Archive
16 August 2023
Vulnerabilities first published on this day (UTC), newest first.
5 results · Clear filters · Feed
-
Medium 6.5
A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communica…
-
Low 3.5CVE-2023-4382 Public exploit
tdevs Hyip Rio Profile Settings settings cross site scripting
A vulnerability, which was classified as problematic, has been found in tdevs Hyip Rio 2.1. Affected by this issue is some unknown functionality of the file /user/settings of the component Profile Settings. The manipulation of the argument avatar leads to cro…
-
Unscored —CVE-2023-2123 Public exploit
WP Inventory Manager < 2.1.0.13 - Reflected Cross-Site Scripting
The WP Inventory Manager WordPress plugin before 2.1.0.13 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting.
-
Unscored —CVE-2022-4782 Public exploit
ClickFunnels <= 3.1.1 - Contributor+ Stored XSS via Shortcode
The ClickFunnels WordPress plugin through 3.1.1 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.
-
Unscored —CVE-2023-39115 Public exploit
install/aiz-uploader/upload in Campcodes Online Matrimonial Website System Script 3.3 allows XSS via a crafted SVG docu…