Medium
CVE-2023-26144
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Unrated
pysec-2023-175
Pillow versions before v10.0.1 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-5129 (previously CVE-2023-4863). Pillow v10.0.1 upgrades the bundled libwebp binary to v1.3.2.
Unrated
pysec-2023-174
imagecodecs versions before v2023.9.18 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-5129 (previously CVE-2023-4863). imagecodecs v2023.9.18 upgrades the bundled libwebp binary to
High
CVE-2023-38887
File Upload vulnerability in Dolibarr ERP CRM
High
CVE-2023-38886
Dolibarr allows a remote privileged attacker to execute arbitrary code via a crafted command/script
Critical
CVE-2023-38888
Cross Site Scripting vulnerability in Dolibarr ERP CRM
Medium
CVE-2023-4423
WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce <= 3.1.37.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
d9189eb3-be7f-42e1-92cc-b48af5615eb9
Inactive Logout <= 3.2.2 - Cross-Site Request Forgery
Medium
CVE-2023-44142
Inactive Logout <= 3.2.2 - Missing Authorization
Medium
CVE-2023-44145
Anchor Episodes Index (Spotify for Podcasters) <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-44144
Payment gateway per Product for WooCommerce <= 3.2.7 - Reflected Cross-Site Scripting
Medium
CVE-2023-5050
Leaflet Map <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
Exploited in attacks
CVE-2022-24816
Improper Control of Generation of Code ('Code Injection') in jai-ext
Medium
CVE-2023-26143
blamer vulnerable to Arbitrary Argument Injection via the blameByFile() API
Medium
CVE-2023-42399
Jodit Editor vulnerable to cross-site scripting
High
CVE-2023-5060
Cross site scripting in librenms
Medium
CVE-2023-37611
Neos CMS Cross Site Scripting vulnerability
High
CVE-2023-4861
File Manager Pro – Filester <= 1.8 - Authenticated (Admin+) Arbitrary File Upload
Medium
CVE-2023-4862
File Manager Pro <= 1.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-5063
Widget Responsive for Youtube <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-4971
Weaver Xtreme Theme Support <= 6.3.0 - Authenticated (Administrator+) PHP Object Injection via Imported File
Medium
CVE-2023-5062
WordPress Charts <= 0.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
05206a31-033e-49b9-9b66-5a6165782643
Table of Contents Plus <= 2302 - Authenticated (Administrator+) Stored Cross-Site Scripting
Critical
CVE-2023-34575
Improper neutralization of SQL parameter in Opart Save Cart for PrestaShop
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.