2023-09-30

CVE-2023-5321 Sep 30, 14:15 MEDIUM POC PATCH This Month

Missing Authorization in GitHub repository hamza417/inure prior to build94. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available.

CVE-2023-5112 Sep 30, 23:15 MEDIUM POC This Month

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-5111 Sep 30, 23:15 MEDIUM POC This Month

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-43735 Sep 30, 23:15 MEDIUM POC This Month

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-43734 Sep 30, 23:15 MEDIUM POC This Month

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-43733 Sep 30, 23:15 MEDIUM POC This Month

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-43732 Sep 30, 23:15 MEDIUM POC This Month

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-43731 Sep 30, 22:15 MEDIUM POC This Month

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-43730 Sep 30, 22:15 MEDIUM POC This Month

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-43729 Sep 30, 22:15 MEDIUM POC This Month

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-43728 Sep 30, 22:15 MEDIUM POC This Month

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-43727 Sep 30, 22:15 MEDIUM POC This Month

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-43726 Sep 30, 22:15 MEDIUM POC This Month

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-43725 Sep 30, 22:15 MEDIUM POC This Month

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-43724 Sep 30, 22:15 MEDIUM POC This Month

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-43723 Sep 30, 22:15 MEDIUM POC This Month

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-43722 Sep 30, 22:15 MEDIUM POC This Month

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-43721 Sep 30, 22:15 MEDIUM POC This Month

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-43720 Sep 30, 22:15 MEDIUM POC This Month

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-43719 Sep 30, 22:15 MEDIUM POC This Month

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-43718 Sep 30, 22:15 MEDIUM POC This Month

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-43717 Sep 30, 22:15 MEDIUM POC This Month

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-43716 Sep 30, 21:15 MEDIUM POC This Month

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-43715 Sep 30, 21:15 MEDIUM POC This Month

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-43714 Sep 30, 21:15 MEDIUM POC This Month

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-43713 Sep 30, 21:15 MEDIUM POC This Month

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability, which allows attackers to inject JS via the "title" parameter, in the "/admin/admin-menu/add-submit" endpoint,. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-43712 Sep 30, 21:15 MEDIUM POC This Month

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-5302 Sep 30, 12:15 MEDIUM POC This Month

A vulnerability, which was classified as problematic, has been found in SourceCodester Best Courier Management System 1.0. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-43711 Sep 30, 03:15 MEDIUM POC This Month

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-43710 Sep 30, 03:15 MEDIUM POC This Month

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-43709 Sep 30, 03:15 MEDIUM POC This Month

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-43708 Sep 30, 03:15 MEDIUM POC This Month

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-43707 Sep 30, 03:15 MEDIUM POC This Month

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-43706 Sep 30, 02:15 MEDIUM POC This Month

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-43705 Sep 30, 02:15 MEDIUM POC This Month

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-43704 Sep 30, 02:15 MEDIUM POC This Month

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-43703 Sep 30, 02:15 MEDIUM POC This Month

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-43702 Sep 30, 02:15 MEDIUM POC This Month

Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-5295 Sep 30, 03:15 MEDIUM This Month

The Comments by Startbit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'vivafbcomment' shortcode in versions up to, and including, 1.4 due to insufficient input sanitization. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2023-5305 Sep 30, 15:15 MEDIUM This Month

A vulnerability was found in Online Banquet Booking System 1.0 and classified as problematic. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CVE-2023-5304 Sep 30, 15:15 MEDIUM This Month

A vulnerability has been found in Online Banquet Booking System 1.0 and classified as problematic. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CVE-2023-5303 Sep 30, 14:15 MEDIUM This Month

A vulnerability, which was classified as problematic, was found in Online Banquet Booking System 1.0. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CVE-2023-5320 Sep 30, 01:15 MEDIUM PATCH This Month

Cross-site Scripting (XSS) - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.18. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

CVE-2023-5316 Sep 30, 01:15 MEDIUM PATCH This Month

Cross-site Scripting (XSS) - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.18. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

CVE-2023-5319 Sep 30, 01:15 MEDIUM PATCH This Month

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity.

CVE-2023-5317 Sep 30, 01:15 MEDIUM PATCH This Month

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity.