# CVEs published 2023-04-08

20 CVEs were published on April 8, 2023: 0 critical, 1 high. Days are UTC.

- [CVE-2013-10025](https://cve.now/CVE-2013-10025.md): Exit Strategy Plugin exitpage.php exitpageadmin cross-site request forgery (CVSS 4.3, Exit Strategy Plugin)
- [CVE-2013-10024](https://cve.now/CVE-2013-10024.md): Exit Strategy Plugin exitpage.php information disclosure (CVSS 3.5, Exit Strategy Plugin)
- [CVE-2023-1961](https://cve.now/CVE-2023-1961.md): SourceCodester Online Computer and Laptop Store cross site scripting (CVSS 2.4, SourceCodester Online Computer and Laptop Store)
- [CVE-2023-1960](https://cve.now/CVE-2023-1960.md): SourceCodester Online Computer and Laptop Store sql injection (CVSS 6.3, SourceCodester Online Computer and Laptop Store)
- [CVE-2023-1959](https://cve.now/CVE-2023-1959.md): SourceCodester Online Computer and Laptop Store sql injection (CVSS 6.3, SourceCodester Online Computer and Laptop Store)
- [CVE-2023-1958](https://cve.now/CVE-2023-1958.md): SourceCodester Online Computer and Laptop Store sql injection (CVSS 6.3, SourceCodester Online Computer and Laptop Store)
- [CVE-2023-1957](https://cve.now/CVE-2023-1957.md): SourceCodester Online Computer and Laptop Store Subcategory sql injection (CVSS 6.3, SourceCodester Online Computer and Laptop Store)
- [CVE-2023-1956](https://cve.now/CVE-2023-1956.md): SourceCodester Online Computer and Laptop Store Image path traversal (CVSS 5.4, SourceCodester Online Computer and Laptop Store)
- [CVE-2023-1955](https://cve.now/CVE-2023-1955.md): SourceCodester Online Computer and Laptop Store User Registration login.php sql injection (CVSS 7.3, SourceCodester Online Computer and Laptop Store)
- [CVE-2023-1954](https://cve.now/CVE-2023-1954.md): SourceCodester Online Computer and Laptop Store manage.php save\_inventory sql injection (CVSS 6.3, SourceCodester Online Computer and Laptop Store)
- [CVE-2023-1953](https://cve.now/CVE-2023-1953.md): SourceCodester Online Computer and Laptop Store index.php sql injection (CVSS 6.3, SourceCodester Online Computer and Laptop Store)
- [CVE-2015-10098](https://cve.now/CVE-2015-10098.md): Broken Link Checker Plugin ui\_get\_action\_links cross site scripting (CVSS 3.5, Broken Link Checker Plugin)
- [CVE-2013-10023](https://cve.now/CVE-2013-10023.md): Editorial Calendar Plugin edcal.php edcal\_filter\_where sql injection (CVSS 6.3, Editorial Calendar Plugin)
- [CVE-2023-1952](https://cve.now/CVE-2023-1952.md): SourceCodester Online Computer and Laptop Store Product Search ?p=products sql injection (CVSS 6.3, SourceCodester Online Computer and Laptop Store)
- [CVE-2023-1951](https://cve.now/CVE-2023-1951.md): SourceCodester Online Computer and Laptop Store brand.php delete\_brand sql injection (CVSS 6.3, SourceCodester Online Computer and Laptop Store)
- [CVE-2023-1950](https://cve.now/CVE-2023-1950.md): PHPGurukul BP Monitoring Management System Password Recovery password-recovery.php sql injection (CVSS 6.3, PHPGurukul BP Monitoring Management System)
- [CVE-2023-1949](https://cve.now/CVE-2023-1949.md): PHPGurukul BP Monitoring Management System Change Password change-password.php sql injection (CVSS 6.3, PHPGurukul BP Monitoring Management System)
- [CVE-2023-1948](https://cve.now/CVE-2023-1948.md): PHPGurukul BP Monitoring Management System Add New Family Member add-family-member.php cross site scripting (CVSS 3.5, PHPGurukul BP Monitoring Management System)
- [CVE-2023-24626](https://cve.now/CVE-2023-24626.md): socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows loca (CVSS 6.5)
- [CVE-2023-30450](https://cve.now/CVE-2023-30450.md): rpk in Redpanda before 23.1.2 mishandles the redpanda.rpc\_server\_tls field, leading to (for example) situations in which there is a data typ (CVSS 4.3)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-04-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.