An issue was discovered in eZ Publish Ibexa Kernel before 7.5.28. Access control based on object state is...
9.8CVSS
9.4AI Score
0.002EPSS
A vulnerability was found in Fastly Plugin up to 0.97 on WordPress. It has been rated as problematic. Affected by this issue is the function post of the file lib/api.php. The manipulation of the argument url leads to cross site scripting. The attack may be launched remotely. Upgrading to version...
6.1CVSS
6.7AI Score
0.001EPSS
The Fastly CDN module before 1.2.26 for Magento2, when used with a third-party authentication plugin, might allow remote authenticated users to obtain sensitive information from authenticated sessions via vectors involving caching of redirect...
6.5CVSS
6.7AI Score
0.001EPSS