aisafe-bot

Froxlor before 2.3.7 Information Disclosure via customer_email.php

Ech0 before 4.7.3 Unauthenticated fav_count Modification

Ech0 before 4.7.3 Stored XSS via RSS feed tag names

Ech0 before 4.7.3 Email Disclosure via Public API

Ech0 before 4.7.3 OAuth Redirect URI Validation Bypass

Ech0 before 4.7.3 Access Token Revocation Bypass

Budibase before 3.40.0 NoSQL Injection via MongoDB datasource

AVideo TopMenu Plugin - Stored Cross-Site Scripting via Unescaped Menu Item Fields

phpMyFAQ - Unauthenticated Information Disclosure via getIdFromSolutionId Permission Bypass

phpMyFAQ - SQL Injection via User-Agent Header in BuiltinCaptcha