The Flexi Quote Rotator WordPress plugin through 0.9.4 does not sanitise and escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVE-2022-23279
Windows ALPC Elevation of Privilege Vulnerability.
CVE-2022-23278
Microsoft Defender for Endpoint Spoofing Vulnerability.
CVE-2022-23277
Microsoft Exchange Server Remote Code Execution Vulnerability.
CVE-2022-23276
SQL Server for Linux Containers Elevation of Privilege Vulnerability.
CVE-2022-23274
Microsoft Dynamics GP Remote Code Execution Vulnerability.
