Skip to content
OpenAdvisories

Archive

31 March 2024

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Low 3.5

    wp-file-upload Plugin wfu_ajaxactions.php wfu_ajax_action_callback cross site scripting

    A vulnerability has been found in wp-file-upload Plugin up to 2.4.3 on WordPress and classified as problematic. Affected by this vulnerability is the function wfu_ajax_action_callback of the file lib/wfu_ajaxactions.php. The manipulation leads to cross site s…

  • Low 3.1

    IBM CICS Transaction Gateway for Multiplatforms information disclosure

    IBM CICS Transaction Gateway for Multiplatforms 9.2 and 9.3 could disclose sensitive path information to an attacker that could reveal through debugging or error messages.

  • Low 3.5

    DiscuzX install_function.php show_next_step cross site scripting

    A vulnerability was found in DiscuzX up to 3.4-20200818. It has been classified as problematic. Affected is the function show_next_step of the file upload/install/include/install_function.php. The manipulation of the argument uchidden leads to cross site scri…

  • Low 3.5

    Zimbra zm-admin-ajax Form Textbox Field Error XFormItem.js XFormItem.prototype.setError cross site scripting

    A vulnerability was found in Zimbra zm-admin-ajax up to 8.8.1. It has been classified as problematic. This affects the function XFormItem.prototype.setError of the file WebRoot/js/ajax/dwt/xforms/XFormItem.js of the component Form Textbox Field Error Handler.…

  • Low 3.5

    chrisy TFO Graphviz Plugin tfo-graphviz-admin.php admin_page cross site scripting

    A vulnerability was found in chrisy TFO Graphviz Plugin up to 1.9 on WordPress and classified as problematic. Affected by this issue is the function admin_page_load/admin_page of the file tfo-graphviz-admin.php. The manipulation leads to cross site scripting.…