Skip to content
OpenAdvisories

Archive

21 April 2024

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Low 3.5

    Thimo Grauerholz WP-Spreadplugin spreadplugin.php cross site scripting

    A vulnerability classified as problematic was found in Thimo Grauerholz WP-Spreadplugin up to 3.8.6.1 on WordPress. This vulnerability affects unknown code of the file spreadplugin.php. The manipulation of the argument Spreadplugin leads to cross site scripti…

  • Low 2.7

    Apache Airflow FTP Provider: FTP_TLS instance with unverified SSL context

    Improper Certificate Validation vulnerability in Apache Airflow FTP Provider. The FTP hook lacks complete certificate validation in FTP_TLS connections, which can potentially be leveraged. Implementing proper certificate validation by passing context=ssl.crea…