Security Vulnerabilities - CVEs Published In August 2024
Pharmacy Management System commit a2efc8 was discovered to contain a SQL injection vulnerability via the invoice_number parameter at sales_report.php.
CVSS Score
8.8
EPSS Score
0.045
Published
2024-08-20
7Twenty - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSS Score
5.4
EPSS Score
0.002
Published
2024-08-20
Servision - CWE-287: Improper Authentication
CVSS Score
8.2
EPSS Score
0.003
Published
2024-08-20
Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the book_id parameter at admin_room_history.php.
CVSS Score
8.6
EPSS Score
0.002
Published
2024-08-20
Barix – CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CVSS Score
7.5
EPSS Score
0.003
Published
2024-08-20
Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CVSS Score
4.3
EPSS Score
0.002
Published
2024-08-20
Priority – CWE-552: Files or Directories Accessible to External Parties
CVSS Score
4.4
EPSS Score
0.002
Published
2024-08-20
Priority - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVSS Score
6.1
EPSS Score
0.003
Published
2024-08-20
The Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popups Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘close_text’ parameter in all versions up to, and including, 1.19.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score
6.4
EPSS Score
0.002
Published
2024-08-20
Least privilege violation and reliance on untrusted inputs in the mk_informix Checkmk agent plugin before Checkmk 2.3.0p12, 2.2.0p32, 2.1.0p47 and 2.0.0 (EOL) allows local users to escalate privileges.
CVSS Score
7.8
EPSS Score
0.001
Published
2024-08-20