GHSA-7rcc-q6rq-jpcm: DNN affected by Stored Cross-Site Scripting (XSS) in Profile Biography field

GHSA-wq2j-w9pm-7x2p: DNN allows loading unused themes on anonymous clients through query parameters

GHSA-vh3f-qppr-j97f: Mesh Connect JS SDK Vulnerable to Cross Site Scripting via createLink.openLink

GHSA-jh9h-8xf2-25wj: Liferay has a stored cross-site scripting (XSS) vulnerability via a a publication’s “Name” text field

GHSA-5w3j-gwgh-4rfv: H2O affected by a deserialization vulnerability

pretix before 2024.1.1 mishandles file validation.

**pretix mishandles file validation**

Moderate severity GitHub Reviewed Published Feb 26, 2024 to the GitHub Advisory Database • Updated Feb 26, 2024

Headline

GHSA-672r-97r7-vx2q: pretix mishandles file validation

ghsa: Latest News