6731 matches found
CVE-2023-1096
SnapCenter versions 4.7 prior to 4.7P2 and 4.8 prior to 4.8P1 are susceptible to a vulnerability which could allow a remote unauthenticated attacker to gain access as an admin user...
Spoofing
SnapCenter versions 4.7 prior to 4.7P2 and 4.8 prior to 4.8P1 are susceptible to a vulnerability which could allow a remote unauthenticated attacker to gain access as an admin user...
CVE-2023-28414
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in ApexChat plugin = 1.3.1 versions...
CVE-2023-23810
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in SnapOrbital Panorama plugin = 1.5 versions...
CVE-2023-22685
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin = v2.2 versions...
CVE-2023-25460
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in CodeSolz Easy Ad Manager plugin = 1.0.0 versions...
CVE-2023-22685
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin = v2.2 versions...
CVE-2023-25958 WordPress Simple Tooltips Plugin <= 2.1.4 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Justin Saad Simple Tooltips plugin = 2.1.4 versions...
PT-2023-16750 · Netapp · Snapcenter
Name of the Vulnerable Software and Affected Versions: SnapCenter versions 4.7 prior to 4.7P2 SnapCenter versions 4.8 prior to 4.8P1 Description: The issue allows a remote unauthenticated attacker to gain access as an admin user. Recommendations: For SnapCenter versions 4.7 prior to 4.7P2, update...
PT-2023-22221 · Apache · Apache Openmeetings
Name of the Vulnerable Software and Affected Versions: Apache OpenMeetings versions 2.0.0 through 7.1.0 Description: The issue allows an attacker with admin account access to perform remote code execution RCE via null-byte injection. Recommendations: For Apache OpenMeetings versions 2.0.0 through...
CVE-2023-1096
CVE-2023-1096 affects NetApp SnapCenter: versions 4.7 before 4.7P2 and 4.8 before 4.8P1 are susceptible to an unauthenticated remote access leading to admin privileges. The issue is addressed by upgrading to SnapCenter 4.7P2 or 4.8P1, per NetApp advisory and corroborating sources.
CVE-2023-2490 WordPress UserAgent-Spy Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Fernando Briano UserAgent-Spy plugin = 1.3.1 versions...
CVE-2022-47137
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WPManageNinja LLC Ninja Tables plugin = 4.3.4 versions...
CVE-2022-46817
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Flyzoo Flyzoo Chat plugin = 2.3.3 versions...
CVE-2022-33961
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WaspThemes Visual CSS Style Editor plugin = 7.5.8 versions...
CVE-2023-24406
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Muneeb ur Rehman Simple PopUp plugin = 1.8.6 versions...
CVE-2023-23789
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Premmerce Premmerce Redirect Manager plugin = 1.0.9 versions...
Cross site scripting
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Premmerce Premmerce Redirect Manager plugin = 1.0.9 versions...
CVE-2023-23789 WordPress Premmerce Redirect Manager Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Premmerce Premmerce Redirect Manager plugin = 1.0.9 versions...
CVE-2023-23788 WordPress Custom More Link Complete Plugin <= 1.4.1 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Florin Arjocu Custom More Link Complete plugin = 1.4.1 versions...