← All credits

Matthew Lapinski

2 vulnerability records and advisories credit this contributor.

CVE-2026-107658

BuddyForms <= 2.10.5 - Unauthenticated Stored Cross-Site Scripting via 'bf_post_type' Parameter via Post-Type Confusion

CVE-2026-103370

Awesome Support <= 6.4.1 - Authenticated (Custom+) Stored Cross-Site Scripting via Ticket Attachment MIME Confusion