CVEs published April 8, 2023
20 CVEs were published on April 8, 2023: 0 critical, 1 high.
- Published
- 20
- Critical
- 0
- High
- 1
- Medium
- 15
- Low
- 4
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 4
Most affected products
- SourceCodester Online Computer and Laptop Store
- 11
- PHPGurukul BP Monitoring Management System
- 3
- Exit Strategy Plugin
- 2
- Broken Link Checker Plugin
- 1
- Editorial Calendar Plugin
- 1
High 1
Medium, low and unrated 19
- CVE-2013-10025Exit Strategy Plugin exitpage.php exitpageadmin cross-site request forgeryExit Strategy Plugin
- CVE-2013-10024Exit Strategy Plugin exitpage.php information disclosureExit Strategy Plugin
- CVE-2023-1961SourceCodester Online Computer and Laptop Store cross site scriptingSourceCodester Online Computer and Laptop Store
- CVE-2023-1960SourceCodester Online Computer and Laptop Store sql injectionSourceCodester Online Computer and Laptop Store
- CVE-2023-1959SourceCodester Online Computer and Laptop Store sql injectionSourceCodester Online Computer and Laptop Store
- CVE-2023-1958SourceCodester Online Computer and Laptop Store sql injectionSourceCodester Online Computer and Laptop Store
- CVE-2023-1957SourceCodester Online Computer and Laptop Store Subcategory sql injectionSourceCodester Online Computer and Laptop Store
- CVE-2023-1956SourceCodester Online Computer and Laptop Store Image path traversalSourceCodester Online Computer and Laptop Store
- CVE-2023-1954SourceCodester Online Computer and Laptop Store manage.php save_inventory sql injectionSourceCodester Online Computer and Laptop Store
- CVE-2023-1953SourceCodester Online Computer and Laptop Store index.php sql injectionSourceCodester Online Computer and Laptop Store
- CVE-2015-10098Broken Link Checker Plugin ui_get_action_links cross site scriptingBroken Link Checker Plugin
- CVE-2013-10023Editorial Calendar Plugin edcal.php edcal_filter_where sql injectionEditorial Calendar Plugin
- CVE-2023-1952SourceCodester Online Computer and Laptop Store Product Search ?p=products sql injectionSourceCodester Online Computer and Laptop Store
- CVE-2023-1951SourceCodester Online Computer and Laptop Store brand.php delete_brand sql injectionSourceCodester Online Computer and Laptop Store
- CVE-2023-1950PHPGurukul BP Monitoring Management System Password Recovery password-recovery.php sql injectionPHPGurukul BP Monitoring Management System
- CVE-2023-1949PHPGurukul BP Monitoring Management System Change Password change-password.php sql injectionPHPGurukul BP Monitoring Management System
- CVE-2023-1948PHPGurukul BP Monitoring Management System Add New Family Member add-family-member.php cross site scriptingPHPGurukul BP Monitoring Management System
- CVE-2023-24626socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows loca
- CVE-2023-30450rpk in Redpanda before 23.1.2 mishandles the redpanda.rpc_server_tls field, leading to (for example) situations in which there is a data typ