Security
Headlines
HeadlinesLatestCVEs

Tag

#xss

CVE-2023-41537: CVE-nu11secur1ty/vendors/phpjabbers/2023/Business-Directory-Script-Version:3.2 at main · nu11secur1ty/CVE-nu11secur1ty

phpjabbers Business Directory Script 3.2 is vulnerable to Cross Site Scripting (XSS) via the keyword parameter.

CVE
#xss#vulnerability#git#php
CVE-2023-41538: CVE-nu11secur1ty/vendors/phpjabbers/2023/PHP-Forum-Script-3.0 at main · nu11secur1ty/CVE-nu11secur1ty

phpjabbers PHP Forum Script 3.0 is vulnerable to Cross Site Scripting (XSS) via the keyword parameter.

CVE-2023-34176: WordPress Chilexpress woo oficial plugin <= 1.2.9 - Reflected Cross Site Scripting (XSS) vulnerability - Patchstack

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Chilexpress Chilexpress woo oficial plugin <= 1.2.9 versions.

CVE-2023-34175: WordPress Login Configurator plugin <= 2.1 - Reflected Cross Site Scripting (XSS) vulnerability - Patchstack

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in GrandSlambert Login Configurator plugin <= 2.1 versions.

CVE-2023-34174: WordPress BBS e-Popup plugin <= 2.4.5 - Reflected Cross Site Scripting (XSS) vulnerability - Patchstack

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in BBS e-Theme BBS e-Popup plugin <= 2.4.5 versions.

CVE-2023-27426: WordPress Notify visitors lead form plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability - Patchstack

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Notifyvisitors NotifyVisitors plugin <= 1.0 versions.

CVE-2023-33208: WordPress Cookie Monster plugin <= 1.51 - Cross Site Scripting (XSS) vulnerability - Patchstack

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in gsmith Cookie Monster plugin <= 1.51 versions.

CVE-2023-33317: WordPress WooCommerce Warranty Requests plugin <= 2.1.6 - Reflected Cross Site Scripting (XSS) vulnerability - Patchstack

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WooCommerce Returns and Warranty Requests plugin <= 2.1.6 versions.

CVE-2023-25462: WordPress WP htaccess Control plugin <= 3.5.1 - Cross Site Scripting (XSS) vulnerability - Patchstack

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP htaccess Control plugin <= 3.5.1 versions.

CVE-2023-33325: WordPress Leyka plugin <= 3.30.1 - Reflected Cross Site Scripting (XSS) vulnerability - Patchstack

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Teplitsa of social technologies Leyka plugin <= 3.30.1 versions.