z-9527 admin

• CVE-2026-5252 Low 3.5 z-9527 admin Message Create Endpoint message.js cross site scripting 0.3%
• CVE-2026-5251 Medium 6.3 z-9527 admin User Update Endpoint user.js dynamically-determined object attributes 0.2%
• CVE-2026-4999 Medium 6.3 z-9527 admin isImg Check upload.js uploadFile path traversal 0.4%
• CVE-2026-3200 High 7.3 z-9527 admin user.js getUsers sql injection 0.4%