Skip to content
OpenAdvisories

Archive

31 December 2022

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Low 3.5

    Yuna Scatari TBDev usersearch.php get_user_icons cross site scripting

    A vulnerability has been found in Yuna Scatari TBDev up to 2.1.17 and classified as problematic. Affected by this vulnerability is the function get_user_icons of the file usersearch.php. The manipulation of the argument n/r/r2/em/ip/co/ma/d/d2/ul/ul2/ls/ls2/d…

  • Low 3.5

    rf Keynote rumble.rb cross site scripting

    A vulnerability was found in rf Keynote up to 0.x on Rails. It has been rated as problematic. Affected by this issue is some unknown functionality of the file lib/keynote/rumble.rb. The manipulation of the argument value leads to cross site scripting. The att…

  • Low 3.5

    vova07 Yii2 FileAPI Widget UploadAction.php run cross site scripting

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in vova07 Yii2 FileAPI Widget up to 0.1.8. It has been declared as problematic. Affected by this vulnerability is the function run of the file actions/UploadAction.php. The manipulation of the argument…

  • Low 3.5

    Cross-Site Request Forgery (CSRF) in froxlor/froxlor

    Cross-Site Request Forgery (CSRF) in GitHub repository froxlor/froxlor prior to 2.0.0-beta1.