Skip to content
OpenAdvisories

Archive

17 May 2023

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Medium 5.4
    CVE-2023-2745 Public exploit Scanner template EPSS 80%

    WordPress Core < 6.2.1 - Directory Traversal

    WordPress Core is vulnerable to Directory Traversal in versions up to, and including, 6.2, via the ‘wp_lang’ parameter. This allows unauthenticated attackers to access and load arbitrary translation files. In cases where an attacker is able to upload a crafte…

  • Medium 4.8
    CVE-2023-31699 Public exploit

    ChurchCRM v4.5.4 is vulnerable to Reflected Cross-Site Scripting (XSS) via image file.

  • High 7.2
    CVE-2023-31702 Public exploit

    SQL injection in the View User Profile in MicroWorld eScan Management Console 14.0.1400.2281 allows remote attacker to …

  • Medium 5.4
    CVE-2023-31698 Public exploit

    Bludit v3.14.1 is vulnerable to Stored Cross Site Scripting (XSS) via SVG file on site logo. NOTE: the product's securi…

  • Critical 9.8
    CVE-2023-31902 Public exploit

    RPA Technology Mobile Mouse 3.6.0.4 is vulnerable to Remote Code Execution (RCE).

  • Critical 9.0
    CVE-2023-31703 Public exploit

    Cross Site Scripting (XSS) in the edit user form in Microworld Technologies eScan management console 14.0.1400.2281 all…