CVE-2023-24034

Nagios XI before 5.9.3 contains an open redirect vulnerability in twilio_ajax_handler.php , allowing an unauthenticated attacker to force a user to visit a malicious site. The CVSS v3.1 base score is 3.1 (Low) , reflecting the need for user interaction and high attack complexity. The fix is avail...

PT-2023-13313 · WordPress · Wpqa Builder

Name of the Vulnerable Software and Affected Versions: WPQA Builder WordPress plugin versions prior to 5.9.3 Description: The issue arises from incorrect validation in the wpqa following you ajax action, allowing a user to inflate their score by receiving repeated follow actions from another user...