Skip to content
OpenAdvisories

Archive

14 June 2024

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2024-37888 Public exploit

    The Open Link CKEditor plugin has a cross-site scripting (XSS) vulnerability in open link functionality

    The Open Link is a CKEditor plugin, extending context menu with a possibility to open link in a new tab. The vulnerability allowed to execute JavaScript code by abusing link href attribute. It affects all users using the Open Link plugin at version < **1.0.5*…

  • Medium 5.3
    CVE-2024-5961 Public exploit

    Reflected XSS in 2ClickPortal

    Improper neutralization of input during web page generation vulnerability in 2ClickPortal software allows reflected cross-site scripting (XSS). An attacker might trick somebody into using a crafted URL, which will cause a script to be run in user's browser. T…