# CVEs published 2023-04-25

99 CVEs were published on April 25, 2023: 7 critical, 33 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2023-0045](https://cve.now/CVE-2023-0045.md): Incorrect indirect branch prediction barrier in the Linux Kernel (CVSS 4.7, Linux Kernel)
- [CVE-2023-2293](https://cve.now/CVE-2023-2293.md): SourceCodester Purchase Order Management System cross site scripting (CVSS 2.4, SourceCodester Purchase Order Management System)
- [CVE-2023-30609](https://cve.now/CVE-2023-30609.md): matrix-react-sdk vulnerable to HTML injection in search results via plaintext message highlighting (CVSS 5.4, matrix-org matrix-react-sdk · matrix-react-sdk)
- [CVE-2023-29012](https://cve.now/CVE-2023-29012.md): Git CMD erroneously executes \`doskey.exe\` in the current directory, if it exists (CVSS 7.3, git-for-windows git)
- [CVE-2023-29011](https://cve.now/CVE-2023-29011.md): Git for Windows's config file of \`connect.exe\` is susceptible to malicious placing (CVSS 7.6, git-for-windows git)
- [CVE-2023-29007](https://cve.now/CVE-2023-29007.md): Arbitrary configuration injection via \`git submodule deinit\` (CVSS 7.0, git)
- [CVE-2023-25815](https://cve.now/CVE-2023-25815.md): Git looks for localized messages in the wrong place (CVSS 3.3, git-for-windows git)
- [CVE-2023-24005](https://cve.now/CVE-2023-24005.md): WordPress Inline Tweet Sharer – Twitter Sharing Plugin Plugin \<= 2.5.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Winwar Media Inline Tweet Sharer – Twitter Sharing Plugin)
- [CVE-2023-23710](https://cve.now/CVE-2023-23710.md): WordPress WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin \<= 7.5.14 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, miniOrange WordPress Social Login and Register)
- [CVE-2023-23866](https://cve.now/CVE-2023-23866.md): WordPress Interactive Geo Maps Plugin \<= 1.5.8 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Carlos Moreira Interactive Geo Maps)
- [CVE-2023-23889](https://cve.now/CVE-2023-23889.md): WordPress Quick Paypal Payments Plugin \<= 5.7.25 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Fullworks Quick Paypal Payments)
- [CVE-2023-23995](https://cve.now/CVE-2023-23995.md): WordPress TinyMCE Custom Styles Plugin \<= 1.1.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Tim Reeves & David Stöckl TinyMCE Custom Styles)
- [CVE-2023-25652](https://cve.now/CVE-2023-25652.md): "git apply --reject" partially-controlled arbitrary file write (CVSS 7.5, git)
- [CVE-2023-25461](https://cve.now/CVE-2023-25461.md): WordPress Wp-Insert Plugin \<= 2.5.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, namithjawahar Wp-Insert)
- [CVE-2023-28084](https://cve.now/CVE-2023-28084.md): HPE OneView and HPE OneView Global Dashboard appliance dumps may expose authentication tokens (CVSS 5.5, Hewlett Packard Enterprise HPE OneView)
- [CVE-2023-28090](https://cve.now/CVE-2023-28090.md): An HPE OneView appliance dump may expose SNMPv3 read credentials (CVSS 5.5, Hewlett Packard Enterprise (HPE) HPE OneView)
- [CVE-2023-28089](https://cve.now/CVE-2023-28089.md): An HPE OneView appliance dump may expose FTP credentials for c7000 Interconnect Modules (CVSS 7.1, Hewlett Packard Enterprise (HPE) HPE OneView)
- [CVE-2023-28088](https://cve.now/CVE-2023-28088.md): An HPE OneView appliance dump may expose SAN switch administrative credentials (CVSS 7.8, Hewlett Packard Enterprise (HPE) HPE OneView)
- [CVE-2023-30839](https://cve.now/CVE-2023-30839.md): PrestaShop vulnerable to SQL filter bypass leading to arbitrary write requests using "SQL Manager" (CVSS 10.0, PrestaShop · prestashop/prestashop)
- [CVE-2023-28087](https://cve.now/CVE-2023-28087.md): An HPE OneView appliance dump may expose OneView user accounts (CVSS 5.5, Hewlett Packard Enterprise (HPE) HPE OneView)
- [CVE-2023-25793](https://cve.now/CVE-2023-25793.md): WordPress Link Juice Keeper Plugin \<= 2.0.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, George Pattihis Link Juice Keeper)
- [CVE-2023-28086](https://cve.now/CVE-2023-28086.md): An HPE OneView appliance dump may expose proxy credential settings (CVSS 5.5, Hewlett Packard Enterprise (HPE) HPE OneView)
- [CVE-2021-23203](https://cve.now/CVE-2021-23203.md): Improper access control in reporting engine of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attack (CVSS 7.5, Odoo Community · Odoo Enterprise)
- [CVE-2023-25485](https://cve.now/CVE-2023-25485.md): WordPress JSON Content Importer Plugin \<= 1.3.15 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Bernhard Kux JSON Content Importer)
- [CVE-2021-44547](https://cve.now/CVE-2021-44547.md): A sandboxing issue in Odoo Community 15.0 and Odoo Enterprise 15.0 allows authenticated administrators to executed arbitrary code, leading t (CVSS 8.7, Odoo Community · Odoo Enterprise)
- [CVE-2021-26947](https://cve.now/CVE-2021-26947.md): Cross-site scripting (XSS) issue Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arb (CVSS 6.5, Odoo Community · Odoo Enterprise)
- [CVE-2021-26263](https://cve.now/CVE-2021-26263.md): Cross-site scripting (XSS) issue in Discuss app of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote at (CVSS 7.5, Odoo Community · Odoo Enterprise)
- [CVE-2021-44465](https://cve.now/CVE-2021-44465.md): Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows authenticated attackers to subscribe (CVSS 5.3, Odoo Community · Odoo Enterprise)
- [CVE-2021-44775](https://cve.now/CVE-2021-44775.md): Cross-site scripting (XSS) issue in Website app of Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attac (CVSS 6.5, Odoo Community · Odoo Enterprise)
- [CVE-2021-23178](https://cve.now/CVE-2021-23178.md): Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows attackers to validate online payments (CVSS 7.5, Odoo Community · Odoo Enterprise)
- [CVE-2021-23186](https://cve.now/CVE-2021-23186.md): A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to access and (CVSS 8.7, Odoo Community · Odoo Enterprise)
- [CVE-2021-23166](https://cve.now/CVE-2021-23166.md): A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read and w (CVSS 8.7, Odoo Community · Odoo Enterprise)
- [CVE-2021-44461](https://cve.now/CVE-2021-44461.md): Cross-site scripting (XSS) issue in Accounting app of Odoo Enterprise 13.0 through 15.0, allows remote attackers who are able to control the (CVSS 6.5, Odoo Enterprise)
- [CVE-2021-44460](https://cve.now/CVE-2021-44460.md): Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows users with deactivated accounts to ac (CVSS 7.4, Odoo Community · Odoo Enterprise)
- [CVE-2021-44476](https://cve.now/CVE-2021-44476.md): A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read local (CVSS 6.8, Odoo Community · Odoo Enterprise)
- [CVE-2021-45111](https://cve.now/CVE-2021-45111.md): Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote authenticated users to trigger (CVSS 7.1, Odoo Community · Odoo Enterprise)
- [CVE-2021-23176](https://cve.now/CVE-2021-23176.md): Improper access control in reporting engine of l10n\_fr\_fec module in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier al (CVSS 6.5, Odoo Community · Odoo Enterprise)
- [CVE-2021-45071](https://cve.now/CVE-2021-45071.md): Cross-site scripting (XSS) issue Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arb (CVSS 5.3, Odoo Community · Odoo Enterprise)
- [CVE-2023-2282](https://cve.now/CVE-2023-2282.md): Improper access control in the Web Login listener in Devolutions Remote Desktop Manager 2023.1.22 and earlier on Windows allows an authentic (CVSS 3.1, Devolutions Remote Desktop Manager)
- [CVE-2023-30838](https://cve.now/CVE-2023-30838.md): PrestaShop vulnerable to possible XSS injection through Validate::isCleanHTML method (CVSS 8.6, PrestaShop · prestashop/prestashop)
- [CVE-2023-30545](https://cve.now/CVE-2023-30545.md): PrestaShop arbitrary file read vulnerability (CVSS 7.7, PrestaShop · prestashop/prestashop)
- [CVE-2023-29200](https://cve.now/CVE-2023-29200.md): contao/core-bundle has path traversal vulnerability in the file manager (CVSS 4.3, contao · contao/contao)
- [CVE-2022-47608](https://cve.now/CVE-2022-47608.md): WordPress Quick Contact Form Plugin \<= 8.0.3.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Fullworks Quick Contact Form)
- [CVE-2023-25484](https://cve.now/CVE-2023-25484.md): WordPress Simple Yearly Archive Plugin \<= 2.1.8 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Oliver Schlöbe Simple Yearly Archive)
- [CVE-2023-28847](https://cve.now/CVE-2023-28847.md): Nextcloud Server missing brute force protection for passwords of password protected share links (CVSS 3.1, nextcloud security-advisories)
- [CVE-2023-2281](https://cve.now/CVE-2023-2281.md): Archiving a team broadcasts unsanitized data over WebSockets (CVSS 3.1, Mattermost)
- [CVE-2023-25479](https://cve.now/CVE-2023-25479.md): WordPress Podlove Subscribe button Plugin \<= 1.3.7 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Podlove Subscribe button)
- [CVE-2023-25490](https://cve.now/CVE-2023-25490.md): WordPress Archivist – Custom Archive Templates Plugin \<= 1.7.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Eric Teubert Archivist – Custom Archive Templates)
- [CVE-2023-27619](https://cve.now/CVE-2023-27619.md): WordPress Regina Lite Theme \<= 2.0.7 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.4, Macho Themes Regina Lite)
- [CVE-2023-25710](https://cve.now/CVE-2023-25710.md): WordPress Click to Call or Chat Buttons Plugin \<= 1.4.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, DIGITALBLUE Click to Call or Chat Buttons)
- [CVE-2022-45837](https://cve.now/CVE-2022-45837.md): WordPress 微信机器人高级版 Plugin \<= 6.0.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Denis 微信机器人高级版)
- [CVE-2023-22665](https://cve.now/CVE-2023-22665.md): Apache Jena: Exposure of arbitrary execution in script engine expressions. (no CVSS, Apache Software Foundation Apache Jena · org.apache.jena:je…)
- [CVE-2012-5872](https://cve.now/CVE-2012-5872.md): ARC (aka ARC2) through 2011-12-01 allows blind SQL Injection in getTriplePatternSQL in ARC2\_StoreSelectQueryHandler.php via comments in a SP (CVSS 9.8)
- [CVE-2012-5873](https://cve.now/CVE-2012-5873.md): ARC (aka ARC2) through 2011-12-01 allows reflected XSS via the end\_point.php query parameter in an output=htmltab action. (CVSS 5.3)
- [CVE-2022-23721](https://cve.now/CVE-2022-23721.md): PingID integration for Windows login duplicate username collision. (CVSS 3.8)
- [CVE-2022-31244](https://cve.now/CVE-2022-31244.md): Nokia OneNDS 17r2 has Insecure Permissions vulnerability that allows for privilege escalation. (CVSS 7.8)
- [CVE-2022-40482](https://cve.now/CVE-2022-40482.md): The authentication method in Laravel 8.x through 9.x before 9.32.0 was discovered to be vulnerable to user enumeration via timeless timing a (CVSS 5.3)
- [CVE-2022-40722](https://cve.now/CVE-2022-40722.md): Misconfiguration of RSA padding for offline MFA in the PingID Adapter for PingFederate. (CVSS 7.7, Ping Identity PingID Adapter for PingFederate · Ping Ide… +1)
- [CVE-2022-40723](https://cve.now/CVE-2022-40723.md): Configuration-based MFA Bypass in PingID RADIUS PCV. (CVSS 6.5, Ping Identity PingID Radius PCV · Ping Identity PingID I… +1)
- [CVE-2022-40724](https://cve.now/CVE-2022-40724.md): Cross-Site Request Forgery on PingFederate Local Identity Profiles Endpoint. (CVSS 6.4, Ping Identity PingFederate)
- [CVE-2022-40725](https://cve.now/CVE-2022-40725.md): PingID Desktop PIN attempt lockout bypass. (CVSS 7.3, Ping Identity PingID Desktop for Windows · Ping Identity Pi…)
- [CVE-2022-42335](https://cve.now/CVE-2022-42335.md): x86 shadow paging arbitrary pointer dereference In environments where host assisted address translation is necessary but Hardware Assisted P (no CVSS, xen)
- [CVE-2022-45291](https://cve.now/CVE-2022-45291.md): PWS Personal Weather Station Dashboard (PWS\_Dashboard) LTS December 2020 (2012\_lts) allows remote code execution by injecting PHP code into (CVSS 7.2)
- [CVE-2023-20869](https://cve.now/CVE-2023-20869.md): VMware Workstation (17.x) and VMware Fusion (13.x) contain a stack-based buffer-overflow vulnerability that exists in the functionality for (CVSS 8.2, VMware Workstation Pro / Player (Workstation) and VMware Fu…)
- [CVE-2023-20870](https://cve.now/CVE-2023-20870.md): VMware Workstation and Fusion contain an out-of-bounds read vulnerability that exists in the functionality for sharing host Bluetooth device (CVSS 6.0, VMware Workstation Pro / Player (Workstation) and VMware Fu…)
- [CVE-2023-20871](https://cve.now/CVE-2023-20871.md): VMware Fusion contains a local privilege escalation vulnerability. (CVSS 7.8, VMware Fusion)
- [CVE-2023-20872](https://cve.now/CVE-2023-20872.md): VMware Workstation and Fusion contain an out-of-bounds read/write vulnerability in SCSI CD/DVD device emulation. (CVSS 8.8, VMware Workstation Pro / Player (Workstation) and VMware Fu…)
- [CVE-2023-2269](https://cve.now/CVE-2023-2269.md): A denial of service problem was found, due to a possible recursive locking scenario, resulting in a deadlock in table\_clear in drivers/md/dm (no CVSS, Kernel)
- [CVE-2023-23837](https://cve.now/CVE-2023-23837.md): No Exception Handling Vulnerability: Database Performance Analyzer (DPA) 2023.1 (CVSS 7.5, SolarWinds Database Performance Analyzer)
- [CVE-2023-23838](https://cve.now/CVE-2023-23838.md): Directory traversal and file enumeration vulnerability: Database Performance Analyzer (DPA) 2023.1 (CVSS 6.5, SolarWinds Database Performance Analyzer)
- [CVE-2023-23839](https://cve.now/CVE-2023-23839.md): SolarWinds Platform Exposure of Sensitive Information Vulnerability (CVSS 6.5, SolarWinds Platform)
- [CVE-2023-24512](https://cve.now/CVE-2023-24512.md): On affected platforms running Arista EOS, an authorized attacker with permissions to perform gNMI requests could craft a request allowing it to update arbitrary configurations in the switch. (CVSS 8.8, Arista Networks Terminattr)
- [CVE-2023-25313](https://cve.now/CVE-2023-25313.md): OS injection vulnerability in World Wide Broadcast Network AVideo version before 12.4, allows attackers to execute arbitrary code via the vi (CVSS 9.8, wwbn/avideo)
- [CVE-2023-25314](https://cve.now/CVE-2023-25314.md): Cross Site Scripting (XSS) vulnerability in World Wide Broadcast Network AVideo before 12.4, allows attackers to gain sensitive information (CVSS 6.1)
- [CVE-2023-25346](https://cve.now/CVE-2023-25346.md): A reflected cross-site scripting (XSS) vulnerability in ChurchCRM 4.5.3 allows remote attackers to inject arbitrary web script or HTML via t (CVSS 6.1)
- [CVE-2023-25347](https://cve.now/CVE-2023-25347.md): A stored cross-site scripting (XSS) vulnerability in ChurchCRM 4.5.3, allows remote attackers to inject arbitrary web script or HTML via inp (CVSS 5.4)
- [CVE-2023-25348](https://cve.now/CVE-2023-25348.md): ChurchCRM 4.5.3 was discovered to contain a CSV injection vulnerability via the Last Name and First Name input fields when creating a new pe (CVSS 7.8)
- [CVE-2023-26057](https://cve.now/CVE-2023-26057.md): An XXE issue was discovered in Nokia NetAct before 22 FP2211 via an XML document to the Configuration Dashboard page. (CVSS 6.5)
- [CVE-2023-26058](https://cve.now/CVE-2023-26058.md): An XXE issue was discovered in Nokia NetAct before 22 FP2211 via an XML document to a Performance Manager page. (CVSS 6.5)
- [CVE-2023-26098](https://cve.now/CVE-2023-26098.md): An issue was discovered in the Open Document feature in Telindus Apsal 3.14.2022.235 b. (CVSS 8.2)
- [CVE-2023-26560](https://cve.now/CVE-2023-26560.md): Northern.tech CFEngine Enterprise before 3.21.1 allows a subset of authenticated users to leverage the Scheduled Reports feature to read arb (CVSS 6.5)
- [CVE-2023-26735](https://cve.now/CVE-2023-26735.md): blackbox\_exporter v0.23.0 was discovered to contain an access control issue in its probe interface. (CVSS 7.5)
- [CVE-2023-26839](https://cve.now/CVE-2023-26839.md): A cross-site request forgery (CSRF) vulnerability in ChurchCRM v4.5.3 allows attackers to edit information for existing people on the site. (CVSS 4.3)
- [CVE-2023-26840](https://cve.now/CVE-2023-26840.md): A cross-site request forgery (CSRF) vulnerability in ChurchCRM v4.5.3 allows attackers to set a person to a user and set that user to be an (CVSS 5.3)
- [CVE-2023-26841](https://cve.now/CVE-2023-26841.md): A cross-site request forgery (CSRF) vulnerability in ChurchCRM v4.5.3 allows attackers to change any user's password except for the user tha (CVSS 6.5)
- [CVE-2023-26843](https://cve.now/CVE-2023-26843.md): A stored Cross-site scripting (XSS) vulnerability in ChurchCRM 4.5.3 allows remote attackers to inject arbitrary web script or HTML via the (CVSS 5.4)
- [CVE-2023-27105](https://cve.now/CVE-2023-27105.md): A vulnerability in the Wi-Fi file transfer module of Shanling M5S Portable Music Player with Shanling MTouch OS v4.3 and Shanling M2X Portab (CVSS 9.8)
- [CVE-2023-27843](https://cve.now/CVE-2023-27843.md): SQL injection vulnerability found in PrestaShop askforaquote v.5.4.2 and before allow a remote attacker to gain privileges via the QuotesPro (CVSS 9.8)
- [CVE-2023-28771](https://cve.now/CVE-2023-28771.md): Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware versions 4.60 through 5. (CVSS 9.8, KEV, Zyxel ZyWALL/USG series firmware · Zyxel VPN series firm… +2)
- [CVE-2023-29552](https://cve.now/CVE-2023-29552.md): The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. (CVSS 7.5, KEV)
- [CVE-2023-29779](https://cve.now/CVE-2023-29779.md): Sengled Dimmer Switch V0.0.9 contains a denial of service (DOS) vulnerability, which allows a remote attacker to send malicious Zigbee messa (CVSS 7.5)
- [CVE-2023-30106](https://cve.now/CVE-2023-30106.md): Sourcecodester Medicine Tracker System in PHP 1.0.0 is vulnerable to Cross Site Scripting (XSS) via page=about. (CVSS 6.1)
- [CVE-2023-30111](https://cve.now/CVE-2023-30111.md): Medicine Tracker System in PHP 1.0.0 is vulnerable to Cross Site Scripting (XSS). (CVSS 6.1)
- [CVE-2023-30177](https://cve.now/CVE-2023-30177.md): CraftCMS 3.7.59 is vulnerable Cross Site Scripting (XSS). (CVSS 6.1, craftcms/cms)
- [CVE-2023-30402](https://cve.now/CVE-2023-30402.md): YASM v1.3.0 was discovered to contain a heap overflow via the function handle\_dot\_label at /nasm/nasm-token.re. (no CVSS)
- [CVE-2023-30404](https://cve.now/CVE-2023-30404.md): Aigital Wireless-N Repeater Mini\_Router v0.131229 was discovered to contain a remote code execution (RCE) vulnerability via the sysCmd param (CVSS 9.8)
- [CVE-2023-30417](https://cve.now/CVE-2023-30417.md): A cross-site scripting (XSS) vulnerability in Pear-Admin-Boot up to v2.0.2 allows attackers to execute arbitrary web scripts or HTML via a c (CVSS 5.4)
- [CVE-2023-30549](https://cve.now/CVE-2023-30549.md): Unpatched extfs vulnerabilities are exploitable through suid-mode Apptainer (CVSS 7.1, apptainer · github.com/apptainer/apptainer)
- [CVE-2023-31223](https://cve.now/CVE-2023-31223.md): Dradis before 4.8.0 allows persistent XSS by authenticated author users, related to avatars. (CVSS 8.7)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-04-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.