Skip to content
OpenAdvisories

Archive

27 September 2024

Vulnerabilities first published on this day (UTC), newest first.

46 results · Clear filters · Feed

  • Medium 6.1

    Cross Site Scripting vulnerability in CodeAstro Membership Management System 1.0 allows attackers to run malicious Java…

  • Medium 6.3

    A Command injection vulnerability in requestLetsEncryptSslWithDnsChallenge in NginxProxyManager 2.11.3 allows an attack…

  • Medium 6.1

    A cross-site scripting (XSS) vulnerability in the component /test/ of iq3xcite v2.31 to v3.05 allows attackers to execu…

  • Medium 4.8

    An authenticated cross-site scripting (XSS) vulnerability in Piwigo v14.5.0 allows attackers to execute arbitrary web s…

  • Medium 4.6
    CVE-2024-25412 Public exploit

    A cross-site scripting (XSS) vulnerability in Flatpress v1.3 allows attackers to execute arbitrary web scripts or HTML …

  • Medium 6.1
    CVE-2024-25411 Public exploit

    A cross-site scripting (XSS) vulnerability in Flatpress v1.3 allows attackers to execute arbitrary web scripts or HTML …