Skip to content
OpenAdvisories

Archive

11 July 2024

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2024-6485 Public exploit

    XSS in Bootstrap button component

    A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting (XSS) attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting mal…

  • Critical 9.8
    CVE-2024-6624 Public exploit

    JSON API User <= 3.9.3 - Unauthenticated Privilege Escalation

    The JSON API User plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.9.3. This is due to improper controls on custom user meta fields. This makes it possible for unauthenticated attackers to register as administ…