Archive
27 December 2024
Vulnerabilities first published on this day (UTC), newest first.
2 results · Clear filters · Feed
-
Medium 4.8CVE-2024-11605 Public exploit
WP Publications <= 1.2 - Admin+ Stored XSS
The wp-publications WordPress plugin through 1.2 does not escape filenames before outputting them back in the page, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is…
-
Medium 5.9CVE-2024-53476 Public exploit
A race condition vulnerability in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f allows attackers to …