Skip to content
OpenAdvisories

Archive

23 July 2022

Vulnerabilities first published on this day (UTC), newest first.

4 results · Feed

  • High 7.3

    InfiniteWP Client Plugin injection

    A vulnerability was found in InfiniteWP Client Plugin 1.5.1.3/1.6.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to injection. The attack can be launched remotely. Upgrading to version 1…

  • Unscored —

    There is an elevation of privilege breakout vulnerability in the Windows EXE installer in Scooter Beyond Compare 4.2.0 …

  • Unscored —

    A DLL hijacking vulnerability exists in the uninstaller in Scooter Beyond Compare 1.8a through 4.4.2 before 4.4.3 when …

  • Medium 6.1

    Django REST framework XSS Vulnerability

    Django REST framework (aka django-rest-framework) before 3.9.1 allows XSS because the default DRF Browsable API view templates disable autoescaping.