Issues

ACL Issue: Unauthenticated Unsubscribe via PurchasesController#unsubscribe
HacktronAI/hacktivity#11 · opened on Apr 28, 2025
2
IDOR/BOLA in AffiliateRequestsController#approve allows unauthenticated approval
HacktronAI/hacktivity#10 · opened on Apr 27, 2025
2
IDOR in api/mobile/preorders#preorder_attributes
HacktronAI/hacktivity#9 · opened on Apr 27, 2025
1
IDOR in Purchases#send_invoice allows sending invoices for arbitrary purchases
HacktronAI/hacktivity#8 · opened on Apr 27, 2025
1
SQL Injection in PaginatedUtmLinksPresenter via Unvalidated Sort Direction
HacktronAI/hacktivity#7 · opened on Apr 14, 2025
1
Stored XSS via Third Party Analytics Snippets
HacktronAI/hacktivity#6 · opened on Apr 14, 2025
2
Stored XSS via Product Name in Rental Expiration Warning Email
HacktronAI/hacktivity#5 · opened on Apr 14, 2025
1
Stored XSS via Installment Message in Emails
HacktronAI/hacktivity#17 · opened on Apr 14, 2025
1
Stored XSS via User Name in Receipt 'Product Questions' Note
HacktronAI/hacktivity#4 · opened on Apr 14, 2025
1
Stored XSS in Product Custom Receipt Field
HacktronAI/hacktivity#16 · opened on Apr 14, 2025
2
Stored XSS via Unsanitized Product Description
HacktronAI/hacktivity#3 · opened on Apr 13, 2025
2
Potential DOM XSS in Media Embed Feature via iframe.ly Response
HacktronAI/hacktivity#2 · opened on Apr 12, 2025
4
Security Weakness: Origin validation using in function
HacktronAI/hacktivity#18 · opened on Apr 12, 2025
1
DOM XSS in Profile Editor via Unsanitized Raw Tiptap Node Rendering
HacktronAI/hacktivity#1 · opened on Apr 11, 2025
1