Vulnerability history

Subscriber+ Stored XSS vulnerability

Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting vulnerability

Unauthenticated Views and Duration Post Meta Write vulnerability

Contributor+ Stored XSS vulnerability

Unauthenticated Private and Draft Video Disclosure vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Cross Site Scripting (XSS) vulnerability

Subscriber+ Server-Side Request Forgery via 'vdl' Parameter vulnerability

Authenticated (Subscriber+) Server-Side Request Forgery vulnerability

Reflected Cross-Site Scripting via 'vi' Parameter vulnerability

Authenticated (Author+) Arbitrary File Upload via VTT Upload Bypass vulnerability

Missing Authorization to Authenticated (Subscriber+) Limited User Meta Update vulnerability

Missing Authorization to Unauthenticated Bunny Stream Video Creation/Deletion vulnerability

Arbitrary File Upload vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via Video Shortcode vulnerability

Authenticated (Contributor+) Local File Inclusion via aiovg_search_form Shortcode vulnerability

Authenticated (Contributor+) Arbitrary File Upload via featured image vulnerability

Broken Access Control vulnerability

Reflected Cross Site Scripting (XSS) vulnerability

Unauthenticated Arbitrary File Download & SSRF vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Sensitive Information Disclosure vulnerability

Local File Inclusion (LFI) vulnerability