V1n1v131r4 Backdrop CMS 1.20.0 - 'Multiple' Cross-Site Request Forgery (CSRF)
webapps php

V1n1v131r4 Scopia XT Desktop 8.3.915.4 - Cross-Site Request Forgery (change admin password)
webapps java

V1n1v131r4 SiteMagic CMS 4.4.2 - Arbitrary File Upload (Authenticated)
webapps php

V1n1v131r4 Koken CMS 0.22.24 - Arbitrary File Upload (Authenticated)
webapps php

V1n1v131r4 Wing FTP Server 6.3.8 - Remote Code Execution (Authenticated)
webapps lua

V1n1v131r4 WordPress Plugin Postie 1.9.40 - Persistent Cross-Site Scripting
webapps php CVE-2019-20204