Skip to content
OpenAdvisories

Archive

27 September 2021

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Unscored —
    CVE-2021-20034 Public exploit EPSS 82%

    An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to bypass the path traversa…

  • Unscored —
    CVE-2021-24610 Public exploit

    TranslatePress < 2.0.9 - Authenticated Stored Cross-Site Scripting

    The TranslatePress WordPress plugin before 2.0.9 does not implement a proper sanitisation on the translated strings. The 'trp_sanitize_string' function only removes script tag with a regex, still allowing other HTML tags and attributes to execute javascript, …