← All credits
Lenon Leite
23 vulnerability records and advisories credit this contributor.
CVE-2022-25773
Relative Path Traversal in assets file upload
CVE-2024-47053
Improper Authorization in Reporting API
CVE-2024-47051
Remote Code Execution & File Deletion in Asset Uploads
CVE-2021-39317
AccessPress Themes - Authenticated Malicious File Upload
CVE-2024-47058
Cross-site Scripting (XSS) - stored (edit form HTML field)
CVE-2024-47050
XSS in contact/company tracking (no authentication)
CVE-2021-27917
XSS in contact tracking and page hits report
CVE-2022-25777
Server-Side Request Forgery in Asset section
CVE-2022-25776
Sensitive Data Exposure due to inadequate user permission settings
CVE-2022-25775
SQL Injection in dynamic Reports