Archive
28 March 2023
Vulnerabilities first published on this day (UTC), newest first.
3 results · Clear filters · Feed
-
High 7.1CVE-2023-28447 Public exploit
Cross site scripting vulnerability in Javascript escaping in smarty/smarty
Smarty is a template engine for PHP. In affected versions smarty did not properly escape javascript code. An attacker could exploit this vulnerability to execute arbitrary JavaScript code in the context of the user's browser session. This may lead to unauthor…
-
High 7.5CVE-2023-25262 Public exploit
Stimulsoft GmbH Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Server Side Request Forgery (SSRF). TThe Reporting …
-
High 7.5CVE-2023-25260 Public exploit
Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Local File Inclusion.