Security Vulnerabilities - CVEs Published In July 2023
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Oliva Expertise Oliva Expertise EKS allows Cross-Site Scripting (XSS).
This issue affects Oliva Expertise EKS: before 1.2.
CVSS Score
6.1
EPSS Score
0.004
Published
2023-07-17
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Oliva Expertise Oliva Expertise EKS allows SQL Injection.
This issue affects Oliva Expertise EKS: before 1.2.
CVSS Score
9.8
EPSS Score
0.006
Published
2023-07-17
Cross-Site Request Forgery (CSRF) vulnerability in Ultimate Member plugin <= 2.6.0 versions.
CVSS Score
4.3
EPSS Score
0.003
Published
2023-07-17
Cudy LT400 1.13.4 is vulnerable to Cross Site Scripting (XSS) in cgi-bin/luci/admin/network/wireless/config via the iface parameter.
CVSS Score
6.1
EPSS Score
0.007
Published
2023-07-17
Cross-Site Request Forgery (CSRF) vulnerability in wpexperts.Io WP PDF Generator plugin <= 1.2.2 versions.
CVSS Score
5.4
EPSS Score
0.002
Published
2023-07-17
Cross-Site Request Forgery (CSRF) vulnerability in Really Simple Plugins Recipe Maker For Your Food Blog from Zip Recipes plugin <= 8.0.7 versions.
CVSS Score
4.3
EPSS Score
0.003
Published
2023-07-17
Cross-Site Request Forgery (CSRF) vulnerability in myCred plugin <= 2.5 versions.
CVSS Score
6.5
EPSS Score
0.002
Published
2023-07-17
Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce WooCommerce Brands plugin <= 1.6.49 versions.
CVSS Score
5.4
EPSS Score
0.003
Published
2023-07-17
The Autochat Automatic Conversation WordPress plugin through 1.1.7 does not sanitise and escape user input before outputting it back on the page, leading to a cross-site Scripting attack.
CVSS Score
6.1
EPSS Score
0.005
Published
2023-07-17
The POST SMTP Mailer WordPress plugin before 2.5.7 does not have proper CSRF checks in some AJAX actions, which could allow attackers to make logged in users with the manage_postman_smtp capability resend an email to an arbitrary address (for example a password reset email could be resent to an attacker controlled email, and allow them to take over an account).
CVSS Score
8.8
EPSS Score
0.004
Published
2023-07-17