Skip to content
OpenAdvisories

Archive

May 2023

Vulnerabilities first published in this month (UTC), newest first.

← April 2023 2023 / May June 2023 →
  1. 139
  2. 281
  3. 378
  4. 487
  5. 542
  6. 69
  7. 74
  8. 8185
  9. 9252
  10. 10210
  11. 11101
  12. 1290
  13. 13 
  14. 1411
  15. 15147
  16. 1695
  17. 1757
  18. 1891
  19. 1927
  20. 2023
  21. 217
  22. 2284
  23. 2399
  24. 2486
  25. 2578
  26. 2688
  27. 2724
  28. 2834
  29. 2934
  30. 30151
  31. 31120
All Critical High Medium Low Exploited only Public exploit

1,208 results · Clear filters · Feed

  • Medium 4.8
    CVE-2023-1649

    ChatBot < 4.5.1 - Admin+ Stored XSS

    The AI ChatBot WordPress plugin before 4.5.1 does not sanitise and escape numerous of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for…

    Web / CMS
  • Medium 6.1
    CVE-2023-1806

    WP Inventory Manager < 2.1.0.12 - Reflected XSS

    The WP Inventory Manager WordPress plugin before 2.1.0.12 does not sanitise and escape the message parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as administra…

    Web / CMS
  • Medium 5.4
    CVE-2023-0542

    Custom Post Type List Shortcode <= 1.4.4 - Contributor+ Stored XSS

    The Custom Post Type List Shortcode WordPress plugin through 1.4.4 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and abo…

    Web / CMS
  • Medium 6.1
    CVE-2023-0514 Scanner template

    Membership Database <= 1.0 - Reflected XSS

    The Membership Database WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

    Web / CMS
  • Medium 5.4
    CVE-2023-1651

    ChatBot < 4.4.9 - Subscriber+ OpenAI Settings Update to Stored XSS

    The AI ChatBot WordPress plugin before 4.4.9 does not have authorisation and CSRF in the AJAX action responsible to update the OpenAI settings, allowing any authenticated users, such as subscriber to update them. Furthermore, due to the lack of escaping of th…

    Web / CMS
  • Medium 6.5
    CVE-2023-0522

    Enable/Disable Auto Login when Register <= 1.1.0 - Settings Update via CSRF

    The Enable/Disable Auto Login when Register WordPress plugin through 1.1.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

    Web / CMS
  • Medium 4.8
    CVE-2023-0544

    WP Login Box <= 2.0.2 - Admin+ Stored XSS

    The WP Login Box WordPress plugin through 2.0.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for …

    Web / CMS
  • Medium 6.1
    CVE-2023-1011

    ChatBot < 4.4.5 - Stored XSS via CSRF

    The AI ChatBot WordPress plugin before 4.4.5 does not escape most of its settings before outputting them back in the dashboard, and does not have a proper CSRF check, allowing attackers to make a logged in admin set XSS payloads in them.

    Web / CMS
  • Medium 6.1
    CVE-2023-1660

    ChatBot < 4.4.9 - Unauthenticated Stored XSS

    The AI ChatBot WordPress plugin before 4.4.9 does not have authorisation and CSRF in a function hooked to init, allowing unauthenticated users to update some settings, leading to Stored XSS due to the lack of escaping when outputting them in the admin dashboa…

    Web / CMS
  • Medium 6.1
    CVE-2023-0421

    Cloud Manager <= 1.0 - Reflected XSS

    The Cloud Manager WordPress plugin through 1.0 does not sanitise and escape the query param ricerca before outputting it in an admin panel, allowing unauthenticated attackers to trick a logged in admin to trigger a XSS payload by clicking a link.

    Web / CMS
  • Medium 6.1
    CVE-2023-0948 Scanner template

    Japanized For WooCommerce < 2.5.8 - Reflected XSS

    The Japanized For WooCommerce WordPress plugin before 2.5.8 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting

    Web / CMS
  • Medium 5.4
    CVE-2023-0267

    Ultimate Carousel For WPBakery Page Builder <= 2.6 - Contributor+ Stored XSS

    The Ultimate Carousel For WPBakery Page Builder WordPress plugin through 2.6 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor ro…

    Web / CMS
  • Medium 4.8
    CVE-2023-0894

    Pickup | Delivery | Dine-in date time <= 1.0.9 - Admin+ Stored XSS

    The Pickup | Delivery | Dine-in date time WordPress plugin through 1.0.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capab…

    Web / CMS
  • Medium 5.4
    CVE-2023-1905

    WP Popups < 2.1.5.1 - Contributor+ Stored XSS

    The WP Popups WordPress plugin before 2.1.5.1 does not properly escape the href attribute of its spu-facebook-page shortcode before outputting it back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to …

    Web / CMS
  • Medium 5.9
    CVE-2023-25052

    WordPress Yandex.News Feed by Teplitsa Plugin <= 1.12.5 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Teplitsa Yandex.News Feed by Teplitsa plugin <= 1.12.5 versions.

    Teplitsa Yandex.News Feed by Teplitsa
  • Medium 5.9
    CVE-2023-28169

    WordPress Easy Event calendar Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CoreFortress Easy Event calendar plugin <= 1.0 versions.

    CoreFortress Easy Event calendar
  • Medium 5.9
    CVE-2023-25452

    WordPress CMS Press Plugin <= 0.2.3 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Michael Pretty (prettyboymp) CMS Press plugin <= 0.2.3 versions.

    Michael Pretty (prettyboymp) CMS Press
  • Medium 6.5
    CVE-2022-45812

    WordPress Exxp Plugin <= 2.6.8 is vulnerable to Cross Site Scripting (XSS)

    Auth. (subscriber+) Stored Cross-Site Scripting (XSS) vulnerability in Martin Lees Exxp plugin <= 2.6.8 versions.

    Martin Lees Exxp
  • Medium 6.5
    CVE-2023-23668

    WordPress GiveWP Plugin <= 2.25.1 is vulnerable to Cross Site Scripting (XSS)

    Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in GiveWP plugin <= 2.25.1 versions.

    GiveWP GiveWP
  • Medium 5.9
    CVE-2023-25021

    WordPress FareHarbor for WordPress Plugin <= 3.6.6 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in FareHarbor FareHarbor for WordPress plugin <= 3.6.6 versions.

    fareharbor FareHarbor for WordPress Web / CMS
  • Medium 5.4
    CVE-2023-29247

    Stored XSS on Apache Airflow

    Task instance details page in the UI is vulnerable to a stored XSS.This issue affects Apache Airflow: before 2.6.0.

    Apache Software Foundation Apache Airflow apache-airflow PyPI
  • Medium 6.1
    CVE-2020-18282

    Cross-site scripting (XSS) vulnerability in NoneCms 1.3.0 allows remote attackers to inject arbitrary web script or HTM…

  • Medium 4.8
    CVE-2020-18132

    Cross Site Scripting (XSS) vulnerability in MIPCMS 3.6.0 allows attackers to execute arbitrary code via the category na…

  • Medium 6.1
    CVE-2020-19660

    Cross Site Scripting (XSS) pandao editor.md 1.5.0 allows attackers to execute arbitrary code via crafted linked url val…

  • Medium 6.1
    CVE-2020-21038

    Open redirect vulnerability in typecho 1.1-17.10.30-release via the referer parameter to Login.php.

  • Medium 6.5
    CVE-2020-22334

    Cross Site Request Forgery (CSRF) vulnerability in beescms v4 allows attackers to delete the administrator account via …

  • Medium 5.5
    CVE-2023-28200

    A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Ventura 13.3, iOS 15.7.…

    Apple macOS iOS and iPadOS macOS iOS
  • Medium 5.5
    CVE-2023-28192

    A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3, macOS Monterey 1…

    Apple macOS macOS
  • Medium 5.5
    CVE-2023-28189

    The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS B…

    Apple macOS macOS
  • Medium 5.5
    CVE-2023-28178

    A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • Medium 6.5
    CVE-2023-28180

    A denial-of-service issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. A use…

    Apple macOS macOS
  • Medium 5.5
    CVE-2023-28190

    A privacy issue was addressed by moving sensitive data to a more secure location. This issue is fixed in macOS Ventura …

    Apple macOS macOS
  • Medium 6.5
    CVE-2023-28182

    The issue was addressed with improved authentication. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16…

    Apple macOS iOS and iPadOS macOS iOS
  • Medium 6.1
    CVE-2023-31183

    Cybonet PineApp Mail Secure RXSS vulnerability

    Cybonet PineApp Mail Secure A reflected cross-site scripting (XSS) vulnerability was identified in the product, using an unspecified endpoint.

    Cybonet PineApp
  • Medium 6.1
    CVE-2023-31180

    WJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - Reflected cross-site scripting (RXSS)

    WJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - Reflected cross-site scripting (RXSS) through an unspecified request.

    WJJ Software InnoKB Server, InnoKB/Console
  • Medium 6.5
    CVE-2023-31179

    AgilePoint NX v8.0 SU2.2 & SU2.3 - Path traversal

    AgilePoint NX v8.0 SU2.2 & SU2.3 - Path traversal - Vulnerability allows path traversal and downloading files from the server, by an unspecified request.

    Agile Point NX
  • Medium 5.3
    CVE-2023-24505

    Milesight NCR/Camera CWE-200: Exposure of Sensitive Information

    Milesight NCR/camera version 71.8.0.6-r5 discloses sensitive information through an unspecified request.

    Milesight NCR/Camera
  • Medium 5.5
    CVE-2023-27962

    A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, mac…

    Apple macOS macOS
  • Medium 5.5
    CVE-2023-27956

    The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 1…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • Medium 5.5
    CVE-2023-27931

    This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.…

    Apple macOS iOS and iPadOS watchOS macOS iOS