Security Vulnerabilities - CVEs Published In September 2023
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.4.
CVSS Score
7.1
EPSS Score
0.001
Published
2023-09-29
Unauth. Stored Cross-Site Scripting (XSS) vulnerability in UserFeedback Team User Feedback plugin <= 1.0.7 versions.
CVSS Score
7.1
EPSS Score
0.001
Published
2023-09-29
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Andreas Heigl authLdap plugin <= 2.5.9 versions.
CVSS Score
5.9
EPSS Score
0.001
Published
2023-09-29
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Groundhogg Inc. HollerBox plugin <= 2.3.2 versions.
CVSS Score
5.9
EPSS Score
0.001
Published
2023-09-29
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Photo Gallery Slideshow & Masonry Tiled Gallery plugin <= 1.0.13 versions.
CVSS Score
7.1
EPSS Score
0.001
Published
2023-09-29
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PressPage Entertainment Inc. Smarty for WordPress plugin <= 3.1.35 versions.
CVSS Score
5.9
EPSS Score
0.001
Published
2023-09-29
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Ulf Benjaminsson WP-dTree plugin <= 4.4.5 versions.
CVSS Score
7.1
EPSS Score
0.001
Published
2023-09-29
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Giovambattista Fazioli WP Bannerize Pro plugin <= 1.6.9 versions.
CVSS Score
7.1
EPSS Score
0.001
Published
2023-09-29
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Stockdio Stock Quotes List plugin <= 2.9.9 versions.
CVSS Score
6.5
EPSS Score
0.001
Published
2023-09-29
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Irina Sokolovskaya Goods Catalog plugin <= 2.4.1 versions.
CVSS Score
6.5
EPSS Score
0.001
Published
2023-09-29