Skip to content
OpenAdvisories

Archive

6 March 2024

Vulnerabilities first published on this day (UTC), newest first.

← February 2024 2024 / March /6 April 2024 →
  1. 1124
  2. 269
  3. 330
  4. 4116
  5. 5116
  6. 6120
  7. 795
  8. 8103
  9. 924
  10. 1010
  11. 1191
  12. 12187
  13. 13222
  14. 1469
  15. 15131
  16. 1650
  17. 1731
  18. 18194
  19. 19132
  20. 20167
  21. 21127
  22. 2281
  23. 2317
  24. 2416
  25. 25123
  26. 26158
  27. 27285
  28. 28180
  29. 29156
  30. 3026
  31. 3167
All Critical High Medium Low Exploited only Public exploit

53 results · Clear filters · Feed

  • Medium 6.4
    CVE-2024-1989

    Social Sharing Plugin – Sassy Social Share <= 3.3.58 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The Social Sharing Plugin – Sassy Social Share plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'Sassy_Social_Share' shortcode in all versions up to, and including, 3.3.58 due to insufficient input sanitization and output esc…

    heateor Social Sharing Plugin – Sassy Social Share Web / CMS
  • Medium 4.3
    CVE-2024-1760

    Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.6.20 - Cross-Site Request Forgery to Plugin Data Reset

    The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.6.6.20. This is due to missing or incorrect nonce validation on the ssa_fac…

    croixhaug Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin Web / CMS
  • Medium 4.3
    CVE-2024-1771

    Total <= 2.1.59 - Missing Authorization to Authenticated (Subscriber+) Sections Update

    The Total theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the total_order_sections() function in all versions up to, and including, 2.1.59. This makes it possible for authenticated attackers, with su…

    HashThemes Total Web / CMS
  • Medium 5.4
    CVE-2023-33677

    Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page…

  • Medium 6.5
    CVE-2023-49985 Public exploit

    A cross-site scripting (XSS) vulnerability in the component /management/class of School Fees Management System v1.0 all…

  • Medium 4.7
    CVE-2023-49971 Public exploit

    A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scri…

  • Medium 6.1
    CVE-2023-49973 Public exploit

    A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scri…

  • Medium 6.1
    CVE-2023-49974 Public exploit

    A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scri…

  • Medium 6.1
    CVE-2023-49984 Public exploit

    A cross-site scripting (XSS) vulnerability in the component /management/settings of School Fees Management System v1.0 …

  • Medium 6.8
    CVE-2023-49983 Public exploit

    A cross-site scripting (XSS) vulnerability in the component /management/class of School Fees Management System v1.0 all…

  • Medium 5.4
    CVE-2023-49976 Public exploit

    A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scri…

  • Medium 5.4
    CVE-2023-49977 Public exploit

    A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scri…

  • Medium 6.6
    CVE-2024-25359

    An issue in zuoxingdong lagom v.0.1.2 allows a local attacker to execute arbitrary code via the pickle_load function of…