Skip to content
OpenAdvisories

Archive

30 September 2023

Vulnerabilities first published on this day (UTC), newest first.

45 results · Clear filters · Feed

  • Medium 5.4

    Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

    Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "product_info[][name]" parameter, potentially leading to unauthorized execution of scripts within a user's web bro…

  • Medium 5.4

    Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

    Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "tracking_number" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.

  • Medium 5.8

    Use of Hard-coded Credentials in microweber/microweber

    Use of Hard-coded Credentials in GitHub repository microweber/microweber prior to 2.0.

  • Medium 6.3

    Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

    Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18.

  • Medium 6.5

    Unrestricted Upload of File with Dangerous Type in thorsten/phpmyfaq

    Unrestricted Upload of File with Dangerous Type in GitHub repository thorsten/phpmyfaq prior to 3.1.8.