Skip to content
OpenAdvisories

Archive

9 October 2023

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2023-44393 Scanner template

    Piwigo Reflected XSS vulnerability

    Piwigo is an open source photo gallery application. Prior to version 14.0.0beta4, a reflected cross-site scripting (XSS) vulnerability is in the` /admin.php?page=plugins&tab=new&installstatus=ok&plugin_id=[here]` page. This vulnerability can be exploited by a…

  • Critical 9.8

    langchain_experimental vulnerable to arbitrary code execution via PALChain in the python exec method

    langchain_experimental (aka LangChain Experimental) in LangChain before 0.0.306 allows an attacker to bypass the CVE-2023-36258 fix and execute arbitrary code via __import__ in Python code, which is not prohibited by pal_chain/base.py.