CVE-2026-23891

creationtimestamp| type| source ---|---|--- 2026-04-13 19:18:48+00:00| published-proof-of-concept| Telegram/faPFXRAaRfhi9SNZmtwnWuzO2c0g7l8werKC93MLkaum65E...

CVE-2026-23891

Decidim is a participatory democracy framework. In versions below 0.30.5 and 0.31.0.rc1 through 0.31.0, a stored code execution vulnerability in the user name field allows a low-privileged attacker to execute arbitrary code in the context of any user who passively visits a comment page, resulting...

CVE-2021-23891

Privilege Escalation vulnerability in McAfee Total Protection MTP prior to 16.0.32 allows a local user to gain elevated privileges by impersonating a client token which could lead to the bypassing of MTP self-defense...

CVE-2025-23891

creationtimestamp| type| source ---|---|--- 2025-01-16 21:19:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv7gcqug22n 2025-01-17 21:56:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2217...

CVE-2025-23891

CVE-2025-23891 affects Yet Another Countdown Plugin (WordPress). Public records confirm a DOM-based Cross-Site Scripting vulnerability due to improper input handling during web page generation. The Red Hat entry and Wordfence report this as applicable to Yet Another Countdown with affected versio...

CVE-2024-23891

creationtimestamp| type| source ---|---|--- 2024-01-26 12:21:46+00:00| seen| https://t.me/ctinow/174184 2024-02-19 16:27:01+00:00| seen| https://t.me/ctinow/187804...

CVE-2024-23891 Cross-Site Scripting (XSS) vulnerability in Cups Easy

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/itemcreate.php, in the itemid parameter. Exploitation of this vulnerability could...

CVE-2024-23891 Cross-Site Scripting (XSS) vulnerability in Cups Easy

A vulnerability has been reported in Cups Easy Purchase & Inventory, version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting XSS vulnerability via /cupseasylive/itemcreate.php, in the itemid parameter. Exploitation of this vulnerability could...

CVE-2024-23891

Cups Easy (Purchase & Inventory) version 1.0 is affected by an XSS in the /cupseasylive/itemcreate.php endpoint, via the itemid parameter, caused by insufficient input encoding. An attacker could entice an authenticated user to visit a crafted URL, potentially allowing theft of session cookies. P...

CVE-2023-23891

creationtimestamp| type| source ---|---|--- 2023-04-06 18:27:08+00:00| seen| https://t.me/cibsecurity/61559...

CVE-2023-23891

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in OceanWP Ocean Extra plugin = 2.1.1 versions. Needs the OceanWP theme installed and activated...

CVE-2023-23891

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in OceanWP Ocean Extra plugin = 2.1.1 versions. Needs the OceanWP theme installed and activated...

CVE-2023-23891

The CVE-2023-23891 entry concerns the WordPress Ocean Extra plugin (OceanWP) with a Stored XSS vulnerability in versions ≤ 2.1.1 when the OceanWP theme is installed and activated. The root cause is an input handling/shortcode context that permits script injection by authenticated contributors. Af...

WordPress Ocean Extra Plugin <= 2.1.1 is vulnerable to Cross Site Scripting (XSS)

Software Ocean Extra Type Plugin Vulnerable versions = 2.1.1 Fixed in 2.1.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-23891 Patch priority Low CVSS severity Low 5.5 Developer Claim ownership PSID 64d559e2d891 Credits Rafshanzani Suhada Required...

CVE-2020-23891

creationtimestamp| type| source ---|---|--- 2021-11-11 00:36:50+00:00| seen| https://t.me/cibsecurity/32210...

CVE-2020-23891

A User Mode Write AV in Editor+0x5cd7 of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted tiff file...

CVE-2020-23891

A User Mode Write AV in Editor+0x5cd7 of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted tiff file...

CVE-2020-23891

Summary: CVE-2020-23891 affects WildBit Viewer 6.6, with a vulnerability in the Editor+0x5cd7 path that allows a user-mode write condition to trigger a denial of service when handling specially crafted TIFF files. The issue is described in multiple sources (e.g., CNVD, Red Hat, NVD). The exact ro...

CVE-2021-23891

creationtimestamp| type| source ---|---|--- 2021-05-12 20:33:33+00:00| seen| Telegram/rz1i9JDFPIFc-RlhxXIbN8xNrEQ3crzH9nex2vbOYTRXOwo...

CVE-2021-23891

Privilege Escalation vulnerability in McAfee Total Protection MTP prior to 16.0.32 allows a local user to gain elevated privileges by impersonating a client token which could lead to the bypassing of MTP self-defense...