2023

The Bootstrap Shortcodes WordPress plugin through 3.4.0 does not validate and escape some of its shortcode attributes be

The Simple File Downloader WordPress plugin through 1.0.4 does not validate and escape some of its shortcode attributes

The Post Views Count WordPress plugin through 3.0.2 does not validate and escape some of its shortcode attributes before

The Easy Social Box / Page Plugin WordPress plugin through 4.1.2 does not validate and escape some of its shortcode attr

The Opening Hours WordPress plugin through 2.3.0 does not validate and escape some of its shortcode attributes before ou

The WP Responsive Testimonials Slider And Widget WordPress plugin through 1.5 does not validate and escape some of its s

The WP Dark Mode WordPress plugin before 4.0.0 does not validate and escape one of its shortcode attributes, which could

The Page Builder: Live Composer WordPress plugin before 1.5.23 does not validate and escape some of its shortcode attrib

The Markup (JSON-LD) structured in schema.org WordPress plugin through 4.8.1 does not validate and escape some of its sh

The Login Logout Menu WordPress plugin through 1.3.3 does not validate and escape some of its shortcode attributes befor

The Intuitive Custom Post Order WordPress plugin before 3.1.4 lacks CSRF protection in its update-menu-order ajax action

The Intuitive Custom Post Order WordPress plugin before 3.1.4 does not check for authorization in the update-menu-order

The Spectra WordPress plugin before 1.15.0 does not sanitize user input as it reaches its style HTML attribute, allowing

A vulnerability classified as problematic has been found in UIKit0 libplist 1.12. This affects the function plist_from_x

The Borg theme before 1.1.19 for Backdrop CMS does not sufficiently sanitize path arguments that are passed in via a URL

JD-GUI 1.6.6 allows XSS via util/net/InterProcessCommunicationUtil.java.

JD-GUI 1.6.6 allows deserialization via UIMainWindowPreferencesProvider.singleInstance.

Erxes, an experience operating system (XOS) with a set of plugins, is vulnerable to cross-site scripting in versions 0.2

Countly, a product analytics solution, is vulnerable to cross-site scripting prior to version 21.11 of the community edi

Mind-elixir is a free, open source mind map core. Prior to version 0.18.1, mind-elixir is prone to cross-site scripting

jQuery MiniColors is a color picker built on jQuery. Prior to version 2.3.6, jQuery MiniColors is prone to cross-site sc

Limited Server-Side Request Forgery (SSRF) in agent-receiver in Tribe29's Checkmk <= 2.1.0p11 allows an attacker to comm

Cross-site Request Forgery (CSRF) in Tribe29's Checkmk <= 2.1.0p17, Checkmk <= 2.0.0p31, and all versions of Checkmk 1.6

Sensitive host secret disclosed in cmk-update-agent.log file in Tribe29's Checkmk <= 2.1.0p13, Checkmk <= 2.0.0p29, and

No authorisation controls in the RestAPI documentation for Tribe29's Checkmk <= 2.1.0p13 and Checkmk <= 2.0.0p29 which m

Expired sessions were not securely terminated in the RestAPI for Tribe29's Checkmk <= 2.1.0p10 and Checkmk <= 2.0.0p28 a

Livestatus Query Language (LQL) injection in the AuthUser HTTP query header of Tribe29's Checkmk <= 2.1.0p11, Checkmk <=

A vulnerability was found in arnoldle submitByMailPlugin 1.0b2.9 and classified as problematic. This issue affects some

Apollo is a configuration management system. Prior to version 2.1.0, a low-privileged user can create a special web page

A vulnerability was found in 3breadt dd-plist 1.17 and classified as problematic. Affected by this issue is some unknown

A vulnerability was found in OCLC-Research OAICat 1.5.61. It has been rated as critical. This issue affects some unknown

A vulnerability, which was classified as critical, has been found in uakfdotb oneapp. This issue affects some unknown pr

A vulnerability was found in java-xmlbuilder up to 1.1. It has been rated as problematic. Affected by this issue is some

A vulnerability has been found in codeprojects Pharmacy Management System 1.0 and classified as critical. This vulnerabi

A vulnerability classified as critical was found in SourceCodester Auto Dealer Management System 1.0. Affected by this v

A vulnerability classified as critical has been found in SourceCodester Auto Dealer Management System 1.0. Affected is a

Improper Authorization in GitHub repository pixelfed/pixelfed prior to 0.11.4.

A vulnerability classified as critical was found in SourceCodester Auto Dealer Management System 1.0. This vulnerability

A vulnerability classified as critical has been found in SourceCodester Auto Dealer Management System 1.0. This affects

A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulne

A vulnerability, which was classified as problematic, was found in Xoslab Easy File Locker 2.2.0.184. This affects the f

A vulnerability, which was classified as problematic, has been found in Filseclab Twister Antivirus 8.17. Affected by th

A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been rated as critical. This iss

A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been declared as critical. This

Cross Site Scripting (XSS) vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'name' and 'em

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository pixelfed/pixelfed prior to 0.11.4.

HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0.20210107 and prior of Hyper

HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0.20210107 and prior of Hyper

Changedetection.io before v0.40.1.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the m

After Affects versions 23.1 (and earlier), 22.6.3 (and earlier) are affected by an out-of-bounds read vulnerability that