Skip to content
OpenAdvisories

Archive

7 June 2021

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 10.0
    CVE-2021-32671 EPSS 40%

    XSS vulnerability with translator

    Flarum is a forum software for building communities. Flarum's translation system allowed for string inputs to be converted into HTML DOM nodes when rendered. This change was made after v0.1.0-beta.16 (our last beta before v1.0.0) and was not noticed or docume…

  • Critical 9.1

    Improper Certificate Validation in WP-CLI framework

    WP-CLI is the command-line interface for WordPress. An improper error handling in HTTPS requests management in WP-CLI version 0.12.0 and later allows remote attackers able to intercept the communication to remotely disable the certificate verification on WP-C…