Iamsushi

The issue is related to improper access control in the reporting engine, allowing remote attackers to download PDF reports for arbitrary documents via crafted requests.

The issue is a cross-site scripting (XSS) problem in the Discuss app, allowing remote attackers to inject arbitrary web script in the browser of a victim by posting crafted contents.

The issue is related to improper input validation in the portal component, allowing remote attackers to trick victims into modifying their account via crafted links, leading to privilege escalation.