Skip to content
OpenAdvisories

Archive

8 November 2021

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Unscored —
    CVE-2021-40577 Public exploit

    A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Online Enrollment Management System in PHP a…

  • Unscored —
    CVE-2021-24807 Public exploit

    Support Board < 3.3.5 - Agent+ Stored Cross-Site Scripting

    The Support Board WordPress plugin before 3.3.5 allows Authenticated (Agent+) users to perform Cross-Site Scripting attacks by placing a payload in the notes field, when an administrator or any authenticated user go to the chat the XSS will be automatically e…

  • Unscored —
    CVE-2021-24664 Public exploit

    WPSchoolPress < 2.1.17 - Multiple Admin+ Stored Cross-Site Scripting

    The School Management System – WPSchoolPress WordPress plugin before 2.1.17 sanitise some fields using sanitize_text_field() but does not escape them before outputting in attributes, resulting in Stored Cross-Site Scripting issues.

  • Unscored —
    CVE-2021-24647 Public exploit

    Pie Register < 3.7.1.6 - Unauthenticated Arbitrary Login

    The Registration Forms – User profile, Content Restriction, Spam Protection, Payment Gateways, Invitation Codes WordPress plugin before 3.1.7.6 has a flaw in the social login implementation, allowing unauthenticated attacker to login as any user on the site b…

  • Medium 5.3
    CVE-2021-31602 Public exploit EPSS 52%

    An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. Th…