Adobe ColdFusion 2023.6 - Remote File Read

Mezzanine CMS 6.1.0 - Stored Cross Site Scripting (XSS)

XWiki 14 - SQL Injection via getdeleteddocuments.vm

Invision Community 4.7.20 - (calendar/view.php) SQL Injection

LiveHelperChat 4.61 - Stored Cross Site Scripting (XSS) via Department Assignment Alias Nick Field

LiveHelperChat 4.61 - Stored Cross Site Scripting (XSS) via the Chat Transfer Function

LiveHelperChat 4.61 - Stored Cross Site Scripting (XSS) via Personal Canned Messages

LiveHelperChat 4.61 - Stored Cross Site Scripting (XSS) via Facebook Integration Page Name Field

LiveHelperChat 4.61 - Stored Cross Site Scripting (XSS) via Operator Surname

LiveHelperChat 4.61 - Stored Cross Site Scripting (XSS) via Telegram Bot Username

Discourse 3.1.1 - Unauthenticated Chat Message Access

Joomla JS Jobs plugin 1.4.2 - SQL injection

Simple File List WordPress Plugin 4.2.2 - File Upload to RCE

Pie Register WordPress Plugin 3.7.1.4 - Authentication Bypass to RCE

WP Publications WordPress Plugin 1.2 - Stored XSS

White Star Software Protop 4.4.2-2024-11-27 - Local File Inclusion (LFI)