Skip to content
OpenAdvisories

Archive

19 June 2023

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2023-2779 Public exploit Scanner template

    Super Socializer < 7.13.52 - Reflected XSS

    The Social Share, Social Login and Social Comments WordPress plugin before 7.13.52 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users suc…

  • Medium 6.5
    CVE-2023-35840 Public exploit

    elFinder vulnerable to path traversal in LocalVolumeDriver connector

    _joinPath in elFinderVolumeLocalFileSystem.class.php in elFinder before 2.1.62 allows path traversal in the PHP LocalVolumeDriver connector.