CVE-2022-29305

imgurl v2.31 was discovered to contain a Blind SQL injection vulnerability via /upload/localhost...

CVE-2021-38713

imgURL 2.31 allows XSS via an X-Forwarded-For HTTP header...