Skip to content
OpenAdvisories

Archive

24 June 2023

Vulnerabilities first published on this day (UTC), newest first.

← May 2023 2023 / June /24 July 2023 →
  1. 177
  2. 2143
  3. 321
  4. 47
  5. 573
  6. 6149
  7. 7185
  8. 840
  9. 9118
  10. 104
  11. 118
  12. 1284
  13. 13187
  14. 14120
  15. 1596
  16. 1679
  17. 179
  18. 1813
  19. 19116
  20. 2064
  21. 2132
  22. 22112
  23. 23192
  24. 245
  25. 2510
  26. 2695
  27. 2777
  28. 28160
  29. 2965
  30. 3083
All Critical High Medium Low Exploited only Public exploit

5 results · Feed

  • Medium 6.4
    CVE-2023-3387

    Lana Text to Image <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The Lana Text to Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'lana_text_to_image' and 'lana_text_to_img' shortcode in versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping on user s…

    lanacodes Lana Text to Image Web / CMS
  • High 7.2
    CVE-2023-3388 Scanner template EPSS 84%

    Beautiful Cookie Consent Banner <= 2.10.1 - Unauthenticated Stored Cross-Site Scripting

    The Beautiful Cookie Consent Banner for WordPress is vulnerable to Stored Cross-Site Scripting via the 'nsc_bar_content_href' parameter in versions up to, and including, 2.10.1 due to insufficient input sanitization and output escaping. This makes it possible…

    nikelschubert Beautiful Cookie Consent Banner
  • Critical 9.8
    CVE-2023-3197 Scanner template

    MStore API <= 4.0.1 - Unauthenticated SQL Injection

    The MStore API plugin for WordPress is vulnerable to Unauthenticated Blind SQL Injection via the 'id' parameter in versions up to, and including, 4.0.1 due to insufficient escaping on the user supplied parameters and lack of sufficient preparation on the exis…

    inspireui MStore API – Create Native Android & iOS Apps On The Cloud Android iOS Web / CMS
  • Critical 9.1
    CVE-2023-1722

    Yoga Class Registration System 1.0 - ATO

    Yoga Class Registration System version 1.0 allows an administrator to execute commands on the server. This is possible because the application does not correctly validate the thumbnails of the classes uploaded by the administrators.

    Yoga Class Registration System Yoga Class Registration System
  • High 7.3
    CVE-2023-1724

    Faveo Helpdesk Enterprise 6.0.1 - Privilege Escalation via Stored XSS

    Faveo Helpdesk Enterprise version 6.0.1 allows an attacker with agent permissions to perform privilege escalation on the application. This occurs because the application is vulnerable to stored XSS.

    Ladybirdweb Faveo Helpdesk