Skip to content
OpenAdvisories

Archive

14 August 2024

Vulnerabilities first published on this day (UTC), newest first.

123 results · Clear filters · Feed

  • Medium 6.4

    Gutenberg Blocks, Page Builder – ComboBlocks <= 2.2.87 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Block

    The Gutenberg Blocks, Page Builder – ComboBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Accordion block in all versions up to, and including, 2.2.87 due to insufficient input sanitization and output escaping on user…

  • Medium 6.3

    SourceCodester Clinics Patient Management System check_medicine_name.php sql injection

    A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /ajax/check_medicine_name.php. The manipulation of the argument user_name leads to sql inj…

  • Medium 5.3

    SourceCodester Clinics Patient Management System user_images direct request

    A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /user_images/. The manipulation leads to direct request. The attack can be initiated re…