Skip to main content
2023-10-17

2023-10-18

2023-10-19
All (37) Critical (10) High (24) Medium (37) Low (2)
Newest CVSS EPSS Oldest
CVE-2023-5631 Oct 18, 15:15 MEDIUM POC KEV PATCH THREAT This Month

Roundcube before 1.4.15, 1.5.x before 1.5.5, and 1.6.x before 1.6.4 allows stored XSS via an HTML e-mail message with a crafted SVG document because of program/lib/Roundcube/rcube_washtml.php. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

PHP XSS Debian Roundcube Debian Linux +3
NVD GitHub
CVSS 3.1
5.4
EPSS
75.9%
CVE-2023-45630 Oct 18, 14:15 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Gallery Wpdevart
NVD
CVSS 3.1
6.5
EPSS
0.1%
CVE-2023-20261 Oct 18, 17:15 MEDIUM This Month

A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to retrieve arbitrary files from an affected system. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Cisco Catalyst Sd Wan Manager
NVD
CVSS 3.1
6.5
EPSS
0.5%
CVE-2023-35083 Oct 18, 04:15 MEDIUM This Month

Allows an authenticated attacker with network access to read arbitrary files on Endpoint Manager recently discovered on 2022 SU3 and all previous versions potentially leading to the leakage of. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Ivanti Endpoint Manager
NVD
CVSS 3.1
6.5
EPSS
1.1%
CVE-2023-45909 Oct 18, 23:15 MEDIUM PATCH This Month

zzzcms v2.2.0 was discovered to contain an open redirect vulnerability. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Open Redirect Zzzphp Zzzcms
NVD GitHub
CVSS 3.1
6.1
EPSS
0.3%
CVE-2023-45958 Oct 18, 22:15 MEDIUM PATCH This Month

Thirty Bees Core v1.4.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the backup_pagination parameter at /controller/AdminController.php. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

PHP XSS Thirty Bees Thirtybees
NVD GitHub
CVSS 3.1
6.1
EPSS
0.3%
CVE-2023-45632 Oct 18, 14:15 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Spidervplayer Web Dorado
NVD
CVSS 3.1
6.1
EPSS
0.3%
CVE-2023-45602 Oct 18, 14:15 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Ebook Store Shopfiles
NVD
CVSS 3.1
6.1
EPSS
0.3%
CVE-2023-30781 Oct 18, 14:15 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Tweeple
NVD
CVSS 3.1
6.1
EPSS
0.3%
CVE-2023-45071 Oct 18, 13:15 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Form Maker 10Web
NVD
CVSS 3.1
6.1
EPSS
0.3%
CVE-2023-45070 Oct 18, 13:15 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Form Maker 10Web
NVD
CVSS 3.1
6.1
EPSS
0.4%
CVE-2023-45065 Oct 18, 13:15 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Bulk Noindex Nofollow Toolkit
NVD
CVSS 3.1
6.1
EPSS
0.3%
CVE-2023-32089 Oct 18, 12:15 MEDIUM This Month

Pega Platform versions 8.1 to 8.8.2 are affected by an XSS issue with Pin description. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Platform Pega
NVD
CVSS 3.1
6.1
EPSS
0.3%
CVE-2023-32088 Oct 18, 12:15 MEDIUM This Month

Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with ad-hoc case creation. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Platform Pega
NVD
CVSS 3.1
6.1
EPSS
0.3%
CVE-2023-32087 Oct 18, 12:15 MEDIUM This Month

Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with task creation. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Platform Pega
NVD
CVSS 3.1
6.1
EPSS
0.3%
CVE-2023-45064 Oct 18, 09:15 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Opcache Dashboard
NVD
CVSS 3.1
6.1
EPSS
0.3%
CVE-2023-45062 Oct 18, 09:15 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Canvasio3D Light
NVD
CVSS 3.1
6.1
EPSS
0.3%
CVE-2023-45054 Oct 18, 09:15 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Product Category Tree
NVD
CVSS 3.1
6.1
EPSS
0.3%
CVE-2023-25476 Oct 18, 08:15 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Ezoic Ampedsense
NVD
CVSS 3.1
6.1
EPSS
0.3%
CVE-2023-45628 Oct 18, 14:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Qr Twitter Widget
NVD
CVSS 3.1
5.4
EPSS
0.3%
CVE-2023-45607 Oct 18, 14:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Wordpress Popular Posts Wordpress Popular Posts Project
NVD
CVSS 3.1
5.4
EPSS
0.3%
CVE-2023-45608 Oct 18, 13:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Smart Cookie Kit
NVD
CVSS 3.1
5.4
EPSS
0.3%
CVE-2023-45067 Oct 18, 13:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Wordpress Simple Html Sitemap Freelancer Coder
NVD
CVSS 3.1
5.4
EPSS
0.3%
CVE-2023-31217 Oct 18, 13:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS User Location And Ip
NVD
CVSS 3.1
5.4
EPSS
0.3%
CVE-2023-45059 Oct 18, 09:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Gumroad
NVD
CVSS 3.1
5.4
EPSS
0.3%
CVE-2023-45049 Oct 18, 08:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Youtube Playlist Player Getbutterfly
NVD
CVSS 3.1
5.4
EPSS
0.3%
CVE-2023-45814 Oct 18, 22:15 MEDIUM PATCH This Month

Bunkum is an open-source protocol-agnostic request server for custom game servers. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Code Injection Bunkum
NVD GitHub
CVSS 3.1
5.3
EPSS
0.4%
CVE-2023-45604 Oct 18, 14:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Get Custom Field Values Get Custom Field Values Project
NVD
CVSS 3.1
4.8
EPSS
0.3%
CVE-2023-45073 Oct 18, 13:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Mendeley Plugin
NVD
CVSS 3.1
4.8
EPSS
0.3%
CVE-2023-45072 Oct 18, 13:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Order Auto Complete For Woocommerce
NVD
CVSS 3.1
4.8
EPSS
0.3%
CVE-2023-45057 Oct 18, 09:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Web Analytics
NVD
CVSS 3.1
4.8
EPSS
0.3%
CVE-2023-45056 Oct 18, 09:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Open User Map 100Plugins
NVD
CVSS 3.1
4.8
EPSS
0.3%
CVE-2023-45051 Oct 18, 09:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Image Vertical Reel Scroll Slideshow Gopiplus
NVD
CVSS 3.1
4.8
EPSS
0.3%
CVE-2023-45008 Oct 18, 08:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Comment Reply Email
NVD
CVSS 3.1
4.8
EPSS
0.3%
CVE-2023-5621 Oct 18, 08:15 MEDIUM This Month

The Thumbnail Slider With Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Title field in versions up to, and including, 1.0 due to insufficient input. Rated medium severity (CVSS 4.4), this vulnerability is remotely exploitable. No vendor patch available.

WordPress XSS Thumbnail Slider With Lightbox Wordpress Plugin I13Websolution
NVD VulDB
CVSS 3.1
4.4
EPSS
0.2%
CVE-2023-4938 Oct 18, 08:15 MEDIUM This Month

The BEAR for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.1.3.3. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Bear Woocommerce Bulk Editor And Products Manager Professional Wordpress Plugin Pluginus
NVD VulDB
CVSS 3.1
4.3
EPSS
0.1%
CVE-2023-3254 Oct 18, 05:15 MEDIUM PATCH This Month

The Widgets for Google Reviews plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 10.9. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Request Forgery (CSRF) vulnerability could allow attackers to trick authenticated users into performing unintended actions.

PHP WordPress Google CSRF Widgets For Google Reviews +1
NVD VulDB
CVSS 3.1
4.3
EPSS
0.1%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy