Skip to content
OpenAdvisories

Archive

30 May 2023

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 5.4
    CVE-2023-33962 Public exploit

    JStachio XSS vulnerability: Unescaped single quotes

    JStachio is a type-safe Java Mustache templating engine. Prior to version 1.0.1, JStachio fails to escape single quotes `'` in HTML, allowing an attacker to inject malicious code. This vulnerability can be exploited by an attacker to execute arbitrary JavaScr…

  • Medium 6.1
    CVE-2023-2023 Public exploit Scanner template

    Custom 404 Pro < 3.7.3 - Reflected Cross-Site Scripting

    The Custom 404 Pro WordPress plugin before 3.7.3 does not escape some URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting.

  • Medium 6.1
    CVE-2023-23956 Public exploit

    A user can supply malicious HTML and JavaScript code that will be executed in the client browser