2023-04-23 - CVE Archive

CVE-2023-24404 Apr 23, 10:15 MEDIUM This Month

Reflected Cross-Site Scripting (XSS) vulnerability in VryaSage Marketing Performance plugin <= 2.0.0 versions. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Vryasage Marketing Performance Rarathemes

NVD

CVSS 3.1

6.1

EPSS

0.4%

CVE-2023-22718 Apr 23, 10:15 MEDIUM This Month

Reflected Cross-Site Scripting (XSS) vulnerability in Jason Lau User Meta Manager plugin <= 3.4.9 versions. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS User Meta Manager

NVD

CVSS 3.1

6.1

EPSS

0.4%

CVE-2023-23832 Apr 23, 11:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Ultimate Wp Query Search Filter

NVD

CVSS 3.1

5.4

EPSS

0.4%

CVE-2023-23827 Apr 23, 11:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Google Google Maps V3 Shortcode

NVD

CVSS 3.1

5.4

EPSS

0.4%

CVE-2023-23817 Apr 23, 11:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Simple Pdf Viewer

NVD

CVSS 3.1

5.4

EPSS

0.4%

CVE-2023-23717 Apr 23, 11:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Portfolio Slideshow

NVD

CVSS 3.1

5.4

EPSS

0.4%

CVE-2023-22698 Apr 23, 10:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Google Theme Blvd Responsive Google Maps

NVD

CVSS 3.1

5.4

EPSS

0.4%

CVE-2023-27614 Apr 23, 11:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Motor Racing League

NVD

CVSS 3.1

4.8

EPSS

0.4%

CVE-2023-27425 Apr 23, 11:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Electric Studio Client Login

NVD

CVSS 3.1

4.8

EPSS

0.4%

CVE-2023-25451 Apr 23, 11:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Cpo Content Types Wpchill

NVD

CVSS 3.1

4.8

EPSS

0.4%

CVE-2023-23816 Apr 23, 11:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Sitemap Index

NVD

CVSS 3.1

4.8

EPSS

0.4%

CVE-2023-23806 Apr 23, 11:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Wordpress Custom Settings

NVD

CVSS 3.1

4.8

EPSS

0.4%

CVE-2023-24386 Apr 23, 10:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Ai Contact Us Form

NVD

CVSS 3.1

4.8

EPSS

0.4%