CVE Vulnerability

CWE-79

CVE-2023-0313

by

Cross-site Scripting (XSS) – Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10.

CVE-2023-0314

by

Cross-site Scripting (XSS) – Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.10.

CVE-2023-0323

by

Cross-site Scripting (XSS) – Stored in GitHub repository pimcore/pimcore prior to 10.5.14.

CVE-2023-0327

by

A vulnerability was found in saemorris TheRadSystem. It has been classified as problematic. Affected is an unknown function of the file users.php. The manipulation of the argument q leads to cross site scripting. It is possible to launch the attack remotely. VDB-218454 is the identifier assigned to this vulnerability.

CVE-2023-0333

by

The TemplatesNext ToolKit WordPress plugin before 3.2.9 does not validate some of its shortcode attributes before using them to generate an HTML tag, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

CVE-2023-0337

by

Cross-site Scripting (XSS) – Reflected in GitHub repository lirantal/daloradius prior to master-branch.