashboard before 1.4.8 Incorrect Authorization Exposes Secrets via Settings API

LaraDashboard before 1.4.8 Privilege Escalation via Superadmin Role Tampering

mayswind ezBookkeeping 1.2.0 before 2.0.1 Privilege Escalation via Token Refresh Endpoint

LaraDashboard before 1.4.8 Path Traversal via /api/translations/{lang} Endpoint

LaraDashboard 1.4.0 before 1.4.8 Race Condition Bypasses Per-IP Registration Limit

LaraDashboard 1.4.2 before 1.4.8 Resource Exhaustion via Password Recovery Endpoints

LaraDashboard before 1.4.8 Open Redirect via Email Template Builder redirect_url