Skip to content
OpenAdvisories

Archive

28 December 2023

Vulnerabilities first published on this day (UTC), newest first.

← November 2023 2023 / December /28 January 2024 →
  1. 158
  2. 210
  3. 39
  4. 4243
  5. 5131
  6. 656
  7. 7140
  8. 883
  9. 924
  10. 1024
  11. 1140
  12. 12192
  13. 13155
  14. 14157
  15. 15290
  16. 1619
  17. 1727
  18. 18106
  19. 19119
  20. 20116
  21. 21126
  22. 2280
  23. 2312
  24. 2411
  25. 2566
  26. 2669
  27. 2730
  28. 2874
  29. 29160
  30. 3036
  31. 3134
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Low 2.0
    CVE-2023-52084

    Winter CMS Stored XSS through Backend ColorPicker FormWidget

    Winter is a free, open-source content management system. Prior to 1.2.4, Users with access to backend forms that include a ColorPicker FormWidget can provide a value that would then be rendered unescaped in the backend form, potentially allowing for a stored …

    wintercms winter winter/wn-backend-module Packagist
  • Low 2.0
    CVE-2023-52083

    Stored XSS through privileged upload of Media Manager file followed by renaming

    Winter is a free, open-source content management system. Prior to 1.2.4, users with the `media.manage_media` permission can upload files to the Media Manager and rename them after uploading. Previously, media manager files were only sanitized on upload, not o…

    wintercms winter winter/wn-system-module Packagist
  • Low 2.4
    CVE-2023-7136

    code-projects Record Management System Document Type doctype.php cross site scripting

    A vulnerability classified as problematic was found in code-projects Record Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /main/doctype.php of the component Document Type Handler. The manipulation of the argumen…

    code-projects Record Management System
  • Low 2.4
    CVE-2023-7135

    code-projects Record Management System Offices offices.php cross site scripting

    A vulnerability classified as problematic has been found in code-projects Record Management System 1.0. Affected is an unknown function of the file /main/offices.php of the component Offices Handler. The manipulation of the argument officename with the input …

    code-projects Record Management System
  • Low 3.5
    CVE-2023-7132

    code-projects Intern Membership Management System User Registration cross site scripting

    A vulnerability was found in code-projects Intern Membership Management System 2.0. It has been classified as problematic. This affects an unknown part of the file /user_registration/ of the component User Registration. The manipulation of the argument userNa…

    code-projects Intern Membership Management System