Skip to content
OpenAdvisories

Archive

7 July 2023

Vulnerabilities first published on this day (UTC), newest first.

← June 2023 2023 / July /7 August 2023 →
  1. 138
  2. 2 
  3. 341
  4. 459
  5. 580
  6. 6204
  7. 758
  8. 824
  9. 98
  10. 10128
  11. 11278
  12. 12239
  13. 13114
  14. 1460
  15. 1512
  16. 1618
  17. 17102
  18. 18149
  19. 1965
  20. 2066
  21. 2169
  22. 2217
  23. 2319
  24. 2457
  25. 2598
  26. 2673
  27. 2775
  28. 2891
  29. 291
  30. 3011
  31. 3164
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Low 2.0
    CVE-2023-37269 Public exploit

    Winter CMS vulnerable to stored XSS through privileged upload of SVG file

    Winter is a free, open-source content management system (CMS) based on the Laravel PHP framework. Users with the `backend.manage_branding` permission can upload SVGs as the application logo. Prior to version 1.2.3, SVG uploads were not sanitized, which could …

    wintercms winter wintercms/winter Packagist
  • Low 3.5
    CVE-2023-3544

    GZ Scripts Time Slot Booking Calendar PHP load.php cross site scripting

    A vulnerability was found in GZ Scripts Time Slot Booking Calendar PHP 1.8. It has been declared as problematic. This vulnerability affects unknown code of the file /load.php. The manipulation of the argument first_name/second_name/phone/address_1/country lea…

    GZ Scripts Time Slot Booking Calendar PHP
  • Low 3.5
    CVE-2023-3543

    GZ Scripts Availability Booking Calendar PHP HTTP POST Request load.php cross site scripting

    A vulnerability was found in GZ Scripts Availability Booking Calendar PHP 1.8. It has been classified as problematic. This affects an unknown part of the file load.php of the component HTTP POST Request Handler. The manipulation of the argument cid/first_name…

    GZ Scripts Availability Booking Calendar PHP
  • Low 3.7
    CVE-2023-37264

    Pipelines do not validate child UIDs

    Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting in version 0.35.0, pipelines do not validate child UIDs, which means that a user that has access to create TaskRuns can create their own Tasks that the Pipelin…

    tektoncd pipeline github.com/tektoncd/pipeline Go
  • Low 3.5
    CVE-2023-3542

    ThinuTech ThinuCMS contact.php cross site scripting

    A vulnerability was found in ThinuTech ThinuCMS 1.5 and classified as problematic. Affected by this issue is some unknown functionality of the file /contact.php. The manipulation of the argument name/body leads to cross site scripting. The attack may be launc…

    ThinuTech ThinuCMS
  • Low 3.5
    CVE-2023-3541

    ThinuTech ThinuCMS author_posts.php cross site scripting

    A vulnerability has been found in ThinuTech ThinuCMS 1.5 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /author_posts.php. The manipulation of the argument author with the input g6g12<script>alert(1)</scr…

    ThinuTech ThinuCMS
  • Low 3.5
    CVE-2023-3540

    SimplePHPscripts NewsLetter Script PHP URL Parameter preview.php cross site scripting

    A vulnerability, which was classified as problematic, was found in SimplePHPscripts NewsLetter Script PHP 2.4. Affected is an unknown function of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. It …

    Simplephpscripts NewsLetter Script PHP
  • Low 3.5
    CVE-2023-3539

    SimplePHPscripts Simple Forum PHP URL Parameter preview.php cross site scripting

    A vulnerability, which was classified as problematic, has been found in SimplePHPscripts Simple Forum PHP 2.7. This issue affects some unknown processing of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scr…

    Simplephpscripts Simple Forum PHP
  • Low 3.5
    CVE-2023-3538

    SimplePHPscripts Photo Gallery PHP URL Parameter preview.php cross site scripting

    A vulnerability classified as problematic was found in SimplePHPscripts Photo Gallery PHP 2.0. This vulnerability affects unknown code of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack …

    Simplephpscripts Photo Gallery PHP
  • Low 3.5
    CVE-2023-3537

    SimplePHPscripts News Script PHP Pro URL Parameter preview.php cross site scripting

    A vulnerability classified as problematic has been found in SimplePHPscripts News Script PHP Pro 2.4. This affects an unknown part of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. It is possible …

    Simplephpscripts News Script PHP Pro
  • Low 3.5
    CVE-2023-3536

    SimplePHPscripts Funeral Script PHP URL Parameter preview.php cross site scripting

    A vulnerability was found in SimplePHPscripts Funeral Script PHP 3.1. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site …

    Simplephpscripts Funeral Script PHP
  • Low 3.5
    CVE-2023-3535

    SimplePHPscripts FAQ Script PHP URL Parameter preview.php cross site scripting

    A vulnerability was found in SimplePHPscripts FAQ Script PHP 2.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross …

    Simplephpscripts FAQ Script PHP