offset

AVideo - Arbitrary User Session Hijacking via Meet Plugin uploadRecordedVideo Endpoint

AVideo - Unauthenticated Access to Payment Log DataTables Endpoints via list.json.php

PraisonAI - Cross-Origin Agent Execution via Hardcoded Wildcard CORS and Missing Authentication on AGUI Endpoint

PraisonAI - Arbitrary Shell Command Execution via Hardcoded Approval Mode Override

AVideo - Server-Side Request Forgery in Live/test.php via statsURL Parameter

PraisonAI - Tool Approval Cache Bypass via Coarse-Grained Caching

phpMyFAQ - Missing Authorization in Tag Deletion Endpoint

phpMyFAQ - Stored XSS in FAQ Question/Answer via Encode-Decode Bypass

phpMyFAQ - Authorization Bypass in Admin Pages via Non-Terminating Permission Check

phpMyFAQ - Stored XSS via Entity Decoding Depth Limit Bypass in SVG Sanitizer