Unknown One User Avatar | User Profile Picture

• CVE-2021-24675 Unrated One User Avatar < 2.3.7 - Avatar Update via CSRF 0.6%
• CVE-2021-24672 Unrated One User Avatar < 2.3.7 - Contributor+ Stored Cross-Site Scripting 0.7%