Skip to content
OpenAdvisories

Archive

19 January 2021

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Unscored —
    CVE-2020-28707 Public exploit

    The Stockdio Historical Chart plugin before 2.8.1 for WordPress is affected by Cross Site Scripting (XSS) via stockdio_…

  • Unscored —
    CVE-2020-23342 Public exploit EPSS 12%

    A CSRF vulnerability exists in Anchor CMS 0.12.7 anchor/views/users/edit.php that can change the Delete admin users.

  • Unscored —
    CVE-2020-23522 Public exploit

    Pixelimity 1.0 has cross-site request forgery via the admin/setting.php data [Password] parameter.

  • High 7.5
    CVE-2020-28478 Public exploit

    Prototype Pollution

    This affects the package gsap before 3.6.0.