Skip to content
OpenAdvisories

Archive

31 October 2022

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 8.8
    CVE-2022-3357 Public exploit

    Smart Slider 3 < 3.5.1.11 - PHP Object Injection

    The Smart Slider 3 WordPress plugin before 3.5.1.11 unserialises the content of an imported file, which could lead to PHP object injection issues when a user import (intentionally or not) a malicious file, and a suitable gadget chain is present on the site.

  • High 7.3
    CVE-2022-3766 Public exploit Scanner template

    Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq

    Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.8.