Cross-Site Scripting

Schweitzer Engineering Laboratories Real-Time Automation Controller cross-site scripting | CVE-2023-31160

May 12, 2023

NAME__________Schweitzer Engineering Laboratories Real-Time Automation Controller cross-site scriptingPlatforms Affected:Schweitzer Engineering Laboratories Real-Time Automation ControllerRisk Level:4.3Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Schweitzer Engineering Laboratories Real-Time...

Schweitzer Engineering Laboratories Real-Time Automation Controller cross-site scripting | CVE-2023-31159

May 12, 2023

Schweitzer Engineering Laboratories Real-Time Automation Controller cross-site scripting | CVE-2023-31158

May 12, 2023

Schweitzer Engineering Laboratories Real-Time Automation Controller cross-site scripting | CVE-2023-31155

May 12, 2023

Schweitzer Engineering Laboratories Real-Time Automation Controller cross-site scripting | CVE-2023-31156

May 12, 2023

Palo Alto Networks PAN-OS cross-site scripting | CVE-2023-0007

May 12, 2023

NAME__________Palo Alto Networks PAN-OS cross-site scriptingPlatforms Affected:Palo Alto Networks PAN-OS 9.0.0 Palo Alto Networks PAN-OS 8.1 Palo Alto Networks PAN-OS...

SAP CRM cross-site scripting | CVE-2023-30742

May 10, 2023

NAME__________SAP CRM cross-site scriptingPlatforms Affected:SAP CRM S4FND 102 SAP CRM S4FND 103 SAP CRM S4FND 104 SAP CRM S4FND 105...

SAP Business Planning and Consolidation cross-site scripting | CVE-2023-31407

May 10, 2023

NAME__________SAP Business Planning and Consolidation cross-site scriptingPlatforms Affected:SAP Business Planning and Consolidation 750 SAP Business Planning and Consolidation 740Risk Level:5.4Exploitability:HighConsequences:Cross-Site...

VK Blocks Plugin for WordPress cross-site scripting | CVE-2023-27923

May 10, 2023

NAME__________VK Blocks Plugin for WordPress cross-site scriptingPlatforms Affected:WordPress VK Blocks Plugin for WordPress 1.53.0.1Risk Level:5.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________VK Blocks Plugin for...

VK All in One Expansion Unit Plugin for WordPress cross-site scripting | CVE-2023-27926

May 10, 2023

NAME__________VK All in One Expansion Unit Plugin for WordPress cross-site scriptingPlatforms Affected:WordPress VK All in One Expansion Unit Plugin for...

Newsletter Plugin for WordPress cross-site scripting | CVE-2023-27922

May 10, 2023

NAME__________Newsletter Plugin for WordPress cross-site scriptingPlatforms Affected:WordPress Newsletter Plugin for WordPress 7.6.9Risk Level:5.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Newsletter Plugin for WordPress is vulnerable...

SAP CRM cross-site scripting | CVE-2023-29188

May 10, 2023

NAME__________SAP CRM cross-site scriptingPlatforms Affected:SAP CRM S4FND 102 SAP CRM S4FND 103 SAP CRM S4FND 104 SAP CRM S4FND 105...

Citrix ADC and Gateway cross-site scripting | CVE-2023-24488

May 10, 2023

NAME__________Citrix ADC and Gateway cross-site scriptingPlatforms Affected:Citrix Gateway 12.1 Citrix Gateway 13.0 Citrix ADC 13.0 Citrix ADC 12.1 Citrix ADC...

SAP SAPUI5 cross-site scripting | CVE-2023-30743

May 10, 2023

NAME__________SAP SAPUI5 cross-site scriptingPlatforms Affected:SAP SAPUI5 750 SAP SAPUI5 754 SAP SAPUI5 755 SAP SAPUI5 756 SAP SAPUI5 757Risk Level:7.1Exploitability:HighConsequences:Cross-Site...

VK Blocks Plugin for WordPress cross-site scripting | CVE-2023-27925

May 10, 2023

SAP BusinessObjects Business Intelligence Platform cross-site scripting | CVE-2023-31406

May 10, 2023

NAME__________SAP BusinessObjects Business Intelligence Platform cross-site scriptingPlatforms Affected:SAP BusinessObjects Business Intelligence Platform 420 SAP BusinessObjects Business Intelligence Platform 430Risk Level:6.1Exploitability:HighConsequences:Cross-Site...

SAP BusinessObjects Business Intelligence Platform cross-site scripting | CVE-2023-30741

May 10, 2023

VK All in One Expansion Unit Plugin for WordPress cross-site scripting | CVE-2023-28367

May 10, 2023

NAME__________VK All in One Expansion Unit Plugin for WordPress cross-site scriptingPlatforms Affected:WordPress VK All in One Expansion Unit Plugin for...

Custom Login Page Plugin for WordPress cross-site scripting | CVE-2023-26012

May 9, 2023

NAME__________Custom Login Page Plugin for WordPress cross-site scriptingPlatforms Affected:WordPress Custom Login Page Plugin for WordPress 2.0Risk Level:5.9Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Custom Login...

YouTube Gallery Plugin for WordPress cross-site scripting | CVE-2023-25979

May 9, 2023

NAME__________YouTube Gallery Plugin for WordPress cross-site scriptingPlatforms Affected:WordPress YouTube Gallery Plugin for WordPress 1.7.6Risk Level:5.9Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________YouTube Gallery Plugin for...

WPMobile.App Plugin for WordPress cross-site scripting | CVE-2023-26010

May 9, 2023

NAME__________WPMobile.App Plugin for WordPress cross-site scriptingPlatforms Affected:WordPress WPMobile.App Plugin for WordPress 11.18Risk Level:5.9Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________WPMobile.App Plugin for WordPress is vulnerable...

Simple Portfolio Gallery Plugin for WordPress cross-site scripting | CVE-2023-26016

May 9, 2023

NAME__________Simple Portfolio Gallery Plugin for WordPress cross-site scriptingPlatforms Affected:WordPress Custom Login Page Plugin for WordPress 2.0Risk Level:5.9Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Simple Portfolio...

Semcms file upload | CVE-2023-30090

May 9, 2023

NAME__________Semcms file uploadPlatforms Affected:Semcms Semcms 4.2Risk Level:5.3Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Semcms could allow a remote attacker to upload arbitrary files, caused by...

Apache Airflow cross-site scripting | CVE-2023-29247

May 9, 2023

NAME__________Apache Airflow cross-site scriptingPlatforms Affected:Apache Airflow 2.5.3Risk Level:6.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Apache is vulnerable to cross-site scripting, caused by improper validation of...

Cross-Site Scripting

Schweitzer Engineering Laboratories Real-Time Automation Controller cross-site scripting | CVE-2023-31160

Schweitzer Engineering Laboratories Real-Time Automation Controller cross-site scripting | CVE-2023-31159

Schweitzer Engineering Laboratories Real-Time Automation Controller cross-site scripting | CVE-2023-31158

Schweitzer Engineering Laboratories Real-Time Automation Controller cross-site scripting | CVE-2023-31155

Schweitzer Engineering Laboratories Real-Time Automation Controller cross-site scripting | CVE-2023-31156

Palo Alto Networks PAN-OS cross-site scripting | CVE-2023-0007

SAP CRM cross-site scripting | CVE-2023-30742

SAP Business Planning and Consolidation cross-site scripting | CVE-2023-31407

VK Blocks Plugin for WordPress cross-site scripting | CVE-2023-27923

VK All in One Expansion Unit Plugin for WordPress cross-site scripting | CVE-2023-27926

Newsletter Plugin for WordPress cross-site scripting | CVE-2023-27922

SAP CRM cross-site scripting | CVE-2023-29188

Citrix ADC and Gateway cross-site scripting | CVE-2023-24488

SAP SAPUI5 cross-site scripting | CVE-2023-30743

VK Blocks Plugin for WordPress cross-site scripting | CVE-2023-27925

SAP BusinessObjects Business Intelligence Platform cross-site scripting | CVE-2023-31406

SAP BusinessObjects Business Intelligence Platform cross-site scripting | CVE-2023-30741

VK All in One Expansion Unit Plugin for WordPress cross-site scripting | CVE-2023-28367

Custom Login Page Plugin for WordPress cross-site scripting | CVE-2023-26012

YouTube Gallery Plugin for WordPress cross-site scripting | CVE-2023-25979

WPMobile.App Plugin for WordPress cross-site scripting | CVE-2023-26010

Simple Portfolio Gallery Plugin for WordPress cross-site scripting | CVE-2023-26016

Semcms file upload | CVE-2023-30090

Apache Airflow cross-site scripting | CVE-2023-29247

[PLAY] – Ransomware Victim: Specialty Bolt And Screw

[PLAY] – Ransomware Victim: Trace3

[PLAY] – Ransomware Victim: Bendheim

CISA: Foreign Threat Actor Conducting Large-Scale Spearphishing Campaign with RDP Attachments

CISA: CISA Adds Two Known Exploited Vulnerabilities to Catalog

You may have missed