Skip to content
OpenAdvisories

Archive

6 February 2023

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Low 3.5

    WangGuard Plugin WGG User List wangguard-user-info.php wangguard_users_info cross site scripting

    A vulnerability, which was classified as problematic, has been found in WangGuard Plugin 1.8.0 on WordPress. Affected by this issue is the function wangguard_users_info of the file wangguard-user-info.php of the component WGG User List Handler. The manipulati…

  • Low 3.5

    tinymighty WikiSEO Meta Property Tag WikiSEO.body.php modifyHTML cross site scripting

    A vulnerability, which was classified as problematic, was found in tinymighty WikiSEO 1.2.1 on MediaWiki. This affects the function modifyHTML of the file WikiSEO.body.php of the component Meta Property Tag Handler. The manipulation of the argument content le…

  • Low 2.0

    Nexcloud Mail app temporarily stores cleartext password in database

    Nextcloud mail is an email app for the nextcloud home server platform. In versions prior to 2.2.2 user's passwords were stored in cleartext in the database during the duration of OAuth2 setup procedure. Any attacker or malicious user with access to the databa…

  • Low 3.5

    eXo Chat Application Mention ExoChatMessageComposer.vue cross site scripting

    A vulnerability classified as problematic has been found in eXo Chat Application. Affected is an unknown function of the file application/src/main/webapp/vue-app/components/ExoChatMessageComposer.vue of the component Mention Handler. The manipulation leads to…

  • Low 3.5

    ciubotaru share-on-diaspora new_window.php cross site scripting

    A vulnerability classified as problematic was found in ciubotaru share-on-diaspora 0.7.9. This vulnerability affects unknown code of the file new_window.php. The manipulation of the argument title/url leads to cross site scripting. The attack can be initiated…