CVEs published September 16, 2023
9 CVEs were published on September 16, 2023: 1 critical, 1 high.
- Published
- 9
- Critical
- 1
- High
- 1
- Medium
- 2
- Low
- 1
- Unrated
- 4
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- gopiplus Horizontal scrolling announcement
- 1
- hit-reach Allow PHP in Posts and Pages
- 1
- hyno Dropbox Folder Share
- 1
- Pluck CMS
- 1
- Topaz OFD
- 1
Critical 1
High 1
Medium, low and unrated 7
- CVE-2023-5013Pluck CMS Installation install.php cross site scriptingPluck CMS
- CVE-2023-5012Topaz OFD Protection Module Warsaw core.exe unquoted search pathTopaz OFD
- CVE-2023-5001Horizontal scrolling announcement <= 9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodegopiplus Horizontal scrolling announcement
- CVE-2023-39612A cross-site scripting (XSS) vulnerability in FileBrowser before v2.23.0 allows an authenticated attacker to escalate privileges to Administ
- CVE-2023-39777A cross-site scripting (XSS) vulnerability in the Admin Control Panel of vBulletin 5.7.5 and 6.0.0 allows attackers to execute arbitrary web
- CVE-2023-41157Multiple stored cross-site scripting (XSS) vulnerabilities in Usermin 2.000 allow remote attackers to inject arbitrary web script or HTML vi
- CVE-2023-42336An issue in NETIS SYSTEMS WF2409Ev4 v.1.0.1.705 allows a remote attacker to execute arbitrary code and obtain sensitive information via the