Skip to content
OpenAdvisories

Archive

6 August 2024

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2024-6651 Public exploit Scanner template EPSS 16%

    WordPress File Upload < 4.24.8 - Reflected XSS

    The WordPress File Upload WordPress plugin before 4.24.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

  • Medium 5.5
    CVE-2024-36424 Public exploit

    K7RKScan.sys in K7 Ultimate Security before 17.0.2019 allows local users to cause a denial of service (BSOD) because of…