CVE

CVE-2023-45754: WordPress Easy Testimonial Slider and Form plugin <= 1.0.18 - Cross Site Scripting (XSS) - Patchstack

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Easy Testimonial Slider and Form plugin <= 1.0.18 versions.

1 year ago

CVE-2023-46564: Digging/TOTOLINK/X2000R/6/1.md at main · XYIYM/Digging

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formDMZ.

1 year ago

CVE-2023-46574: repo/totolink A3700R/1/A3700R V9.1.2u.6165_20211012 vuln.md at main · OraclePi/repo

#vulnerability #web #git

An issue in TOTOLINK A3700R v.9.1.2u.6165_20211012 allows a remote attacker to execute arbitrary code via the FileName parameter of the UploadFirmwareFile function.

1 year ago

#vulnerability #git #oracle

CVE-2023-45756: WordPress ApplyOnline – Application Form Builder and Manager plugin <= 2.5.3 - Reflected Cross Site Scripting (XSS) vulnerability - Patchstack

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Spider Teams ApplyOnline – Application Form Builder and Manager plugin <= 2.5.2 versions.

1 year ago

CVE-2023-45750: WordPress Nexter Extension plugin <= 2.0.3 - Reflected Cross Site Scripting (XSS) vulnerability - Patchstack

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in POSIMYTH Nexter Extension plugin <= 2.0.3 versions.

1 year ago