dontdream BP Profile Search

• CVE-2026-104995 High 8.1 BP Profile Search <= 5.9 - Unauthenticated Local File Inclusion to Remote Code Execution via 'bps_directory' Cookie 'ajax_template' Value 1.1%
• CVE-2024-7850 Medium 6.1 BP Profile Search <= 5.7.5 - Cross-Site Request Forgery to Reflected Cross-Site Scripting 0.2%