4 matches found
CVE-2023-23467: Improper Neutralization of Input During Web Page Generation
Media CP Media Control Panel latest version. Reflected XSS possible through unspecified endpoint...
8.1CVSS5.7AI score0.00379EPSS
SaveExploits0References3
CVE-2023-23465: Cross-Site Request Forgery (CSRF)
Media CP Media Control Panel latest version. CSRF possible through unspecified endpoint...
9.1CVSS5.8AI score0.00281EPSS
SaveExploits0References3
CVE-2023-23466: Insufficiently Protected Credentials
Media CP Media Control Panel latest version. Insufficiently protected credential change...
7.5CVSS5.8AI score0.00411EPSS
SaveExploits0References3
CVE-2023-23464: Permissive Cross-domain Policy with Untrusted Domains
Media CP Media Control Panel latest version. A Permissive Flash Cross-domain Policy may allow information disclosure...
8.1CVSS5.8AI score0.00482EPSS
SaveExploits0References2
20