# CVEs published 2023-06-03

21 CVEs were published on June 3, 2023: 1 critical, 4 high. Days are UTC.

- [CVE-2023-3091](https://cve.now/CVE-2023-3091.md): Captura CRYPTBASE.dll uncontrolled search path (CVSS 7.0, Captura)
- [CVE-2023-32582](https://cve.now/CVE-2023-32582.md): WordPress Don8 Plugin \<= 0.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Kyle Maurer Don8)
- [CVE-2023-3085](https://cve.now/CVE-2023-3085.md): X-WRT luci 404 Error Template dispatcher.uc run\_action cross site scripting (CVSS 3.5, X-WRT luci)
- [CVE-2023-2416](https://cve.now/CVE-2023-2416.md): Online Booking & Scheduling Calendar for WordPress by vcita \<= 4.5 - Cross-Site Request Forgery to Account Logout (CVSS 5.4, Online Booking & Scheduling Calendar for WordPress by vcita)
- [CVE-2023-2404](https://cve.now/CVE-2023-2404.md): CRM and Lead Management by vcita \<= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, CRM and Lead Management by vcita)
- [CVE-2023-2298](https://cve.now/CVE-2023-2298.md): Online Booking & Scheduling Calendar for WordPress by vcita \<= 4.3.0 - Unauthenticated Stored Cross-Site Scripting (CVSS 7.2, Online Booking & Scheduling Calendar for WordPress by vcita)
- [CVE-2023-2415](https://cve.now/CVE-2023-2415.md): Online Booking & Scheduling Calendar for WordPress by vcita \<= 4.2.10 - Missing Authorization to Account Logout (CVSS 5.4, Online Booking & Scheduling Calendar for WordPress by vcita)
- [CVE-2023-2301](https://cve.now/CVE-2023-2301.md): Contact Form Builder by vcita \<= 4.10.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting (CVSS 6.1, eyale-vc Contact Form Builder by vcita)
- [CVE-2023-2302](https://cve.now/CVE-2023-2302.md): Contact Form and Calls To Action by vcita \<= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, Contact Form and Calls To Action by vcita)
- [CVE-2023-2299](https://cve.now/CVE-2023-2299.md): Online Booking & Scheduling Calendar for WordPress by vcita \<= 4.4.2 - Missing Authorization on REST-API (CVSS 5.3, Online Booking & Scheduling Calendar for WordPress by vcita)
- [CVE-2023-2303](https://cve.now/CVE-2023-2303.md): Contact Form and Calls To Action by vcita \<= 4.10.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting (CVSS 6.1, eyale-vc Contact Form Builder by vcita)
- [CVE-2023-2407](https://cve.now/CVE-2023-2407.md): Event Registration Calendar By vcita \<= 1.3.1 & Online Payments – Get Paid with PayPal, Square & Stripe \<= 3.10.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting (CVSS 6.1, Event Registration Calendar By vcita · vcita Online Payment…)
- [CVE-2023-2406](https://cve.now/CVE-2023-2406.md): Event Registration Calendar By vcita \<= 1.3.1 & Online Payments – Get Paid with PayPal, Square & Stripe \<= 3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, Event Registration Calendar By vcita · vcita Online Payment…)
- [CVE-2023-2300](https://cve.now/CVE-2023-2300.md): Contact Form Builder by vcita \<= 4.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, eyale-vc Contact Form Builder by vcita)
- [CVE-2023-2405](https://cve.now/CVE-2023-2405.md): CRM and Lead Management by vcita \<= 2.7.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting (CVSS 6.1, CRM and Lead Management by vcita)
- [CVE-2023-0584](https://cve.now/CVE-2023-0584.md): VK Blocks \<= 1.57.0.5 - Authenticated(Contributor+) Settings Update (CVSS 4.3, vektor-inc VK Blocks)
- [CVE-2023-0583](https://cve.now/CVE-2023-0583.md): VK Blocks \<= 1.57.0.5 - Authenticated(Contributor+) Settings Update (CVSS 4.3, vektor-inc VK Blocks)
- [CVE-2023-33143](https://cve.now/CVE-2023-33143.md): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft Edge)
- [CVE-2023-3083](https://cve.now/CVE-2023-3083.md): Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass (CVSS 6.1, nilsteampassnet/teampass)
- [CVE-2023-3084](https://cve.now/CVE-2023-3084.md): Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass (CVSS 8.1, nilsteampassnet/teampass)
- [CVE-2023-3086](https://cve.now/CVE-2023-3086.md): Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass (CVSS 9.0, nilsteampassnet/teampass)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-06-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.