CWE:

	Topic	Date	Author
Low	Shopify Cross Site Scripting	14.03.2023	Andrey Stoykov
Low	Real Time Automation 460MCBS 5.2.14 Cross Site Scripting	12.03.2023	Yehia Elghaly
Med.	Arris DG3450 AR01.02.056.18_041520_711.NCS.10 XSS / Missing Authentication	08.03.2023	Steffen Robertz
Low	Purchase Order Management 1.0 Cross Site Scripting	06.03.2023	nu11secur1ty
Low	WordPress Real Estate 7 Theme <= 3.3.4 - Unauthenticated Reflected Cross-Site Scripting (XSS)	05.03.2023	FearZzZz
Low	WordPress Real Estate 7 Theme 3.3.4 Cross Site Scripting	01.03.2023	fearzzzz
Low	Best POS Management System 1.0 Cross Site Scripting	17.02.2023	Ahmed Ismail
Low	B&R Systems Diagnostics Manager Cross Site Scripting	16.02.2023	Gerhard Hechenberger
Low	B&R Systems Diagnostics Manager Cross Site Scripting	16.02.2023	Gerhard Hechenberger
Low	CKSource CKEditor5 35.4.0 Cross Site Scripting	09.02.2023	Manish Pathak
Med.	WordPress Metform Elementor Contact Form Builder 3.1.2 Cross Site Scripting	09.02.2023	Mohammed El Amin
Med.	Hikvision Remote Code Execution / XSS / SQL Injection	02.02.2023	Thurein Soe
Med.	WordPress Quick Restaurant 2.0.2 XSS / CSRF / IDOR / Missing Authorization	02.02.2023	Marco Wotschka
Low	PHPJabbers Business Directory Script 3.2 Cross Site Scripting	01.02.2023	CraCkEr
Low	Zstore 6.6.0 Cross Site Scripting	01.02.2023	nu11secur1ty
Low	PHPJabbers Travel Tours Script 1.0 Cross Site Scripting	30.01.2023	CraCkEr
Low	PHPJabbers Property Listing Script 3.1 Cross Site Scripting	30.01.2023	CraCkEr
Low	Inout Jobs Portal 2.2.2 Cross Site Scripting	28.01.2023	CraCkEr
High	Secure Web Gateway 10.2.11 Cross Site Scripting	28.01.2023	RedTeam
Low	AmazCart Laravel Ecommerce System CMS 3.4 Cross Site Scripting	24.01.2023	Sajibe Kanti
Low	Inout Search Engine 10.1.3 Cross Site Scripting	24.01.2023	CraCkEr
Low	Active eCommerce CMS 6.5.0 Cross Site Scripting	23.01.2023	Sajibe Kanti
Low	SLIMS 9.5.2 Cross Site Scripting	21.01.2023	nu11secur1ty
Low	Inout Multi-Vendor Shopping Cart 3.2.3 Cross Site Scripting	21.01.2023	CraCkEr
Low	Jettweb Ready Rent A Car Script 4 Cross Site Scripting	18.01.2023	CraCkEr
Low	eCart Web 5.0.0 Cross Site Scripting	15.01.2023	CraCkEr
Low	Academy LMS 5.11 Cross Site Scripting	13.01.2023	CraCkEr
Low	ChiKoi New-MVC-SHOP 1.0 Cross Site Scripting	13.01.2023	CraCkEr
Low	Tiki Wiki CMS Groupware 25.0 Cross Site Scripting	12.01.2023	CraCkEr
High	WordPress Royal Elementor 1.3.59 XSS / CSRF / Insufficient Access Controls	11.01.2023	Ramuel Gall
Low	Senayan Library Management System 9.2.2 Cross Site Scripting	27.12.2022	nu11secur1ty
Low	Senayan Library Management System 9.2.0 Cross Site Scripting	21.12.2022	nu11secur1ty
Low	Senayan Library Management System 9.2.1 Cross Site Scripting	21.12.2022	nu11secur1ty
Low	Senayan Library Management System 9.1.1 Cross Site Scripting	20.12.2022	nu11secur1ty
Low	Shoplazza 1.1 Cross Site Scripting	16.12.2022	Andrey Stoykov
Low	Senayan Library Management System 9.0.0 Cross Site Scripting	11.12.2022	nu11secur1ty
Low	Senayan Library Management System 9.4.0 Cross Site Scripting	11.12.2022	nu11secur1ty
High	ILIAS eLearning 7.15 Command Injection / XSS / LFI / Open Redirect	09.12.2022	Anna Hartig
Med.	Planet eStream Code Execution / SQL Injection / XSS / Broken Control	09.12.2022	Philipp Espernberger
Med.	Delta Electronics DX-2100-L1-CN 1.5.0.10 Command Injection / XSS	09.12.2022	T. Weber
Low	IBM Websphere Application Server 7.0 Cross Site Scripting	05.12.2022	Milad Karimi
Med.	OX App Suite 7.10.6 Cross Site Scripting / SSRF / Resource Consumption	01.12.2022	Martin Heiland
Low	Ecommerce 1.0 Cross Site Scripting / Open Redirect	26.11.2022	nu11secur1ty
Low	ClicShopping 3.402 Cross Site Scripting	21.11.2022	nu11secur1ty
Low	Revenue Collection System 1.0 Cross Site Scripting / Authentication Bypass	17.11.2022	Joe Pollock
High	Ecommerce CodeIgniter Bootstrap 1.0 Cross Site Scripting	31.10.2022	nu11secur1ty
Low	ERP Sankhya 4.13.x Cross Site Scripting	26.10.2022	Lucas Alves Da Cunha
Low	Dinstar FXO Analog VoIP Gateway DAG2000-16O Cross Site Scripting	26.10.2022	Yehia Elghaly
Low	WiFi File Transfer 1.0.8 Cross Site Scripting	17.10.2022	Vulnerability Laborato...
Low	Garage Management System 1.0 - 'categoriesName' - Stored XSS	15.10.2022	Sam Wallace
Low	Joomla KSAdvertiser 2.5.37 Cross Site Scripting	13.10.2022	CraCkEr
Med.	Joomla Vik Rent Car 1.14 Cross Site Scripting	10.10.2022	CraCkEr
Low	WordPress eCommerce Product Catalog 3.0.70 Cross Site Scripting	10.10.2022	CraCkEr
Low	WordPress / Joomla JReviews 4.1.5 Cross Site Scripting	10.10.2022	CraCkEr
Low	Joomla JoomBri Careers 3.3.0 Cross Site Scripting	08.10.2022	CraCkEr
Low	Joomla Vik Booking 1.15.0 Cross Site Scripting	08.10.2022	CraCkEr
Low	Canteen Management 1.0-2022 Cross Site Scripting	05.10.2022	nu11secur1ty
Low	Centreon 22.04.0 Cross Site Scripting	04.10.2022	syad
Low	Joomla MarvikShop ShoppingCart 3.4 Cross Site Scripting	04.10.2022	CraCkEr
Low	Joomla RAXO All-Mode PRO 2.01 Cross Site Scripting	04.10.2022	CraCkEr
Low	Joomla Solidres 2.12.9 Cross Site Scripting	04.10.2022	CraCkEr
Low	jCart For OpenCart 3.0.3.19 Cross Site Scripting	02.10.2022	CraCkEr
Low	WooCommerce BRW Booking Rental 1.3.1 Cross Site Scripting	01.10.2022	CraCkEr
Low	Joomla jMarket 5.15 Cross Site Scripting	01.10.2022	CraCkEr
Low	Bus Pass Management System 1.0 Cross Site Scripting	29.09.2022	Ali Alipour
Low	Joomla EDocman 1.23.3 Cross Site Scripting	29.09.2022	CraCkEr
Low	Online Examination System 1.0 Cross Site Scripting	29.09.2022	Yousef Alraddadi
Low	WordPress Sabai Discuss 1.4.13 Cross Site Scripting	28.09.2022	CraCkEr
Low	Active eCommerce CMS 6.3.0 Cross Site Scripting	28.09.2022	th3d1gger
Low	EShop Joomla Shopping-Cart 3.6.0 Cross Site Scripting	28.09.2022	CraCkEr
Low	WordPress Motopress Hotel Booking Lite 4.4.2 Cross Site Scripting	28.09.2022	Ali Alipour
Low	WordPress WP-UserOnline 2.88.0 Cross Site Scripting	25.09.2022	UnD3sc0n0c1d0
Low	WorkOrder CMS 0.1.0 Cross Site Scripting	24.09.2022	Chokri Hammedi
Low	Multix 2.4 Cross Site Scripting	24.09.2022	th3d1gger
Low	Testa 3.5.1 Online Test Management System Reflected Cross-Site Scripting (XSS)	24.09.2022	Ashkan Moghaddas
Low	WordPress GetYourGuide Ticketing 1.0.1 Cross Site Scripting	20.09.2022	Mariam Tariq
Low	News247 News Magazine 1.0 Cross Site Scripting	15.09.2022	Ravinder Verma
Low	ETAP Safety Manager 1.0.0.32 Cross Site Scripting	13.09.2022	LiquidWorm
Low	Rocket LMS 1.6 Cross Site Scripting	13.09.2022	th3d1gger
Low	mbDrive Lite WiFi Flash Disk 1.4.0 Cross Site Scripting	11.09.2022	Chokri Hammedi
Med.	OX App Suite Cross Site Scripting / Command Injection	02.09.2022	Martin Heiland
Low	WordPress Netroics Blog Posts Grid 1.0 Cross Site Scripting	02.09.2022	yunaranyancat
Med.	WordPress Core Cross Site Scripting / SQL Injection	31.08.2022	Khalilov Moe
Med.	FLIR AX8 1.46.16 Traversal / Access Control / Command Injection / XSS	20.08.2022	Samy Younsi
Low	Inout SiteSearch 2.0.1 Cross Site Scripting	15.08.2022	CraCkEr
High	Windows sxssrv!BaseSrvActivationContextCacheDuplicateUnicodeString Heap Buffer Overflow	14.08.2022	Google Security Resear...
Low	Fiberhome AN5506-02-B Cross Site Scripting	12.08.2022	Leonardo Goncalves
Low	Intelbras ATA 200 Cross Site Scripting	12.08.2022	Leonardo Goncalves
Low	WordPress Testimonial Slider And Showcase 2.2.6 Cross Site Scripting	06.08.2022	yunaranyancat
Low	WordPress WP-UserOnline 2.87.6 Cross Site Scripting	03.08.2022	Steffin Stanly
Low	Wavlink WN533A8 Cross Site Scripting	02.08.2022	Ahmed Alroky
Low	Transposh WordPress Translation 1.0.7 Cross Site Scripting	01.08.2022	Julien Ahrens
Med.	WordPress Plugin WP-UserOnline 2.87.6 Stored Cross-Site Scripting (XSS)	01.08.2022	Steffin Stanly
Low	Loan Management System 1.0 Cross Site Scripting	29.07.2022	saitamang
Low	Magnolia CMS 6.2.19 Cross Site Scripting	10.07.2022	Giulio Garzia
Low	EQS Integrity Line Cross Site Scripting / Information Disclosure	06.07.2022	Giovanni Pellerano
Low	Paymoney 3.3 Cross Site Scripting	04.07.2022	nu11secur1ty
Low	BigBlueButton 2.3 / 2.4.7 Cross Site Scripting	02.07.2022	Rick Verdoes
Low	WSO2 Management Console Cross Site Scripting	28.06.2022	cxosmo
Low	Mailhog 1.0.1 Stored Cross-Site Scripting (XSS)	28.06.2022	Vulnz

---

CVEMAP Search Results

CVE

Details

Description

2023-03-20

	CVE-2023-25795	Updating...	Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in WP-master.Ir Feed Changer & Remover plugin <= 0.2 versions.
	CVE-2023-25794	Updating...	Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Mighty Digital Nooz plugin <= 1.6.0 versions.
	CVE-2023-25064	Updating...	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Matteo Candura WP htpasswd plugin <= 1.7 versions.
	CVE-2023-24381	Updating...	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in NsThemes Advanced Social Pixel plugin <= 2.1.1 versions.
	CVE-2023-25782	Updating...	Auth. (admin+) vulnerability in Second2none Service Area Postcode Checker plugin <= 2.0.8 versions.
	CVE-2023-1507	Updating...	A vulnerability has been found in SourceCodester E-Commerce System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /ecommerce/admin/category/controller.php of the component Category Name Handler. The manipulation of the argument CATEGORY leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223411.
	CVE-2022-47591	Updating...	Reflected Cross-Site Scripting (XSS) vulnerability in Mickael Austoni Map Multi Marker plugin <= 3.2.1 versions.
	CVE-2023-23718	Updating...	Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Esstat17 Page Loading Effects plugin <= 2.0.0 versions.
	CVE-2023-22682	Updating...	Reflected Cross-Site Scripting (XSS) vulnerability in Manuel Masia | Pixedelic.Com Camera slideshow plugin <= 1.4.0.1 versions.
	CVE-2023-22680	Updating...	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Altanic No API Amazon Affiliate plugin <= 4.2.2 versions.

 

---

Copyright 2023, cxsecurity.com