Security
Headlines
HeadlinesLatestCVEs

Tag

#xss

Ubuntu Security Notice USN-6243-2

Ubuntu Security Notice 6243-2 - USN-6243-1 fixed vulnerabilities in Graphite-Web. It was discovered that the applied fix was incomplete. This update fixes the problem. It was discovered that Graphite-Web incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to perform server-side request forgery and obtain sensitive information. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.

Packet Storm
#xss#vulnerability#web#ubuntu#debian#ssrf
Discussion On Kontackt 1.18 Cross Site Scripting

Discussion On Kontackt The Exclusive PHP Social Network Platform version 1.18 suffers from a cross site scripting vulnerability.

Doma CMS 1.0 Cross Site Scripting

Doma CMS version 1.0 suffers from a cross site scripting vulnerability.

CVE-2023-37388: WordPress Simple Light Weight Social Share (Tweet, Like, Share and Linkedin) plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability - Patchstack

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Sudipto Pratap Mahato Simple Light Weight Social Share plugin <= 2.0 versions.

CVE-2023-38397: WordPress Gestion-Pymes plugin <= 1.5.6 - Cross Site Scripting (XSS) vulnerability - Patchstack

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Eggemplo Gestion-Pymes plugin <= 1.5.6 versions.

CVE-2023-24393: WordPress Animated Number Counters plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability - Patchstack

Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Sk. Abul Hasan Animated Number Counters plugin <= 1.6 versions.

CVE-2023-23828: WordPress WP Category Post List Widget plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability - Patchstack

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Swashata WP Category Post List Widget plugin <= 2.0.3 versions.