Skip to content
OpenAdvisories

Archive

July 2023

Vulnerabilities first published in this month (UTC), newest first.

← June 2023 2023 / July August 2023 →
  1. 138
  2. 2 
  3. 341
  4. 459
  5. 580
  6. 6204
  7. 758
  8. 824
  9. 98
  10. 10128
  11. 11278
  12. 12239
  13. 13114
  14. 1460
  15. 1512
  16. 1618
  17. 17102
  18. 18149
  19. 1965
  20. 2066
  21. 2169
  22. 2217
  23. 2319
  24. 2457
  25. 2598
  26. 2673
  27. 2775
  28. 2891
  29. 291
  30. 3011
  31. 3164
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Low 3.5
    CVE-2023-3849 Public exploit Scanner template

    mooSocial mooDating URL find-a-match cross site scripting

    A vulnerability, which was classified as problematic, was found in mooSocial mooDating 1.2. Affected is an unknown function of the file /find-a-match of the component URL Handler. The manipulation leads to cross site scripting. It is possible to launch the at…

    Moosocial mooDating
  • Low 3.5
    CVE-2023-3848 Public exploit Scanner template

    mooSocial mooDating URL view cross site scripting

    A vulnerability, which was classified as problematic, has been found in mooSocial mooDating 1.2. This issue affects some unknown processing of the file /users/view of the component URL Handler. The manipulation leads to cross site scripting. The attack may be…

    Moosocial mooDating
  • Low 3.5
    CVE-2023-3847 Public exploit Scanner template

    mooSocial mooDating URL users cross site scripting

    A vulnerability classified as problematic was found in mooSocial mooDating 1.2. This vulnerability affects unknown code of the file /users of the component URL Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. VDB-…

    Moosocial mooDating
  • Low 3.5
    CVE-2023-3846 Public exploit Scanner template

    mooSocial mooDating URL pages cross site scripting

    A vulnerability classified as problematic has been found in mooSocial mooDating 1.2. This affects an unknown part of the file /pages of the component URL Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. …

    Moosocial mooDating
  • Low 3.5
    CVE-2023-3845 Public exploit Scanner template

    mooSocial mooDating URL ajax_invite cross site scripting

    A vulnerability was found in mooSocial mooDating 1.2. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /friends/ajax_invite of the component URL Handler. The manipulation leads to cross site scripting. The att…

    Moosocial mooDating
  • Low 3.5
    CVE-2023-3844 Public exploit Scanner template

    mooSocial mooDating URL friends cross site scripting

    A vulnerability was found in mooSocial mooDating 1.2. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /friends of the component URL Handler. The manipulation leads to cross site scripting. The attack…

    Moosocial mooDating
  • Low 3.5
    CVE-2023-3843 Public exploit Scanner template

    mooSocial mooDating URL question cross site scripting

    A vulnerability was found in mooSocial mooDating 1.2. It has been classified as problematic. Affected is an unknown function of the file /matchmakings/question of the component URL Handler. The manipulation leads to cross site scripting. It is possible to lau…

    Moosocial mooDating
  • Low 2.7
    CVE-2021-4428 Public exploit EPSS 16%

    what3words Autosuggest Plugin Setting class-w3w-autosuggest-public.php enqueue_scripts information disclosure

    A vulnerability has been found in what3words Autosuggest Plugin up to 4.0.0 on WordPress and classified as problematic. Affected by this vulnerability is the function enqueue_scripts of the file w3w-autosuggest/public/class-w3w-autosuggest-public.php of the c…

    what3words Autosuggest Plugin
  • Low 2.0
    CVE-2023-37269 Public exploit

    Winter CMS vulnerable to stored XSS through privileged upload of SVG file

    Winter is a free, open-source content management system (CMS) based on the Laravel PHP framework. Users with the `backend.manage_branding` permission can upload SVGs as the application logo. Prior to version 1.2.3, SVG uploads were not sanitized, which could …

    wintercms winter wintercms/winter Packagist