4 matches found
CVE-2023-23464
Media CP Media Control Panel latest version. A Permissive Flash Cross-domain Policy may allow information disclosure.
CVE-2023-23465
Media CP Media Control Panel latest version. CSRF possible through unspecified endpoint.
CVE-2023-23467
Media CP Media Control Panel latest version. Reflected XSS possible through unspecified endpoint.
CVE-2023-23466
Media CP Media Control Panel latest version. Insufficiently protected credential change.