Skip to content
OpenAdvisories

Archive

25 November 2024

Vulnerabilities first published on this day (UTC), newest first.

43 results · Clear filters · Feed

  • Medium 6.1

    A cross-site scripting (XSS) vulnerability in the /scroll.php endpoint of LafeLabs Chaos v0.0.1 allows attackers to exe…

  • Medium 6.1

    WikiDocs before 1.0.65 allows stored XSS by authenticated users via data that comes after $$\\, which is mishandled by …

  • Medium 6.3

    masterstack_imgcap v0.0.1 was discovered to contain a SQL injection vulnerability via the endpoint /submit.