Skip to content
OpenAdvisories

Archive

5 March 2023

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • Low 3.5

    Landing Pages Plugin cross site scripting

    A vulnerability, which was classified as problematic, has been found in Landing Pages Plugin up to 1.8.7 on WordPress. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting. The attack may be launched remotely. U…

  • Low 3.5

    MaxButtons Plugin maxbuttons-button.php maxbuttons_strip_px cross site scripting

    A vulnerability was found in MaxButtons Plugin up to 1.26.0 on WordPress and classified as problematic. This issue affects the function maxbuttons_strip_px of the file includes/maxbuttons-button.php. The manipulation of the argument button_id leads to cross s…

  • Low 3.5

    Subscribe to Comments Plugin subscribe-to-comments.php cross site scripting

    A vulnerability, which was classified as problematic, was found in Subscribe to Comments Plugin up to 2.0.7 on WordPress. This affects an unknown part of the file subscribe-to-comments.php. The manipulation leads to cross site scripting. It is possible to ini…

  • Low 3.5

    flame.js cross site scripting

    A vulnerability classified as problematic has been found in flame.js. This affects an unknown part. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. This product does not use versioning. This is why information a…

  • Low 3.5

    SourceCodester Health Center Patient Record Management System hematology_print.php cross site scripting

    A vulnerability has been found in SourceCodester Health Center Patient Record Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file hematology_print.php. The manipulation of the argument he…

  • Low 3.5

    SourceCodester Computer Parts Sales and Inventory System Add Supplier cross site scripting

    A vulnerability, which was classified as problematic, was found in SourceCodester Computer Parts Sales and Inventory System 1.0. Affected is an unknown function of the component Add Supplier Handler. The manipulation of the argument company_name/province/city…

  • Low 3.5

    cfire24 ajaxlife cross site scripting

    A vulnerability has been found in cfire24 ajaxlife up to 0.3.2 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 0.3.3 is able to …