Ctrlpanel-gg Panel vulnerabilities
- convoypanel panel CtrlPanel: Missing Authorization on Admin Write Endpoints Allows RBAC Bypass 8.1 High
- convoypanel panel CtrlPanel: Stored XSS in Admin Role Management via Unescaped DataTable HTML Output 4.8 Medium
- convoypanel panel CtrlPanel: Stored XSS in Ticket Reply Notifications Allows Session Hijacking 8.7 High
- convoypanel panel CtrlPanel: Unauthenticated RCE using installer script 10.0 Critical
- convoypanel panel CtrlPanel has Missing Authentication Checks in Datatable Admin Endpoints 6.5 Medium
- convoypanel panel CtrlPanel: Authenticated Remote Code Execution via Dynamic Class Instantiation in SettingsController.php 6.6 Medium
- convoypanel panel Ctrlpanel has stored XSS vulnerability in TicketsController priority field 8.1 High