Skip to content
OpenAdvisories

Archive

27 April 2018

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Unscored —
    CVE-2018-10517 Public exploit EPSS 12%

    In CMS Made Simple (CMSMS) through 2.2.7, the "module import" operation in the admin dashboard contains a remote code e…

  • Unscored —
    CVE-2018-7669 Public exploit EPSS 17%

    An issue was discovered in Sitecore Sitecore.NET 8.1 rev. 151207 Hotfix 141178-1 and above. The 'Log Viewer' applicatio…

  • Unscored —
    CVE-2018-10504 Public exploit

    The WebDorado "Form Maker by WD" plugin before 1.12.24 for WordPress allows CSV injection.