LiveHelperChat 4.61 - Stored Cross Site Scripting (XSS) via Department Assignment Alias Nick Field

LiveHelperChat 4.61 - Stored Cross Site Scripting (XSS) via the Chat Transfer Function

LiveHelperChat 4.61 - Stored Cross Site Scripting (XSS) via Personal Canned Messages

LiveHelperChat 4.61 - Stored Cross Site Scripting (XSS) via Facebook Integration Page Name Field

LiveHelperChat 4.61 - Stored Cross Site Scripting (XSS) via Operator Surname

LiveHelperChat 4.61 - Stored Cross Site Scripting (XSS) via Telegram Bot Username

Discourse 3.1.1 - Unauthenticated Chat Message Access

Joomla JS Jobs plugin 1.4.2 - SQL injection

Simple File List WordPress Plugin 4.2.2 - File Upload to RCE

Pie Register WordPress Plugin 3.7.1.4 - Authentication Bypass to RCE

WP Publications WordPress Plugin 1.2 - Stored XSS

White Star Software Protop 4.4.2-2024-11-27 - Local File Inclusion (LFI)

SugarCRM 14.0.0 - SSRF/Code Injection

Langflow 1.2.x - Remote Code Execution (RCE)

PivotX 3.0.0 RC3 - Remote Code Execution (RCE)

Discourse 3.2.x - Anonymous Cache Poisoning