# CVEs published 2023-03-04

8 CVEs were published on March 4, 2023: 1 critical, 1 high. Days are UTC.

- [CVE-2014-125091](https://cve.now/CVE-2014-125091.md): codepeople cp-polls Plugin cp-admin-int-message-list.inc.php sql injection (CVSS 4.7, codepeople cp-polls Plugin)
- [CVE-2014-125090](https://cve.now/CVE-2014-125090.md): Media Downloader Plugin getfile.php dl\_file\_resumable cross site scripting (CVSS 3.5, Media Downloader Plugin)
- [CVE-2020-36665](https://cve.now/CVE-2020-36665.md): Artesãos SEOTools TwitterCards.php eachValue redirect (CVSS 5.5, Artesãos SEOTools · artesaos/seotools)
- [CVE-2020-36664](https://cve.now/CVE-2020-36664.md): Artesãos SEOTools SEOMeta.php setTitle redirect (CVSS 5.5, Artesãos SEOTools · artesaos/seotools)
- [CVE-2020-36663](https://cve.now/CVE-2020-36663.md): Artesãos SEOTools OpenGraph.php makeTag redirect (CVSS 5.5, Artesãos SEOTools · artesaos/seotools)
- [CVE-2023-26481](https://cve.now/CVE-2023-26481.md): Insufficient user check in FlowTokens by Email stage (CVSS 9.1, goauthentik authentik)
- [CVE-2023-25819](https://cve.now/CVE-2023-25819.md): Discourse tags with no visibility are leaking into og:article:tag (CVSS 5.3, discourse)
- [CVE-2023-1175](https://cve.now/CVE-2023-1175.md): Incorrect Calculation of Buffer Size in vim/vim (CVSS 7.3, vim/vim)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-03-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.