GHSA-7rcc-q6rq-jpcm: DNN affected by Stored Cross-Site Scripting (XSS) in Profile Biography field

GHSA-wq2j-w9pm-7x2p: DNN allows loading unused themes on anonymous clients through query parameters

GHSA-vh3f-qppr-j97f: Mesh Connect JS SDK Vulnerable to Cross Site Scripting via createLink.openLink

GHSA-jh9h-8xf2-25wj: Liferay has a stored cross-site scripting (XSS) vulnerability via a a publication’s “Name” text field

GHSA-5w3j-gwgh-4rfv: H2O affected by a deserialization vulnerability

An issue in Mezzanine v6.0.0 allows attackers to bypass access control mechanisms in the admin panel via a crafted request.

**Mezzanine allows attackers to bypass access control mechanisms**

Moderate severity GitHub Reviewed Published Feb 28, 2024 to the GitHub Advisory Database • Updated Feb 28, 2024

Headline

GHSA-qp56-82vp-xqgv: Mezzanine allows attackers to bypass access control mechanisms

ghsa: Latest News