7171 matches found
Cross site scripting
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Abu Bakar TWB Woocommerce Reviews plugin = 1.7.5 versions...
CVE-2023-47658
CVE-2023-47658 is an authenticated Stored XSS in actpro Extra Product Options for WooCommerce (plugin
CVE-2023-47659
CVE-2023-47659 is a stored XSS vulnerability in the Lava Directory Manager WordPress plugin by Lavacode, affecting versions up to 1.1.34. The vulnerability is exploitable by an authenticated contributor (per Patchstack) and remains unpatched in the public release history. Multiple sources corrobo...
CVE-2023-47657
Auth. ShopManager+ Stored Cross-Site Scripting XSS vulnerability in GrandPlugins Direct Checkout – Quick View – Buy Now For WooCommerce plugin = 1.5.8 versions...
PT-2023-30534 · Cedcommerce · Cedcommerce Recently Viewed/Most Viewed Products Plugin
Name of the Vulnerable Software and Affected Versions: CedCommerce Recently viewed and most viewed products plugin versions prior to 1.1.1 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. It affects users with Auth Shop Manager+ permissions. Recommendations: F...
CVE-2023-36688
CVE-2023-36688 affects WordPress Simple Site Verify plugin (versions
CVE-2023-47229
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Vyas Dipen Top 25 Social Icons plugin = 3.1 versions...
CVE-2023-47231
CVE-2023-47231 affects Bainternet ShortCodes UI plugin on WordPress (versions
CVE-2023-47227
The CVE-2023-47227 entry corresponds to an authenticated Stored XSS in the WordPress plugin “Social Feed | All social media in one place” (Web-Settler Social Feed)
CVE-2023-47223
CVE-2023-47223 affects the WordPress plugin Basic Interactive World Map (WP Map Plugins) version ≤ 2.0. The vulnerability is a stored XSS due to inadequate escaping of input in the affected component, with an attacker (admin+ privileges) able to trigger it. The issue is classified with low to med...
CVE-2023-47181
CVE-2023-47181 affects the IdeaPush WordPress plugin (
CVE-2023-46640
CVE-2023-46640 affects the WordPress Medialist plugin by D. Relton, with a stored XSS vulnerability in versions
kernel: nvme-core: fix memory leak in dhchap_ctrl_secret
In the Linux kernel, the following vulnerability has been resolved: nvme-core: fix memory leak in dhchapctrlsecret Free dhchapsecret in nvmectrldhchapctrlsecretstore before we return when nvmeauthgeneratekey returns error...
CVE-2023-23702 WordPress Comments Ratings Plugin <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Pixelgrade Comments Ratings plugin = 1.1.7 versions...
CVE-2023-46782
CVE-2023-46782 describes a Stored XSS in the Chris Yee MomentoPress for Momento360 WordPress plugin, affected versions
CVE-2023-40681
CVE-2023-40681 is a stored XSS vulnerability in Groundhogg WordPress plugin (versions
CVE-2023-46210 WordPress WC Captcha Plugin <= 1.4 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in WebCource WC Captcha plugin = 1.4 versions...
DEBIAN-CVE-2023-46129
NATS.io is a high performance open source pub-sub distributed communication technology, built for the cloud, on-premise, IoT, and edge computing. The cryptographic key handling library, nkeys, recently gained support for encryption, not just for signing/authentication. This is used in nats-server...
UBUNTU-CVE-2023-46129
NATS.io is a high performance open source pub-sub distributed communication technology, built for the cloud, on-premise, IoT, and edge computing. The cryptographic key handling library, nkeys, recently gained support for encryption, not just for signing/authentication. This is used in nats-server...