Skip to content
OpenAdvisories

Archive

2 May 2023

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Low 3.5

    Funadmin Cx.php tagLoad cross site scripting

    A vulnerability was found in Funadmin up to 3.2.3. It has been declared as problematic. Affected by this vulnerability is the function tagLoad of the file Cx.php. The manipulation of the argument file leads to cross site scripting. The attack can be launched …

  • Low 3.5

    Dromara J2eeFAST Announcement cross site scripting

    A vulnerability was found in Dromara J2eeFAST up to 2.6.0. It has been classified as problematic. Affected is an unknown function of the component Announcement Handler. The manipulation of the argument 系统工具/公告管理 leads to cross site scripting. It is possible t…

  • Low 3.5

    Dromara J2eeFAST System Message cross site scripting

    A vulnerability was found in Dromara J2eeFAST up to 2.6.0 and classified as problematic. This issue affects some unknown processing of the component System Message Handler. The manipulation of the argument 主题 leads to cross site scripting. The attack may be i…

  • Low 3.5

    BestWebSoft Job Board Plugin cross site scripting

    A vulnerability classified as problematic was found in BestWebSoft Job Board Plugin 1.0.0 on WordPress. This vulnerability affects unknown code. The manipulation leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 1.0.1 i…

  • Low 3.5

    Mail Subscribe List Plugin index.php cross site scripting

    A vulnerability, which was classified as problematic, has been found in Mail Subscribe List Plugin up to 2.0.10 on WordPress. This issue affects some unknown processing of the file index.php. The manipulation of the argument sml_name/sml_email leads to cross …

  • Low 3.8

    Insufficient length checks in the ShapeShift KeepKey hardware wallet firmware before 7.7.0 allow a global buffer overfl…