CVE-2023-47505

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Elementor.Com Elementor allows Cross-Site Scripting XSS.This issue affects Elementor: from n/a through 3.16.4...

WordPress Elementor Website Builder Plugin <= 3.16.4 is vulnerable to Broken Access Control

Software Elementor Website Builder Type Plugin Vulnerable versions = 3.16.4 Fixed in 3.16.5 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-47504 Patch priority Low CVSS severity Low 6.5 Developer Elementor PSID 271c089c3c82 Credits Rafie Muhammad Patchsta...

CVE-2023-28843 Improper neutralization of SQL parameter in PayPal module for PrestaShop

PrestaShop/paypal is an open source module for the PrestaShop web commerce ecosystem which provides paypal payment support. A SQL injection vulnerability found in the PrestaShop paypal module from release from 3.12.0 to and including 3.16.3 allow a remote attacker to gain privileges, modify data,...