Email enumeration by simple reconnaissance

Hyperlink Injection with different type of chaining

Information Discloser leads to leak data of all users

Stored xss via svg file upload

xmlrpc FILE IS enable it will used for bruteforce attack and denial of service

Hyperlink Injection Vulnerability in Inflectra Website | Bug Report by Suyog Patil aka xspatrian