Skip to content
OpenAdvisories

Archive

8 December 2023

Vulnerabilities first published on this day (UTC), newest first.

83 results · Feed

  • Unscored —

    DoraCMS v2.1.8 was discovered to re-use the same code for verification of valid usernames and passwords. This vulnerabi…

  • Medium 5.4

    Cross-site Scripting in JFinalCMS

    JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the model management department.

  • Unscored —

    Dreamer CMS v4.1.3 was discovered to contain a cross-site scripting (XSS) vulnerability in the article management depar…