← All credits
Ikram-4
31 vulnerability records and advisories credit this contributor.
CVE-2026-107798
Jivejdon through commit ee67a65e Stored XSS via Markdown Links in TextStyle Rendering Filter
CVE-2026-107796
Jivejdon through commit ee67a65e Reflected XSS via taggedThreadList.jsp tagID and count Parameters
CVE-2026-107792
Jivejdon through commit ee67a65e Missing Authorization via /message/threadToForum/save Thread Move
CVE-2025-71428
Jivejdon through 5.0 SQL Injection via username in userListAction
CVE-2026-107780
Dromara Skyeye Unauthenticated OS Command Injection via textToSpeech format Parameter
CVE-2026-107779
Dromara Skyeye xxl-job-admin Missing Authentication on Job Endpoints Allows RCE
CVE-2026-105124
W (wcms) through 3.18.0 Unauthenticated Stored XSS via Login Username and Comments
CVE-2026-103592
simple-php-router through 5.4.1.7 IP restriction bypass via forwarding headers
CVE-2026-105123
W (wcms) through 3.18.0 RCE and Arbitrary File Write via Media Upload API
CVE-2026-102810
Marmite through 0.4.2 Path Traversal via Development Server