alham-rizvi

REDAXO before 5.21.5 Privilege Escalation via Backup Export of Authentication Tables

REDAXO 5.18.0 before 5.21.4 Stored XSS via Unsanitized Mediapool SVG Uploads

SiYuan through 3.8.1 Authorization Bypass via getFile

SiYuan before v3.7.4 XSS-to-RCE via pathName.ts

SiYuan XSS-to-RCE via unescaped block metadata in hint popup

SiYuan before v3.7.4 XSS-to-RCE via malicious filename upload

Grav before 2.0.16 Information Disclosure via Twig Sandbox

Grav before 2.0.16 Information Disclosure via offsetGet

Grav before 2.0.15 Path Traversal via plugin-asset-map.php

Grav CMS before 2.0.16 Origin Validation Bypass via Referer