Security Vulnerabilities - CVEs Published In September 2023
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in 标准云(std.Cloud) WxSync plugin <= 2.7.23 versions.
CVSS Score
6.5
EPSS Score
0.001
Published
2023-09-04
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Blindside Networks BigBlueButton plugin <= 3.0.0-beta.4 versions.
CVSS Score
7.1
EPSS Score
0.001
Published
2023-09-04
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ImageRecycle ImageRecycle pdf & image compression plugin <= 3.1.10 versions.
CVSS Score
7.1
EPSS Score
0.001
Published
2023-09-04
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Molongui Author Box for Authors, Co-Authors, Multiple Authors and Guest Authors – Molongui plugin <= 4.6.19 versions.
CVSS Score
7.1
EPSS Score
0.001
Published
2023-09-04
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Jeffrey-WP Media Library Categories plugin <= 2.0.0 versions.
CVSS Score
5.9
EPSS Score
0.001
Published
2023-09-04
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in XLPlugins User Email Verification for WooCommerce plugin <= 3.5.0 versions.
CVSS Score
7.1
EPSS Score
0.001
Published
2023-09-04
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy wp tell a friend popup form plugin <= 7.1 versions.
CVSS Score
5.9
EPSS Score
0.001
Published
2023-09-04
This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/settings/upload endpoint. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the current user.
CVSS Score
9.8
EPSS Score
0.035
Published
2023-09-04
Out-of-bounds Write in GitHub repository gpac/gpac prior to 2.3-DEV.
CVSS Score
5.3
EPSS Score
0.0
Published
2023-09-04
Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV.
CVSS Score
5.9
EPSS Score
0.0
Published
2023-09-04