Skip to content
OpenAdvisories

Archive

25 November 2024

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-53255 Public exploit

    Reflected Cross-site Scripting in /admin?page=media via file Parameter in BoidCMS

    BoidCMS is a free and open-source flat file CMS for building simple websites and blogs, developed using PHP and uses JSON as a database. In affected versions a reflected Cross-site Scripting (XSS) vulnerability exists in the /admin?page=media endpoint in the …

  • Critical 9.8
    CVE-2024-50672 Public exploit

    A NoSQL injection vulnerability in Adapt Learning Adapt Authoring Tool <= 0.11.3 allows unauthenticated attackers to re…