Truoc Phan

ProfileGrid – User Profiles, Groups and Communities <= 5.8.9 - Authenticated (Subscriber+) Authorization Bypass to Privilege Escalation

tagDiv Composer <= 5.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting

MStore API <= 4.10.7 - Unauthorized Account Access and Privilege Escalation

MStore API <= 3.9.6 - Cross-Site Request Forgery to Product Limit Update

MStore API – Create Native Android & iOS Apps On The Cloud <= 4.14.7 - Authentication Bypass

tagDiv Opt-In Builder <= 1.4.4 - Authenticated (Admin+) SQL Injection

tagDiv Composer < 3.5 - Unauthenticated Account Takeover

tagDiv Composer < 4.0 - Reflected Cross-site Scripting

MStore API < 3.9.7 - Subscriber+ Unauthorized Settings Update

MStore API < 3.9.9 - Unauthenticated Privilege Escalation