Skip to content
OpenAdvisories

Archive

2 August 2021

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Unscored —
    CVE-2021-37840 Public exploit

    aaPanel through 6.8.12 allows Cross-Site WebSocket Hijacking (CSWH) involving OS commands within WebSocket messages at …

  • Unscored —
    CVE-2021-24488 Public exploit EPSS 11%

    Post Grid < 2.1.8 - Reflected Cross-Site Scripting (XSS)

    The slider import search feature and tab parameter of the Post Grid WordPress plugin before 2.1.8 settings are not properly sanitised before being output back in the pages, leading to Reflected Cross-Site Scripting issues

  • Unscored —
    CVE-2021-24444 Public exploit

    TaxoPress < 3.0.7.2 - Authenticated Stored Cross-Site Scripting (XSS)

    The TaxoPress – Create and Manage Taxonomies, Tags, Categories WordPress plugin before 3.0.7.2 does not sanitise its Taxonomy description field, allowing high privilege users to set JavaScript payload in them even when the unfiltered_html capability is disall…