Skip to content
OpenAdvisories

Archive

29 June 2023

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2023-36471 Public exploit

    HTML sanitizer allows form elements in restricted in org.xwiki.commons:xwiki-commons-xml

    Xwiki commons is the common modules used by other XWiki top level projects. The HTML sanitizer that is included in XWiki since version 14.6RC1 allowed form and input HTML tags. In the context of XWiki, this allows an attacker without script right to either cr…

  • Critical 9.8
    CVE-2023-2982 Public exploit Scanner template EPSS 46%

    WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.6.4 - Authentication Bypass

    The WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 7.6.4. This is due to insufficient encryption on the user being supplied during a login …