Fluid Attacks' AI SAST Scanner

LimeSurvey Community Edition 7.0.5 - Reflected XSS in HTML editor popup

HumHub 1.18.4 / 1.18.4-pl1 – Stored Cross-Site Scripting in oEmbed confirmation

HumHub Community Edition 1.18.4-pl1 - Reflected XSS in Space membership request button rendering

HumHub 1.18.4 - Stored XSS in comment-deletion notifications through unescaped administrator reason

LimeSurvey Community Edition 7.0.5 - Authenticated SQL injection in CPDB

Zammad 7.0.1 - Improper authorization in ticket article attachment cloning

Camaleon CMS 2.9.2 - Improper authorization in draft autosave endpoint

Frappe Framework 17.0.0-dev - Stored XSS in frappe.get_avatar image rendering

Frappe Framework 17.0.0-dev - Reflected DOM XSS in dashboard-view breadcrumb rendering

Frappe Framework 17.0.0-dev - Stored XSS in Desktop Icon label rendering