Skip to content
OpenAdvisories

Archive

27 July 2022

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2022-34140 Public exploit

    Feehi CMS Cross-site Scripting

    A stored cross-site scripting (XSS) vulnerability in /index.php?r=site%2Fsignup of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username field.

  • Medium 6.5
    CVE-2022-36883 Public exploit Scanner template

    Lack of authentication mechanism in Jenkins Git Plugin webhook

    A missing permission check in Jenkins Git Plugin 4.11.3 and earlier allows unauthenticated attackers to trigger builds of jobs configured to use an attacker-specified Git repository and to cause them to check out an attacker-specified commit.