CVEs published June 3, 2023
21 CVEs were published on June 3, 2023: 1 critical, 4 high.
- Published
- 21
- Critical
- 1
- High
- 4
- Medium
- 15
- Low
- 1
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- Online Booking & Scheduling Calendar for WordPress by vcita
- 4
- eyale-vc Contact Form Builder by vcita
- 3
- nilsteampassnet/teampass
- 3
- CRM and Lead Management by vcita
- 2
- Event Registration Calendar By vcita · vcita Online Payment…
- 2
- vektor-inc VK Blocks
- 2
- Captura
- 1
- Contact Form and Calls To Action by vcita
- 1
- Kyle Maurer Don8
- 1
- Microsoft Edge
- 1
Critical 1
High 4
- CVE-2023-3091Captura CRYPTBASE.dll uncontrolled search pathCaptura
- CVE-2023-2298Online Booking & Scheduling Calendar for WordPress by vcita <= 4.3.0 - Unauthenticated Stored Cross-Site ScriptingOnline Booking & Scheduling Calendar for WordPress by vcita
- CVE-2023-33143Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityMicrosoft Edge
- CVE-2023-3084Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampassnilsteampassnet/teampass
Medium, low and unrated 16
- CVE-2023-32582WordPress Don8 Plugin <= 0.4 is vulnerable to Cross Site Scripting (XSS)Kyle Maurer Don8
- CVE-2023-3085X-WRT luci 404 Error Template dispatcher.uc run_action cross site scriptingX-WRT luci
- CVE-2023-2416Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5 - Cross-Site Request Forgery to Account LogoutOnline Booking & Scheduling Calendar for WordPress by vcita
- CVE-2023-2404CRM and Lead Management by vcita <= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site ScriptingCRM and Lead Management by vcita
- CVE-2023-2415Online Booking & Scheduling Calendar for WordPress by vcita <= 4.2.10 - Missing Authorization to Account LogoutOnline Booking & Scheduling Calendar for WordPress by vcita
- CVE-2023-2301Contact Form Builder by vcita <= 4.10.3 - Cross-Site Request Forgery to Stored Cross-Site Scriptingeyale-vc Contact Form Builder by vcita
- CVE-2023-2302Contact Form and Calls To Action by vcita <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site ScriptingContact Form and Calls To Action by vcita
- CVE-2023-2299Online Booking & Scheduling Calendar for WordPress by vcita <= 4.4.2 - Missing Authorization on REST-APIOnline Booking & Scheduling Calendar for WordPress by vcita
- CVE-2023-2303Contact Form and Calls To Action by vcita <= 4.10.5 - Cross-Site Request Forgery to Stored Cross-Site Scriptingeyale-vc Contact Form Builder by vcita
- CVE-2023-2407Event Registration Calendar By vcita <= 1.3.1 & Online Payments – Get Paid with PayPal, Square & Stripe <= 3.10.0 - Cross-Site Request Forgery to Stored Cross-Site ScriptingEvent Registration Calendar By vcita · vcita Online Payment…
- CVE-2023-2406Event Registration Calendar By vcita <= 1.3.1 & Online Payments – Get Paid with PayPal, Square & Stripe <= 3.9.1 - Authenticated (Contributor+) Stored Cross-Site ScriptingEvent Registration Calendar By vcita · vcita Online Payment…
- CVE-2023-2300Contact Form Builder by vcita <= 4.9.1 - Authenticated (Contributor+) Stored Cross-Site Scriptingeyale-vc Contact Form Builder by vcita
- CVE-2023-2405CRM and Lead Management by vcita <= 2.7.0 - Cross-Site Request Forgery to Stored Cross-Site ScriptingCRM and Lead Management by vcita
- CVE-2023-0584VK Blocks <= 1.57.0.5 - Authenticated(Contributor+) Settings Updatevektor-inc VK Blocks
- CVE-2023-0583VK Blocks <= 1.57.0.5 - Authenticated(Contributor+) Settings Updatevektor-inc VK Blocks
- CVE-2023-3083Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampassnilsteampassnet/teampass