Lucene search

S-Sols Security Vulnerabilities

cve

CVE-2023-48279

Cross-Site Request Forgery (CSRF) vulnerability in Seraphinite Solutions Seraphinite Post .DOCX Source allows Cross Site Request Forgery.This issue affects Seraphinite Post .DOCX Source: from n/a through 2.16.6.

8.8CVSS

8.7AI Score

0.001EPSS

2023-11-30 02:15 PM

cve

CVE-2023-5609

The Seraphinite Accelerator WordPress plugin before 2.2.29 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

6.1CVSS

6.1AI Score

0.0005EPSS

2023-11-20 07:15 PM

cve

CVE-2023-5610

The Seraphinite Accelerator WordPress plugin before 2.2.29 does not validate the URL to redirect any authenticated user to, leading to an arbitrary redirect

5.4CVSS

5.8AI Score

0.0004EPSS

2023-11-20 07:15 PM