CVEs published October 21, 2023
15 CVEs were published on October 21, 2023: 0 critical, 1 high.
- Published
- 15
- Critical
- 0
- High
- 1
- Medium
- 8
- Low
- 0
- Unrated
- 6
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Byzoro Smart S85F Management Platform
- 2
- anilankola Add Custom Body Class
- 1
- ashanjay EventON – Events Calendar
- 1
- PluginEver WC Serial Numbers
- 1
- Qwerty23 Rocket Font
- 1
- salesmanag0 SALESmanago & Leadoo
- 1
- soisytech Soisy Pagamento Rateale
- 1
High 1
Medium, low and unrated 14
- CVE-2023-46078WordPress Serial Numbers for WooCommerce – License Manager Plugin <= 1.6.3 is vulnerable to Cross Site Request Forgery (CSRF)PluginEver WC Serial Numbers
- CVE-2023-46067WordPress Rocket Font Plugin <= 1.2.3 is vulnerable to Cross Site Request Forgery (CSRF)Qwerty23 Rocket Font
- CVE-2023-4939SALESmanago <= 3.2.4 - Log Injection via Weak Authentication Tokensalesmanag0 SALESmanago & Leadoo
- CVE-2023-5205Add Custom Body Class <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scriptinganilankola Add Custom Body Class
- CVE-2023-4635EventON <= 2.2.2 - Reflected Cross-Site Scriptingashanjay EventON – Events Calendar
- CVE-2023-5684Byzoro Smart S85F Management Platform importexport.php os command injectionByzoro Smart S85F Management Platform
- CVE-2023-5683Byzoro Smart S85F Management Platform importconf.php os command injectionByzoro Smart S85F Management Platform
- CVE-2023-38190An issue was discovered in SuperWebMailer 9.00.0.01710.
- CVE-2023-38192An issue was discovered in SuperWebMailer 9.00.0.01710.
- CVE-2023-38193An issue was discovered in SuperWebMailer 9.00.0.01710.
- CVE-2023-38194An issue was discovered in SuperWebMailer 9.00.0.01710.
- CVE-2023-46003I-doit pro 25 and below is vulnerable to Cross Site Scripting (XSS) via index.php.
- CVE-2023-46054Cross Site Scripting (XSS) vulnerability in WBCE CMS v.1.6.1 and before allows a remote attacker to escalate privileges via a crafted script
- CVE-2023-46055An issue in ThingNario Photon v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted script to the p