Skip to content
OpenAdvisories

Archive

20 March 2023

Vulnerabilities first published on this day (UTC), newest first.

← February 2023 2023 / March /20 April 2023 →
  1. 184
  2. 258
  3. 356
  4. 48
  5. 526
  6. 6101
  7. 7170
  8. 856
  9. 959
  10. 1069
  11. 118
  12. 1211
  13. 1383
  14. 14163
  15. 1578
  16. 16109
  17. 1757
  18. 1823
  19. 1914
  20. 2062
  21. 2180
  22. 2285
  23. 23141
  24. 24202
  25. 2513
  26. 2615
  27. 27181
  28. 28149
  29. 29233
  30. 3065
  31. 3160
All Critical High Medium Low Exploited only Public exploit

62 results · Feed

  • Medium 5.9
    CVE-2023-22679

    WordPress WP Better Emails Plugin <= 0.4 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Nicolas Lemoine WP Better Emails plugin <= 0.4 versions.

    Nicolas Lemoine WP Better Emails
  • Medium 4.3
    CVE-2023-23721

    WordPress Admin Log Plugin <= 1.50 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in David Gwyer Admin Log plugin <= 1.50 versions.

    David Gwyer Admin Log
  • Medium 5.9
    CVE-2023-23718

    WordPress Page Loading Effects Plugin <= 2.0.0 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Esstat17 Page Loading Effects plugin <= 2.0.0 versions.

    Esstat17 Page Loading Effects
  • Medium 5.4
    CVE-2023-22678

    WordPress Superior FAQ Plugin <= 1.0.2 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Rafael Dery Superior FAQ plugin <= 1.0.2 versions.

    Rafael Dery Superior FAQ
  • Medium 4.3
    CVE-2023-22681

    WordPress Online Exam Software : eExamhall Plugin <= 4.0 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Aarvanshinfotech Online Exam Software: eExamhall plugin <= 4.0 versions.

    Aarvansh Infotech Online Exam Software : eExamhall
  • Medium 5.9
    CVE-2023-24381

    WordPress Advanced Social Pixel Plugin <= 2.1.1 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in NsThemes Advanced Social Pixel plugin <= 2.1.1 versions.

    nsthemes Advanced Social Pixel
  • Medium 5.9
    CVE-2023-25064

    WordPress WP htpasswd Plugin <= 1.7 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Matteo Candura WP htpasswd plugin <= 1.7 versions.

    Matteo Candura WP htpasswd
  • Medium 5.9
    CVE-2023-25794

    WordPress Nooz Plugin <= 1.6.0 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Mighty Digital Nooz plugin <= 1.6.0 versions.

    Mighty Digital Nooz
  • Medium 5.9
    CVE-2023-25795

    WordPress Feed Changer Plugin <= 0.2 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in WP-master.Ir Feed Changer & Remover plugin <= 0.2 versions.

    WP-master.ir Feed Changer & Remover
  • Low 3.5
    CVE-2023-1507

    SourceCodester E-Commerce System Category Name controller.php cross site scripting

    A vulnerability has been found in SourceCodester E-Commerce System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /ecommerce/admin/category/controller.php of the component Category Name Handler. The m…

    SourceCodester E-Commerce System
  • Medium 5.9
    CVE-2023-25782

    WordPress Service Area Postcode Checker Plugin <= 2.0.8 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) vulnerability in Second2none Service Area Postcode Checker plugin <= 2.0.8 versions.

    Second2none Service Area Postcode Checker
  • Medium 5.6
    CVE-2023-1506

    SourceCodester E-Commerce System login.php sql injection

    A vulnerability, which was classified as critical, was found in SourceCodester E-Commerce System 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument U_USERNAME leads to sql injection. It is possible to launch the attac…

    SourceCodester E-Commerce System
  • Medium 5.0
    CVE-2023-1505

    SourceCodester E-Commerce System setDiscount.php sql injection

    A vulnerability, which was classified as critical, has been found in SourceCodester E-Commerce System 1.0. This issue affects some unknown processing of the file /ecommerce/admin/settings/setDiscount.php. The manipulation of the argument id with the input 201…

    SourceCodester E-Commerce System
  • Medium 5.6
    CVE-2023-1504

    SourceCodester Alphaware Simple E-Commerce System sql injection

    A vulnerability classified as critical was found in SourceCodester Alphaware Simple E-Commerce System 1.0. This vulnerability affects unknown code. The manipulation of the argument email/password with the input test1%40test.com ' AND (SELECT 6077 FROM (SELECT…

    SourceCodester Alphaware Simple E-Commerce System
  • High 7.4
    CVE-2023-1250

    Code execution through ACL creation

    Improper Input Validation vulnerability in OTRS AG OTRS (ACL modules), OTRS AG ((OTRS)) Community Edition (ACL modules) allows Local Execution of Code. When creating/importing an ACL it was possible to inject code that gets executed via manipulated comments a…

    OTRS OTRS ((OTRS)) Community Edition otrs2 Ubuntu
  • Medium 6.1
    CVE-2023-1248

    Possible XSS in Ticket Actions

    Improper Input Validation vulnerability in OTRS AG OTRS (Ticket Actions modules), OTRS AG ((OTRS)) Community Edition (Ticket Actions modules) allows Cross-Site Scripting (XSS).This issue affects OTRS: from 7.0.X before 7.0.42; ((OTRS)) Community Edition: from…

    OTRS OTRS ((OTRS)) Community Edition otrs2 Ubuntu
  • Medium 5.6
    CVE-2023-1503

    SourceCodester Alphaware Simple E-Commerce System admin_index.php sql injection

    A vulnerability classified as critical has been found in SourceCodester Alphaware Simple E-Commerce System 1.0. This affects an unknown part of the file admin/admin_index.php. The manipulation of the argument username/password with the input admin' AND (SELEC…

    SourceCodester Alphaware Simple E-Commerce System
  • Medium 5.6
    CVE-2023-1502

    SourceCodester Alphaware Simple E-Commerce System edit_customer.php sql injection

    A vulnerability was found in SourceCodester Alphaware Simple E-Commerce System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file function/edit_customer.php. The manipulation of the argument firstname/mi/lastn…

    SourceCodester Alphaware Simple E-Commerce System
  • Medium 6.3
    CVE-2022-4933

    ATM Consulting dolibarr_module_quicksupplierprice interface.php upatePrice sql injection

    A vulnerability, which was classified as critical, has been found in ATM Consulting dolibarr_module_quicksupplierprice up to 1.1.6. Affected by this issue is the function upatePrice of the file script/interface.php. The manipulation leads to sql injection. Th…

    ATM Consulting dolibarr_module_quicksupplierprice
  • Medium 5.0
    CVE-2015-10096

    Zarthus IRC Twitter Announcer Bot twitter_announcer.rb get_tweets command injection

    A vulnerability, which was classified as critical, was found in Zarthus IRC Twitter Announcer Bot up to 1.1.0. This affects the function get_tweets of the file lib/twitterbot/plugins/twitter_announcer.rb. The manipulation of the argument tweet leads to comman…

    Zarthus IRC Twitter Announcer Bot
  • Medium 4.0
    CVE-2023-1517

    Cross-site Scripting (XSS) - DOM in pimcore/pimcore

    Cross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.19.

    pimcore pimcore/pimcore pimcore/pimcore Packagist
  • Medium 5.2
    CVE-2023-1515

    Cross-site Scripting (XSS) - Stored in pimcore/pimcore

    Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.19.

    pimcore pimcore/pimcore pimcore/pimcore Packagist