Skip to content
OpenAdvisories

Archive

28 March 2023

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 7.1
    CVE-2023-28447 Public exploit

    Cross site scripting vulnerability in Javascript escaping in smarty/smarty

    Smarty is a template engine for PHP. In affected versions smarty did not properly escape javascript code. An attacker could exploit this vulnerability to execute arbitrary JavaScript code in the context of the user's browser session. This may lead to unauthor…

  • High 7.5
    CVE-2023-25262 Public exploit

    Stimulsoft GmbH Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Server Side Request Forgery (SSRF). TThe Reporting …

  • High 7.5
    CVE-2023-25260 Public exploit

    Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Local File Inclusion.