CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

Circl•added 2024/02/12 5:22 p.m.•5 views

CVE-2023-6499

creationtimestamp| type| source ---|---|--- 2024-02-12 17:22:03+00:00| seen| https://t.me/ctinow/183276 2024-02-15 14:21:15+00:00| seen| https://t.me/ctinow/185537 2025-05-06 21:21:38+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15228...

5.4CVSS8.7AI score0.00199EPSS

Exploits2References3

Vulnrichment•added 2024/02/12 4:5 p.m.•4 views

CVE-2023-6499 lasTunes <= 3.6.1 - Settings Update via CSRF

The lasTunes WordPress plugin through 3.6.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

5.2AI score0.00199EPSS

Exploits2References1