Security Vulnerabilities - CVEs Published In April 2019
JFrog Artifactory Pro 6.5.9 has Incorrect Access Control.
CVSS Score
9.8
EPSS Score
0.007
Published
2019-04-16
madskristensen Miniblog.Core through 2019-01-16 allows remote attackers to execute arbitrary ASPX code via an IMG element with a data: URL, because SaveFilesToDisk in Controllers/BlogController.cs writes a decoded base64 string to a file without validating the extension.
CVSS Score
9.8
EPSS Score
0.009
Published
2019-04-16
There is a CSRF vulnerability in the mndpsingh287 File Manager plugin 3.0 for WordPress via the page=wp_file_manager_root public_path parameter.
CVSS Score
8.8
EPSS Score
0.002
Published
2019-04-15
There is an XSS vulnerability in the mndpsingh287 File Manager plugin 3.0 for WordPress via the page=wp_file_manager_root public_path parameter.
CVSS Score
6.1
EPSS Score
0.004
Published
2019-04-15
XSS exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the wp-admin/admin.php?page=slideshow-galleries&method=save Gallery[id] or Gallery[title] parameter.
CVSS Score
6.1
EPSS Score
0.002
Published
2019-04-15
SQL Injection exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the wp-admin/admin.php?page=slideshow-galleries&method=save Gallery[id] or Gallery[title] parameter.
CVSS Score
9.8
EPSS Score
0.005
Published
2019-04-15
XSS exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the wp-admin/admin.php?page=slideshow-slides&method=save Slide[title], Slide[media_file], or Slide[image_url] parameter.
CVSS Score
6.1
EPSS Score
0.002
Published
2019-04-15
The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the rules[0][content] parameter in a wpfc_save_exclude_pages action.
CVSS Score
6.1
EPSS Score
0.003
Published
2019-04-15
The WP Fastest Cache plugin 0.8.8.5 for WordPress has CSRF via the wp-admin/admin.php wpfastestcacheoptions page.
CVSS Score
8.8
EPSS Score
0.002
Published
2019-04-15
The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the wpfastestcacheoptions wpFastestCachePreload_number or wpFastestCacheLanguage parameter.
CVSS Score
6.1
EPSS Score
0.003
Published
2019-04-15