‼ CVE-2023-27615 ‼

Cross-Site Request Forgery (CSRF) vulnerability in Dipak C. Gajjar WP Super Minify plugin <= 1.5.1 versions.

📖 Read

via "National Vulnerability Database".

69

0

‼ CVE-2023-25480 ‼

Cross-Site Request Forgery (CSRF) vulnerability in BoldGrid Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin <= 1.24.1 versions.

📖 Read

via "National Vulnerability Database".

82

0

‼ CVE-2023-44766 ‼

A Cross Site Scripting (XSS) vulnerability in Concrete CMS v.9.2.1 allows an attacker to execute arbitrary code via a crafted script to the SEO - Extra from Page Settings.

📖 Read

via "National Vulnerability Database".

84

0

‼ CVE-2023-44770 ‼

A Cross-Site Scripting (XSS) vulnerability in Zenario CMS v.9.4.59197 allows an attacker to execute arbitrary code via a crafted script to the Organizer - Spare alias.

📖 Read

via "National Vulnerability Database".

73

0

‼ CVE-2023-25033 ‼

Cross-Site Request Forgery (CSRF) vulnerability in Sumo Social Share Boost plugin <= 4.5 versions.

📖 Read

via "National Vulnerability Database".

48

0

‼ CVE-2023-44761 ‼

Multiple Cross Site Scripting (XSS) vulnerabilities in Concrete CMS v.9.2.1 allow a local attacker to execute arbitrary code via a crafted script to the Forms of the Data objects.

📖 Read

via "National Vulnerability Database".

45

0

‼ CVE-2023-40671 ‼

Cross-Site Request Forgery (CSRF) vulnerability in ??wp DX-auto-save-images plugin <= 1.4.0 versions.

📖 Read

via "National Vulnerability Database".

37

0

‼ CVE-2023-36465 ‼

Decidim is a participatory democracy framework, written in Ruby on Rails, originally developed for the Barcelona City government online and offline participation website. The `templates` module doesn't enforce the correct permissions, allowing any logged-in user to access to this functionality in the administration panel. An attacker could use this vulnerability to change, create or delete templates of surveys. This issue has been patched in version 0.26.8 and 0.27.4.

📖 Read

via "National Vulnerability Database".

36

0

‼ CVE-2023-44762 ‼

A Cross Site Scripting (XSS) vulnerability in Concrete CMS v.9.2.1 allows an attacker to execute arbitrary code via a crafted script to the Tags from Settings - Tags.

📖 Read

via "National Vulnerability Database".

35

0

‼ CVE-2023-44764 ‼

A Cross Site Scripting (XSS) vulnerability in Concrete CMS v.9.2.1 allows an attacker to execute arbitrary code via a crafted script to the SITE parameter from installation or in the Settings.

📖 Read

via "National Vulnerability Database".

35

0