PT-2021-15767

Name of the Vulnerable Software and Affected Versions: N5 Upload Form WordPress plugin versions 1.0 and earlier Description: The issue allows for arbitrary file upload in pages where a form from the plugin is embedded, enabling any file to be uploaded. The filename is generated using md5uniqidran...

HackerOne: Temporary banned user (from platform) is able to make submissions via embedded submission forms

Summary: Hello team! We have discovered issue which allows temporary banned user to submit new reports using embedded submission forms. The hacker can submit submissions via embedded forms using his/her email address. Once the ban is over the hacker can claim his/her report via invitation link...

CVE-2018-5185

Plaintext of decrypted emails can leak through by user submitting an embedded form. This vulnerability affects Thunderbird ESR 52.8 and Thunderbird 52.8...