Skip to content
OpenAdvisories

Archive

2 May 2025

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Low 3.1

    gorhill uBlock Origin UI 1p-filters.js currentStateChanged redos

    A vulnerability was found in gorhill uBlock Origin up to 1.63.3b16. It has been classified as problematic. Affected is the function currentStateChanged of the file src/js/1p-filters.js of the component UI. The manipulation leads to inefficient regular express…

  • Low 3.5

    SureForms < 1.4.4 - Admin+ Stored XSS

    The SureForms WordPress plugin before 1.4.4 does not sanitise and escape some of its Form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for…

  • Low 3.5

    SureForms < 1.4.4 - Admin+ Stored XSS

    The SureForms WordPress plugin before 1.4.4 does not sanitise and escape some of its Form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for…

  • Low 2.9

    obfstr Type Confusion vulnerability

    In the obfstr crate before 0.4.4 for Rust, the obfstr! argument type is not restricted to string slices, leading to invalid UTF-8 conversion that produces an invalid value.