Skip to content
OpenAdvisories

Archive

16 August 2023

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Medium 6.5
    CVE-2023-20209 Public exploit EPSS 40%

    A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communica…

  • Low 3.5
    CVE-2023-4382 Public exploit

    tdevs Hyip Rio Profile Settings settings cross site scripting

    A vulnerability, which was classified as problematic, has been found in tdevs Hyip Rio 2.1. Affected by this issue is some unknown functionality of the file /user/settings of the component Profile Settings. The manipulation of the argument avatar leads to cro…

  • Unscored —
    CVE-2023-2123 Public exploit

    WP Inventory Manager < 2.1.0.13 - Reflected Cross-Site Scripting

    The WP Inventory Manager WordPress plugin before 2.1.0.13 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting.

  • Unscored —
    CVE-2022-4782 Public exploit

    ClickFunnels <= 3.1.1 - Contributor+ Stored XSS via Shortcode

    The ClickFunnels WordPress plugin through 3.1.1 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.

  • Unscored —
    CVE-2023-39115 Public exploit

    install/aiz-uploader/upload in Campcodes Online Matrimonial Website System Script 3.3 allows XSS via a crafted SVG docu…