18 matches found
CVE-2026-23668 Windows Graphics Component Elevation of Privilege Vulnerability
...
CVE-2026-23668
CVE-2026-23668 affects the Windows Graphics Component and is an elevation-of-privilege vulnerability. The advisory indicates a local attack vector with high attack complexity, requiring low privileges and no user interaction (UI: NONE). The vulnerability impacts confidentiality, integrity, and av...
CVE-2026-23668
creationtimestamp| type| source ---|---|--- 2026-03-10 16:57:37+00:00| seen| https://www.thezdi.com/blog/2026/3/10/the-march-2026-security-update-review 2026-03-10 19:07:55+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0080 2026-03-11 03:00:16+00:00| seen|...
CVE-2023-23668
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in GiveWP plugin = 2.25.1 versions...
CVE-2025-23668 WordPress ChatGPT Open AI Images & Content for WooCommerce plugin <= 2.2.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound ChatGPT Open AI Images & Content for WooCommerce allows Reflected XSS. This issue affects ChatGPT Open AI Images & Content for WooCommerce: from n/a through 2.2.0...
CVE-2025-23668 WordPress ChatGPT Open AI Images & Content for WooCommerce plugin <= 2.2.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mauricio Urrego ChatGPT Open AI Images & Content for WooCommerce glasses-for-woocommerce allows Reflected XSS.This issue affects ChatGPT Open AI Images & Content for WooCommerce: from n/a through =...
CVE-2024-23668
An improper authorization in Fortinet FortiWebManager version 7.2.0 and 7.0.0 through 7.0.4 and 6.3.0 and 6.2.3 through 6.2.4 and 6.0.2 allows attacker to execute unauthorized code or commands via HTTP requests or CLI...
CVE-2024-23668
An improper authorization in Fortinet FortiWebManager version 7.2.0 and 7.0.0 through 7.0.4 and 6.3.0 and 6.2.3 through 6.2.4 and 6.0.2 allows attacker to execute unauthorized code or commands via HTTP requests or CLI...
CVE-2024-23668
Fortinet FortiWebManager is affected by CVE-2024-23668 due to improper authorization in the HTTP Request Handler. Affected versions: 6.0.2; 6.2.3–6.2.4; 6.3.0; 7.0.0–7.0.4; 7.2.0. Exploitation via HTTP requests or CLI could allow executing unauthorized code or commands. Remediation: upgrade to th...
CVE-2023-23668
creationtimestamp| type| source ---|---|--- 2023-05-08 16:51:28+00:00| seen| https://t.me/cibsecurity/63425...
CVE-2023-23668
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in GiveWP plugin = 2.25.1 versions...
CVE-2023-23668
The CVE-2023-23668 entry concerns the WordPress GiveWP plugin, versions
CVE-2023-23668 WordPress GiveWP Plugin <= 2.25.1 is vulnerable to Cross Site Scripting (XSS)
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in GiveWP plugin = 2.25.1 versions...
CVE-2023-23668 WordPress GiveWP Plugin <= 2.25.1 is vulnerable to Cross Site Scripting (XSS)
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in GiveWP plugin = 2.25.1 versions...
WordPress GiveWP Plugin <= 2.25.1 is vulnerable to Cross Site Scripting (XSS)
Software GiveWP Type Plugin Vulnerable versions = 2.25.1 Fixed in 2.25.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-23668 Patch priority Low CVSS severity Low 6.5 Developer Liquid Web / StellarWP PSID 17d2bd271dd1 Credits Rafshanzani Suhada...
CVE-2022-23668
creationtimestamp| type| source ---|---|--- 2022-05-17 00:26:50+00:00| seen| https://t.me/cibsecurity/42790...
CVE-2022-23668
CVE-2022-23668 is a remote authenticated SSRF vulnerability in Aruba ClearPass Policy Manager. Affected versions are 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, and 6.7.x and below. Aruba has released updates to address this vulnerability (per ARUBA-PSA-2022-007). Connected sources (N...
elcaribe.com.do XSS vulnerability
Vulnerable URL: http://www.elcaribe.com.do/archivos?buscar=OPENBUGBOUNTY%3Cimg%20src=x%20onerror=alert%28%22OPENBUGBOUNTY%22%29%3E Details: Description| Value ---|--- Patched:| Yes, at 16.07.2016 Latest check for patch:| 16.07.2016 16:01 GMT Vulnerability type:| XSS Vulnerability status:| Publicl...