Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6.
Insufficient Session Expiration in GitHub repository answerdev/answer prior to 1.0.6.
Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.7.
Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.7.
Authentication Bypass by Capture-replay in GitHub repository answerdev/answer prior to 1.0.6.
Observable Timing Discrepancy in GitHub repository answerdev/answer prior to 1.0.6.
Guessable CAPTCHA in GitHub repository answerdev/answer prior to 1.0.6.
Observable Response Discrepancy in GitHub repository answerdev/answer prior to 1.0.6.
Authorization Bypass Through User-Controlled Key vulnerability in Vadi Corporate Information Systems DigiKent allows Authentication Bypass, Authentication Abuse. This issue affects DigiKent: before 23.03.20.
Auth. (contributor+) Stored Cross-Site Scripting vulnerability in Galleryape Gallery Images Ape plugin <= 2.2.8 versions.