Cross Site Scripting

Pimcore Admin Classic Bundle cross-site scripting | CVE-2023-46722

November 3, 2023

NAME__________Pimcore Admin Classic Bundle cross-site scriptingPlatforms Affected:Pimcore Admin Classic Bundle 1.1.4 Pimcore Admin Classic Bundle 1.1.3 Pimcore Admin Classic Bundle...

Paragraphs admin module for Drupal security bypass |

November 3, 2023

NAME__________Paragraphs admin module for Drupal security bypassPlatforms Affected:Drupal Paragraphs admin module for Drupal 8.x-1.4Risk Level:5.8Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Paragraphs admin module for...

pkp/pkp-lib cross-site scripting | CVE-2023-5890

November 3, 2023

NAME__________pkp/pkp-lib cross-site scriptingPlatforms Affected:pkp pkp-lib 3.4.0-3Risk Level:4.6Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________pkp/pkp-lib is vulnerable to cross-site scripting, caused by improper validation of user-supplied...

RafflePress plugin for WordPress cross-site scripting | CVE-2023-5049

November 2, 2023

NAME__________RafflePress plugin for WordPress cross-site scriptingPlatforms Affected:WordPress RafflePress plugin for WordPress 1.12.0 WordPress RafflePress plugin for WordPress 1.11.9Risk Level:6.4Exploitability:UnprovenConsequences:Cross-Site Scripting...

Virtualmin cross-site scripting | CVE-2023-47099

November 2, 2023

NAME__________Virtualmin cross-site scriptingPlatforms Affected:Virtualmin Virtualmin 7.7Risk Level:7.2Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Virtualmin is vulnerable to cross-site scripting, caused by improper validation of user-supplied...

Virtualmin cross-site scripting | CVE-2023-47096

November 2, 2023

Virtualmin cross-site scripting | CVE-2023-47098

November 2, 2023

Bellows Accordion Menu plugin for WordPress cross-site scripting | CVE-2023-5164

November 2, 2023

NAME__________Bellows Accordion Menu plugin for WordPress cross-site scriptingPlatforms Affected:WordPress Bellows Accordion Menu plugin for WordPress 1.4.2 WordPress Bellows Accordion Menu...

idbbee plugin for WordPress cross-site scripting | CVE-2023-5114

November 2, 2023

NAME__________idbbee plugin for WordPress cross-site scriptingPlatforms Affected:WordPress idbbee plugin for WordPress 1.0 WordPress idbbee plugin for WordPress 0.9Risk Level:5.4Exploitability:UnprovenConsequences:Cross-Site Scripting...

Virtualmin cross-site scripting | CVE-2023-47095

November 2, 2023

Virtualmin cross-site scripting | CVE-2023-47097

November 2, 2023

Live updates from Excel plugin for WordPress cross-site scripting | CVE-2023-5116

November 2, 2023

NAME__________Live updates from Excel plugin for WordPress cross-site scriptingPlatforms Affected:WordPress Live updates from Excel plugin for WordPress 2.3.2 WordPress Live...

Carousel, Recent Post Slider and Banner Slider plugin for WordPress cross-site scripting | CVE-2023-5362

November 2, 2023

NAME__________Carousel, Recent Post Slider and Banner Slider plugin for WordPress cross-site scriptingPlatforms Affected:Spicethemes Carousel Recent Post Slider and Banner Slider...

Virtualmin cross-site scripting | CVE-2023-47094

November 2, 2023

iframe forms plugin for WordPress cross-site scripting | CVE-2023-5073

November 2, 2023

NAME__________iframe forms plugin for WordPress cross-site scriptingPlatforms Affected:WordPress iframe forms plugin for WordPress 1.0 WordPress iframe forms plugin for WordPress...

Photos and Files Contest Gallery plugin for WordPress cross-site scripting | CVE-2023-5307

November 2, 2023

NAME__________Photos and Files Contest Gallery plugin for WordPress cross-site scriptingPlatforms Affected:Contest Gallery Photos and Files Contest Gallery plugin for WordPress...

FareHarbor plugin for WordPress SQL injection | CVE-2023-5252

November 2, 2023

NAME__________FareHarbor plugin for WordPress SQL injectionPlatforms Affected:FareHarbor FareHarbor plugin for WordPress 3.6.7Risk Level:6.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________FareHarbor plugin for WordPress is vulnerable...

Buzzsprout Podcasting plugin for WordPress cross-site scripting | CVE-2023-5335

November 2, 2023

NAME__________Buzzsprout Podcasting plugin for WordPress cross-site scriptingPlatforms Affected:Buzzsprout Buzzsprout Podcasting plugin for WordPress 1.8.4Risk Level:6.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Buzzsprout Podcasting plugin for...

Cisco Firepower Management Center Software cross-site scripting | CVE-2023-20074

November 2, 2023

NAME__________Cisco Firepower Management Center Software cross-site scriptingPlatforms Affected:Cisco Firepower Management CenterRisk Level:6.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Cisco Firepower Management Center Software is vulnerable...

Cross Site Scripting

Pimcore Admin Classic Bundle cross-site scripting | CVE-2023-46722

Paragraphs admin module for Drupal security bypass |

pkp/pkp-lib cross-site scripting | CVE-2023-5890

RafflePress plugin for WordPress cross-site scripting | CVE-2023-5049

Virtualmin cross-site scripting | CVE-2023-47099

Virtualmin cross-site scripting | CVE-2023-47096

Virtualmin cross-site scripting | CVE-2023-47098

Bellows Accordion Menu plugin for WordPress cross-site scripting | CVE-2023-5164

idbbee plugin for WordPress cross-site scripting | CVE-2023-5114

Virtualmin cross-site scripting | CVE-2023-47095

Virtualmin cross-site scripting | CVE-2023-47097

Live updates from Excel plugin for WordPress cross-site scripting | CVE-2023-5116

Carousel, Recent Post Slider and Banner Slider plugin for WordPress cross-site scripting | CVE-2023-5362

Virtualmin cross-site scripting | CVE-2023-47094

iframe forms plugin for WordPress cross-site scripting | CVE-2023-5073

Photos and Files Contest Gallery plugin for WordPress cross-site scripting | CVE-2023-5307

FareHarbor plugin for WordPress SQL injection | CVE-2023-5252

Buzzsprout Podcasting plugin for WordPress cross-site scripting | CVE-2023-5335

Cisco Firepower Management Center Software cross-site scripting | CVE-2023-20074

Cisco Firepower Management Center Software cross-site scripting | CVE-2023-20206

Cisco Firepower Management Center Software cross-site scripting | CVE-2023-20005

pkp/pkp-lib cross-site scripting | CVE-2023-5890

Motors Car Dealer & Classified Ads Plugin for WordPress cross-site scripting | CVE-2023-46208

Ultimate Addons for WPBakery Page Builder Plugin for WordPress cross-site scripting | CVE-2023-46211

CovenantC2 Detected – 85[.]215[.]221[.]231:7443

[STORMOUS] – Ransomware Victim: UATF

Cybercrime Victims in the UK: Justice System’s Failure Exposed by The Cyber Helpline

Cyber-Attack on UK Children’s Hospital: INC Ransom Claims Data Breach

Cyber-Attacks Threaten Integrity of Romanian Presidential Election

You may have missed