CVE's - CVE Vulnerability

CVE

Vendors

Products

Updated

CVSS v2

CVSS v3

CVE-2022-4714

2023-02-21

N/A

The WP Dark Mode WordPress plugin before 4.0.0 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack

CVE-2022-47132

2023-02-09

N/A

8.8 HIGH

A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows attackers to arbitrarily add Administrator users.

CVE-2022-47131

2023-02-09

N/A

4.8 MEDIUM

A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows an attacker to arbitrarily create a page.

CVE-2022-47130

2023-02-09

N/A

4.3 MEDIUM

A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows a discount coupon to be arbitrarily created if an attacker with administrative privileges interacts on the CSRF page.

CVE-2022-47128

A15 Firmware, Tenda

N301_firmware, N301, Ac15_firmware, Ac15, 11n, 11n_firmware, 4g300, 4g300_firmware, A15, A15_firmware

2023-01-05

N/A

9.8 CRITICAL

Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey2 parameter at /goform/WifiBasicSet.

CVE-2022-47127

A15 Firmware, Tenda

N301_firmware, N301, Ac15_firmware, Ac15, 11n, 11n_firmware, 4g300, 4g300_firmware, A15, A15_firmware

2023-01-05

N/A