# CVEs published 2023-11-20

73 CVEs were published on November 20, 2023: 9 critical, 12 high. Days are UTC.

- [CVE-2023-6142](https://cve.now/CVE-2023-6142.md): Dev Blog v1.0 - Stored XSS (CVSS 5.4, Dev Blog)
- [CVE-2023-6144](https://cve.now/CVE-2023-6144.md): Dev Blog v1.0 - ATO (CVSS 9.1, Dev Blog)
- [CVE-2023-48310](https://cve.now/CVE-2023-48310.md): Ability to DoS the testing infrastructure by overwriting files (CVSS 9.1, NC3-LU TestingPlatform)
- [CVE-2023-6199](https://cve.now/CVE-2023-6199.md): Book Stack v23.10.2 - LFR via Blind SSRF (CVSS 6.5, BookStack)
- [CVE-2023-6178](https://cve.now/CVE-2023-6178.md): An arbitrary file write vulnerability exists where an authenticated attacker with privileges on the managing application could alter Nessus (CVSS 6.8, Tenable Nessus Agent)
- [CVE-2023-6062](https://cve.now/CVE-2023-6062.md): Arbitrary File Write (CVSS 6.8, Tenable Nessus)
- [CVE-2021-22636](https://cve.now/CVE-2021-22636.md): Texas Instruments TI-RTOS Integer Overflow or Wraparound (CVSS 7.4, Texas Instruments CC32XX · Texas Instruments SimpleLink… +3)
- [CVE-2021-27429](https://cve.now/CVE-2021-27429.md): Texas Instruments TI-RTOS Integer Overflow or Wraparound (CVSS 7.4, Texas Instruments CC32XX · Texas Instruments SimpleLink… +3)
- [CVE-2023-5343](https://cve.now/CVE-2023-5343.md): Popup Box \< 3.7.9 - Admin+ Stored XSS (CVSS 4.8, Popup box)
- [CVE-2023-5640](https://cve.now/CVE-2023-5640.md): Article Analytics \<= 1.0 - Unauthenticated SQL injection (no CVSS, Article analytics)
- [CVE-2023-5119](https://cve.now/CVE-2023-5119.md): Forminator and Forminator Pro \< 1.27.0 - Admin+ Stored Cross-Site Scripting (no CVSS, Forminator)
- [CVE-2023-5509](https://cve.now/CVE-2023-5509.md): myStickymenu \< 2.6.5 - Subscriber+ Arbitrary Form Leads Deletion (no CVSS, Floating Notification Bar, Sticky Menu on Scroll, Announcem…)
- [CVE-2023-5610](https://cve.now/CVE-2023-5610.md): Seraphinite Accelerator \< 2.20.29 - Authenticated Arbitrary Redirect (no CVSS, Seraphinite Accelerator)
- [CVE-2023-5651](https://cve.now/CVE-2023-5651.md): WP Hotel Booking \< 2.0.8 - Subscriber+ Arbitrary Post Deletion (CVSS 5.4, WP Hotel Booking)
- [CVE-2023-5799](https://cve.now/CVE-2023-5799.md): WP Hotel Booking \< 2.0.9 - Contributor+ Arbitrary Post Deletion (no CVSS, WP Hotel Booking)
- [CVE-2023-5609](https://cve.now/CVE-2023-5609.md): Seraphinite Accelerator \< 2.20.29 - Reflected XSS (no CVSS, Seraphinite Accelerator)
- [CVE-2023-5652](https://cve.now/CVE-2023-5652.md): WP Hotel Booking \< 2.0.8 - Unauthenticated SQLi (no CVSS, WP Hotel Booking)
- [CVE-2023-4808](https://cve.now/CVE-2023-4808.md): WP Post Popup \<= 3.7.3 - Admin+ Stored XSS (no CVSS, WP Post Popup)
- [CVE-2023-4799](https://cve.now/CVE-2023-4799.md): Magic Embeds \< 3.1.2 - Contributor+ Stored XSS via shortcode (no CVSS, Magic Embeds)
- [CVE-2023-4824](https://cve.now/CVE-2023-4824.md): WooHoo Newspaper Magazine Theme \<= 2.5.3 - Settings Update via CSRF (no CVSS, Woohoo)
- [CVE-2023-5140](https://cve.now/CVE-2023-5140.md): Bonus for Woo \< 5.8.3 - Reflected Cross-Site Scripting (no CVSS, Bonus for Woo)
- [CVE-2023-4970](https://cve.now/CVE-2023-4970.md): PubyDoc \<= 2.0.6 - Admin+ Stored XSS (no CVSS, PubyDoc)
- [CVE-2023-5340](https://cve.now/CVE-2023-5340.md): Five Star Restaurant Menu and Food Ordering \< 2.4.11 - Unauthenticated PHP Object Injection (no CVSS, Five Star Restaurant Menu and Food Ordering)
- [CVE-2023-48309](https://cve.now/CVE-2023-48309.md): next-auth vulnerable to possible user mocking that bypasses basic authentication (CVSS 5.3, nextauthjs next-auth · next-auth)
- [CVE-2023-48300](https://cve.now/CVE-2023-48300.md): Embed Privacy missing escaping for show\_all attribute in opt-out shortcode (CVSS 6.3, epiphyt embed-privacy)
- [CVE-2023-48293](https://cve.now/CVE-2023-48293.md): XWiki Admin Tools Application CSRF with QueryOnXWiki allows arbitrary database queries (CVSS 8.8, xwiki-contrib application-admintools · org.xwiki.contrib:xw…)
- [CVE-2023-48292](https://cve.now/CVE-2023-48292.md): XWiki Admin Tools Application Run Shell Command allows CSRF RCE attacks (CVSS 9.7, xwiki-contrib application-admintools · org.xwiki.contrib:xw…)
- [CVE-2023-48241](https://cve.now/CVE-2023-48241.md): XWiki exposed whole content of all documents of all wikis to anybody with view right on Solr suggest service (CVSS 7.5, xwiki-platform · org.xwiki.platform:xwiki-platform-search-s…)
- [CVE-2023-48240](https://cve.now/CVE-2023-48240.md): XWiki Platform sends cookies to external images in rendered diff and is vulnerable to server side request forgery (CVSS 9.1, xwiki-platform · org.xwiki.platform:xwiki-platform-diff-xml)
- [CVE-2023-48223](https://cve.now/CVE-2023-48223.md): fast-jwt JWT Algorithm Confusion (CVSS 5.9, nearform fast-jwt · fast-jwt)
- [CVE-2023-48221](https://cve.now/CVE-2023-48221.md): wire-avs remote format string vulnerability (CVSS 7.3, wireapp wire-avs)
- [CVE-2023-48218](https://cve.now/CVE-2023-48218.md): Strapi Protected Populate Plugin leaking fields if the request fields where empty or only fields selected where not populatable (CVSS 5.3, strapi-community strapi-plugin-protected-populate · strapi-…)
- [CVE-2023-29155](https://cve.now/CVE-2023-29155.md): INEA ME RTU Missing Authentication for Critical Function (CVSS 9.8, INEA ME RTU)
- [CVE-2023-35762](https://cve.now/CVE-2023-35762.md): OS Command Injection in INEA ME RTU (CVSS 9.9, INEA ME RTU)
- [CVE-2023-36013](https://cve.now/CVE-2023-36013.md): PowerShell Information Disclosure Vulnerability (CVSS 6.5, Microsoft PowerShell)
- [CVE-2023-6197](https://cve.now/CVE-2023-6197.md): Audio Merchant \<= 5.0.4 - Cross-Site Request Forgery to Settings Modifcation and Stored Cross-Site Scripting (CVSS 5.4, Audio Merchant)
- [CVE-2023-6196](https://cve.now/CVE-2023-6196.md): Audio Merchant \<= 5.0.4 - Cross-Site Request Forgery to Arbitrary File Upload (CVSS 8.8, Audio Merchant)
- [CVE-2023-47772](https://cve.now/CVE-2023-47772.md): WordPress Slider Revolution Plugin \<= 6.6.14 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, ThemePunch OHG Slider Revolution)
- [CVE-2023-5593](https://cve.now/CVE-2023-5593.md): The out-of-bounds write vulnerability in the Windows-based SecuExtender SSL VPN Client software version 4.0.4.0 could allow an authenticated (CVSS 7.8, Zyxel SecuExtender SSL VPN Client)
- [CVE-2023-47217](https://cve.now/CVE-2023-47217.md): Arkruntime has a buffer overflow vulnerability (CVSS 4.0, OpenHarmony)
- [CVE-2023-46100](https://cve.now/CVE-2023-46100.md): Cert manager has a use of uninitialized resource vulnerability (CVSS 6.2, OpenHarmony)
- [CVE-2023-42774](https://cve.now/CVE-2023-42774.md): Liteos-A has a incorrect default permissions vulnerability (CVSS 6.2, OpenHarmony)
- [CVE-2023-6045](https://cve.now/CVE-2023-6045.md): Arkruntime has a type confusion vulnerability (CVSS 5.9, OpenHarmony)
- [CVE-2023-46705](https://cve.now/CVE-2023-46705.md): Arkruntime has a type confusion vulnerability (CVSS 6.2, OpenHarmony)
- [CVE-2023-43612](https://cve.now/CVE-2023-43612.md): Hiview has an improper preservation of permissions vulnerability (CVSS 8.4, OpenHarmony)
- [CVE-2023-3116](https://cve.now/CVE-2023-3116.md): Liteos-A has a incorrect default permissions vulnerability (CVSS 7.3, OpenHarmony)
- [CVE-2022-46337](https://cve.now/CVE-2022-46337.md): Apache Derby: LDAP injection vulnerability in authenticator (CVSS 9.8, Apache Software Foundation Apache Derby · org.apache.derby:…)
- [CVE-2023-46302](https://cve.now/CVE-2023-46302.md): Apache Submarine: Fix CVE-2022-1471 SnakeYaml unsafe deserialization (critical (no CVSS), Apache Software Foundation Apache Submarine · apache-submar…)
- [CVE-2023-3379](https://cve.now/CVE-2023-3379.md): WAGO: Improper Privilege Management in web-based management (CVSS 5.3, WAGO Compact Controller · WAGO PFC100 +5)
- [CVE-2023-47175](https://cve.now/CVE-2023-47175.md): Cross-site scripting vulnerability in LuxCal Web Calendar prior to 5.2.4M (MySQL version) and LuxCal Web Calendar prior to 5.2.4L (SQLite ve (no CVSS, LuxSoft LuxCal Web Calendar)
- [CVE-2023-46700](https://cve.now/CVE-2023-46700.md): SQL injection vulnerability in LuxCal Web Calendar prior to 5.2.4M (MySQL version) and LuxCal Web Calendar prior to 5.2.4L (SQLite version) (no CVSS, LuxSoft LuxCal Web Calendar)
- [CVE-2023-38823](https://cve.now/CVE-2023-38823.md): Buffer Overflow vulnerability in Tenda Ac19 v.1.0, AC18, AC9 v.1.0, AC6 v.2.0 and v.1.0 allows a remote attacker to execute arbitrary code v (CVSS 9.8)
- [CVE-2023-38879](https://cve.now/CVE-2023-38879.md): The Community Edition version 9.0 of OS4ED's openSIS Classic allows remote attackers to read arbitrary files via a directory traversal vulne (no CVSS)
- [CVE-2023-38880](https://cve.now/CVE-2023-38880.md): The Community Edition version 9.0 of OS4ED's openSIS Classic has a broken access control vulnerability in the database backup functionality. (no CVSS)
- [CVE-2023-38881](https://cve.now/CVE-2023-38881.md): A reflected cross-site scripting (XSS) vulnerability in the Community Edition version 9.0 of OS4ED's openSIS Classic allows remote attackers (no CVSS)
- [CVE-2023-38882](https://cve.now/CVE-2023-38882.md): A reflected cross-site scripting (XSS) vulnerability in the Community Edition version 9.0 of OS4ED's openSIS Classic allows remote attackers (no CVSS)
- [CVE-2023-38883](https://cve.now/CVE-2023-38883.md): A reflected cross-site scripting (XSS) vulnerability in the Community Edition version 9.0 of OS4ED's openSIS Classic allows remote attackers (no CVSS)
- [CVE-2023-38884](https://cve.now/CVE-2023-38884.md): An Insecure Direct Object Reference (IDOR) vulnerability in the Community Edition version 9.0 of openSIS Classic allows an unauthenticated r (no CVSS)
- [CVE-2023-38885](https://cve.now/CVE-2023-38885.md): OpenSIS Classic Community Edition version 9.0 lacks cross-site request forgery (CSRF) protection throughout the whole app. (CVSS 8.8)
- [CVE-2023-46470](https://cve.now/CVE-2023-46470.md): Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via craft (no CVSS)
- [CVE-2023-46471](https://cve.now/CVE-2023-46471.md): Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via the t (CVSS 5.4)
- [CVE-2023-46990](https://cve.now/CVE-2023-46990.md): Deserialization of Untrusted Data in PublicCMS v.4.0.202302.e allows a remote attacker to execute arbitrary code via a crafted script to the (no CVSS)
- [CVE-2023-47172](https://cve.now/CVE-2023-47172.md): Certain WithSecure products allow Local Privilege Escalation. (no CVSS)
- [CVE-2023-47311](https://cve.now/CVE-2023-47311.md): An issue in Yamcs 5.8.6 allows attackers to send aribitrary telelcommands in a Command Stack via Clickjacking. (no CVSS)
- [CVE-2023-47417](https://cve.now/CVE-2023-47417.md): Cross Site Scripting (XSS) vulnerability in the component /shells/embedder.html of DZSlides after v2011.07.25 allows attackers to execute ar (no CVSS)
- [CVE-2023-48039](https://cve.now/CVE-2023-48039.md): GPAC 2.3-DEV-rev617-g671976fcc-master is vulnerable to memory leak in gf\_mpd\_parse\_string media\_tools/mpd.c:75. (no CVSS)
- [CVE-2023-48051](https://cve.now/CVE-2023-48051.md): An issue in /upydev/keygen.py in upydev v0.4.3 allows attackers to decrypt sensitive information via weak encryption padding. (no CVSS, upydev)
- [CVE-2023-48090](https://cve.now/CVE-2023-48090.md): GPAC 2.3-DEV-rev617-g671976fcc-master is vulnerable to memory leaks in extract\_attributes media\_tools/m3u8.c:329. (no CVSS)
- [CVE-2023-48109](https://cve.now/CVE-2023-48109.md): Tenda AX1803 v1.0.0.1 was discovered to contain a heap overflow via the deviceId parameter in the function saveParentControlInfo . (no CVSS)
- [CVE-2023-48110](https://cve.now/CVE-2023-48110.md): Tenda AX1803 v1.0.0.1 was discovered to contain a heap overflow via the urls parameter in the function saveParentControlInfo . (CVSS 7.5)
- [CVE-2023-48111](https://cve.now/CVE-2023-48111.md): Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the time parameter in the function saveParentControlInfo . (CVSS 7.5)
- [CVE-2023-48176](https://cve.now/CVE-2023-48176.md): An Insecure Permissions issue in WebsiteGuide v.0.2 allows a remote attacker to gain escalated privileges via crafted jwt (JSON web token). (no CVSS)
- [CVE-2023-48192](https://cve.now/CVE-2023-48192.md): An issue in TOTOlink A3700R v.9.1.2u.6134\_B20201202 allows a local attacker to execute arbitrary code via the setTracerouteCfg function. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-11-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.