WordPress Keap Official Opt-in Forms Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)

Software Keap Official Opt-in Forms Type Plugin Vulnerable versions = 2.0.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-47642 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID bd939afd94d0 Credits stealthcopter Required...

CVE-2023-47642

Zulip: The CVE-2023-47642 issue involves an API access bug where active users who were previously subscribed to a stream could still view that stream’s metadata after losing access. Affected product: Zulip (open‑source team collaboration tool). Affected component: Zulip API accessing stream metad...

CVE-2023-47642 Stream description leaks to ex-subscribers in Zulip

Zulip is an open-source team collaboration tool. It was discovered by the Zulip development team that active users who had previously been subscribed to a stream incorrectly continued being able to use the Zulip API to access metadata for that stream. As a result, users who had been removed from ...