← All credits
Philipp Doblhofer
16 vulnerability records and advisories credit this contributor.
CVE-2026-83545
CoolClock < 4.3.8 - Contributor+ Stored XSS via Custom Skin JSON
CVE-2026-83546
CoolClock < 4.3.8 - Contributor+ Stored XSS via Skin Class Attribute
CVE-2026-74925
MultiVendorX 5.0.0 - 5.0.15 - Store Owner+ Privilege Escalation to Administrator
CVE-2026-16960
Loops & Logic < 4.3.0 - Unauthenticated User Data and Site Option Disclosure
CVE-2026-13441
EventPrime <= 4.3.4.2 - Unauthenticated Stored Cross-Site Scripting via 'new_event_type_background_color' Parameter
CVE-2026-11402
Services Section Block <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'link' Block Attribute