Skip to content
OpenAdvisories

Archive

24 May 2021

Vulnerabilities first published on this day (UTC), newest first.

← April 2021 2021 / May /24 June 2021 →
  1. 1 
  2. 21
  3. 319
  4. 414
  5. 588
  6. 6106
  7. 7105
  8. 8 
  9. 91
  10. 1055
  11. 11141
  12. 1247
  13. 1363
  14. 14170
  15. 15 
  16. 165
  17. 1778
  18. 1841
  19. 1930
  20. 2061
  21. 2150
  22. 2218
  23. 23 
  24. 2493
  25. 2555
  26. 26105
  27. 2784
  28. 2865
  29. 296
  30. 30 
  31. 3120
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 4.8
    CVE-2021-33561 Public exploit

    Cross-site scripting in Shopizer

    A stored cross-site scripting (XSS) vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTML via customer_name in various forms of store administration. It is saved in the database. The code is executed for any us…

    com.shopizer:shopizer Maven
  • Medium 4.8
    CVE-2021-33562 Public exploit

    Cross-site scripting in Shopizer

    A reflected cross-site scripting (XSS) vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTML via the ref parameter to a page about an arbitrary product, e.g., a product/insert-product-name-here.html/ref= URL.

    com.shopizer:shopizer Maven
  • Unscored —
    CVE-2021-24307 Public exploit EPSS 53%

    All in One SEO Pack < 4.1.0.2 - Admin RCE via unserialize

    The All in One SEO – Best WordPress SEO Plugin – Easily Improve Your SEO Rankings before 4.1.0.2 enables authenticated users with "aioseo_tools_settings" privilege (most of the time admin) to execute arbitrary code on the underlying host. Users can restore pl…

    All in One SEO Team All in One SEO – Best WordPress SEO Plugin – Easily Improve Your SEO Rankings Web / CMS
  • Unscored —
    CVE-2021-24308 Public exploit

    LifterLMS < 4.21.1 - Authenticated Stored XSS in Edit Profile

    The 'State' field of the Edit profile page of the LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin for WordPress plugin before 4.21.1 is not properly sanitised when output in the About section of the profile page, leading to a …

    lifterlms LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin for WordPress Web / CMS
  • Unscored —
    CVE-2021-24300 Public exploit EPSS 11%

    PickPlugins Product Slider for WooCommerce < 1.13.22 - Reflected Cross-Site Scripting (XSS)

    The slider import search feature of the PickPlugins Product Slider for WooCommerce WordPress plugin before 1.13.22 did not properly sanitised the keyword GET parameter, leading to reflected Cross-Site Scripting issue

    PickPlugins PickPlugins Product Slider for WooCommerce Web / CMS