← All credits
offset
57 vulnerability records and advisories credit this contributor.
CVE-2026-56341
AVideo - Unauthenticated Access to Payment Log DataTables Endpoints via list.json.php
CVE-2026-56342
AVideo - Server-Side Request Forgery in Live/test.php via statsURL Parameter
CVE-2026-46365
phpMyFAQ - Missing Authorization in Tag Deletion Endpoint
CVE-2026-46363
phpMyFAQ - Stored XSS in FAQ Question/Answer via Encode-Decode Bypass
CVE-2026-46362
phpMyFAQ - Authorization Bypass in Admin Pages via Non-Terminating Permission Check
CVE-2026-46360
phpMyFAQ - Stored XSS via Entity Decoding Depth Limit Bypass in SVG Sanitizer
CVE-2026-45007
phpMyFAQ - Missing Permission Check on 12 Configuration API Endpoints Allows Information Disclosure