# CVEs published 2023-12-15 288 CVEs were published on December 15, 2023: 16 critical, 25 high. Days are UTC. - [CVE-2023-27317](https://cve.now/CVE-2023-27317.md): Information Disclosure Vulnerability in ONTAP 9 (CVSS 4.3, NetApp ONTAP) - [CVE-2023-28022](https://cve.now/CVE-2023-28022.md): HCL Connections is vulnerable to sensitive information disclosure (CVSS 3.5, HCL Software HCL Connections) - [CVE-2023-50728](https://cve.now/CVE-2023-50728.md): Unauthenticated Denial of Service in the octokit/webhooks library (CVSS 5.4, octokit webhooks.js · @octokit/webhooks +3) - [CVE-2023-50266](https://cve.now/CVE-2023-50266.md): Bazarr Blind Server-Side Request Forgery (SSRF) in the /test/\/ endpoint (CVSS 5.3, morpheus65535 bazarr) - [CVE-2023-50265](https://cve.now/CVE-2023-50265.md): Bazarr Arbitrary file read in /api/swaggerui/static endpoint (CVSS 7.5, morpheus65535 bazarr) - [CVE-2023-50264](https://cve.now/CVE-2023-50264.md): Bazarr Arbitrary file read in /system/backup/download/ endpoint (CVSS 7.5, morpheus65535 bazarr) - [CVE-2023-4020](https://cve.now/CVE-2023-4020.md): Unvalidated input in Silicon Labs PSA Attestation service leads to secure memory access from non-secure memory (CVSS 9.0, silabs.com GSDK) - [CVE-2023-50723](https://cve.now/CVE-2023-50723.md): XWiki Platform remote code execution/programming rights with configuration section from any user account (CVSS 10.0, xwiki-platform · org.xwiki.platform:xwiki-platform-administ…) - [CVE-2023-50722](https://cve.now/CVE-2023-50722.md): XWiki Platform XSS/CSRF Remote Code Execution in XWiki.ConfigurableClass (CVSS 9.7, xwiki-platform · org.xwiki.platform:xwiki-platform-administ…) - [CVE-2023-50721](https://cve.now/CVE-2023-50721.md): XWiki Platform RCE from account through SearchAdmin (CVSS 10.0, xwiki-platform · org.xwiki.platform:xwiki-platform-search-ui) - [CVE-2023-50719](https://cve.now/CVE-2023-50719.md): XWiki Platform Solr search discloses password hashes of all users (CVSS 7.5, xwiki-platform · org.xwiki.platform:xwiki-platform-search-s…) - [CVE-2023-50720](https://cve.now/CVE-2023-50720.md): XWiki Platform Solr search discloses email addresses of users (CVSS 5.3, xwiki-platform · org.xwiki.platform:xwiki-platform-search-s…) - [CVE-2023-5310](https://cve.now/CVE-2023-5310.md): Z-Wave Denial of Service caused by Stream of Packets (CVSS 5.7, silabs.com Gecko SDK) - [CVE-2023-3904](https://cve.now/CVE-2023-3904.md): Improper Validation of Specified Type of Input in GitLab (CVSS 4.3, GitLab) - [CVE-2023-5061](https://cve.now/CVE-2023-5061.md): Missing Authorization in GitLab (CVSS 4.3, GitLab) - [CVE-2023-5512](https://cve.now/CVE-2023-5512.md): Improper Control of Generation of Code ('Code Injection') in GitLab (CVSS 4.8, GitLab) - [CVE-2023-6051](https://cve.now/CVE-2023-6051.md): Improper Control of Generation of Code ('Code Injection') in GitLab (CVSS 5.7, GitLab) - [CVE-2023-6680](https://cve.now/CVE-2023-6680.md): Improper Certificate Validation in GitLab (CVSS 7.4, GitLab) - [CVE-2023-49749](https://cve.now/CVE-2023-49749.md): WordPress SureTriggers Plugin \<= 1.0.23 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, SureTriggers – Connect All Your Plugins, Apps, Tools & Auto…) - [CVE-2023-49744](https://cve.now/CVE-2023-49744.md): WordPress Gift Up Gift Cards for WordPress and WooCommerce Plugin \<= 2.21.3 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Gift Up Gift Cards for WordPress and WooCommerce) - [CVE-2023-49197](https://cve.now/CVE-2023-49197.md): WordPress DoFollow Case by Case Plugin \<= 3.4.2 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Apasionados, Apasionados del Marketing, NetConsulting DoFol…) - [CVE-2023-49159](https://cve.now/CVE-2023-49159.md): WordPress CommentLuv Plugin \<= 3.0.4 is vulnerable to Server Side Request Forgery (SSRF) (CVSS 7.2, Elegant Digital Solutions CommentLuv) - [CVE-2023-3511](https://cve.now/CVE-2023-3511.md): Incorrect Authorization in GitLab (CVSS 2.0, GitLab) - [CVE-2023-49829](https://cve.now/CVE-2023-49829.md): WordPress Tutor LMS Plugin \<= 2.2.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Themeum Tutor LMS – eLearning and online course solution) - [CVE-2023-49823](https://cve.now/CVE-2023-49823.md): WordPress Bold Page Builder Plugin \<= 4.6.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, BoldThemes Bold Page Builder) - [CVE-2023-49767](https://cve.now/CVE-2023-49767.md): WordPress Biteship Plugin \<= 2.2.24 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Biteship: Plugin Ongkos Kirim Kurir Instant, Reguler, Kargo) - [CVE-2023-49747](https://cve.now/CVE-2023-49747.md): WordPress Guest Author Plugin \<= 2.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, WebFactory Guest Author) - [CVE-2023-49191](https://cve.now/CVE-2023-49191.md): WordPress GDPR Cookie Consent by Supsystic Plugin \<= 2.1.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, GDPR Cookie Consent by Supsystic) - [CVE-2023-49190](https://cve.now/CVE-2023-49190.md): WordPress Site Offline Plugin \<= 1.5.6 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Chandra Shekhar Sahu Site Offline Or Coming Soon Or Mainten…) - [CVE-2023-49189](https://cve.now/CVE-2023-49189.md): WordPress Social Share Buttons & Analytics Plugin – GetSocial.io Plugin \<= 4.3.12 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Getsocial, S.A. Social Share Buttons & Analytics Plugin – G…) - [CVE-2023-49188](https://cve.now/CVE-2023-49188.md): WordPress Track Geolocation Of Users Using Contact Form 7 Plugin \<= 2.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, ZealousWeb Track Geolocation Of Users Using Contact Form) - [CVE-2023-49187](https://cve.now/CVE-2023-49187.md): WordPress Adifier System Plugin \< 3.1.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Spoonthemes Adifier - Classified Ads WordPress Theme) - [CVE-2023-49185](https://cve.now/CVE-2023-49185.md): WordPress Doofinder for WooCommerce Plugin \<= 2.1.7 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Doofinder WP & WooCommerce Search) - [CVE-2023-49184](https://cve.now/CVE-2023-49184.md): WordPress Parallax Slider Block Plugin \<= 1.2.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, WPDeveloper Parallax Slider Block) - [CVE-2023-49183](https://cve.now/CVE-2023-49183.md): WordPress NextScripts Plugin \<= 4.4.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, NextScripts: Social Networks Auto-Poster) - [CVE-2023-49182](https://cve.now/CVE-2023-49182.md): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fabio Marzocca List all posts by Autho (CVSS 7.1, Fabio Marzocca List all posts by Authors, nested Categories…) - [CVE-2023-49181](https://cve.now/CVE-2023-49181.md): WordPress WP Event Manager Plugin \<= 3.1.40 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, WP Event Manager – Events Calendar, Registrations, Sell Tic…) - [CVE-2023-49180](https://cve.now/CVE-2023-49180.md): WordPress Automatic Youtube Video Posts Plugin Plugin \<= 5.2.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Ternstyle Automatic Youtube Video Posts Plugin) - [CVE-2023-49179](https://cve.now/CVE-2023-49179.md): WordPress Event post Plugin \<= 5.8.6 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, N.O.U.S. Open Useful and Simple Event post) - [CVE-2023-49178](https://cve.now/CVE-2023-49178.md): WordPress HDW Player Plugin (Video Player & Video Gallery) Plugin \<= 5.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Mr. Hdwplayer HDW Player Plugin) - [CVE-2023-49177](https://cve.now/CVE-2023-49177.md): WordPress which template file Plugin \<= 4.9.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Gilles Dumas which template file) - [CVE-2023-49176](https://cve.now/CVE-2023-49176.md): WordPress WP Pocket URLs Plugin \<= 1.0.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, CodeRevolution WP Pocket URLs) - [CVE-2023-49175](https://cve.now/CVE-2023-49175.md): WordPress KP Fastest Tawk.to Chat Plugin \<= 1.1.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Kreativo Pro KP Fastest Tawk.to Chat) - [CVE-2023-49174](https://cve.now/CVE-2023-49174.md): WordPress Responsive Lightbox Plugin \<= 2.4.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, dFactory Responsive Lightbox & Gallery) - [CVE-2023-49170](https://cve.now/CVE-2023-49170.md): WordPress Forms by CaptainForm Plugin \<= 2.5.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Forms by CaptainForm – Form Builder for WordPress) - [CVE-2023-49169](https://cve.now/CVE-2023-49169.md): WordPress Ads by datafeedr.com Plugin \<= 1.2.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Ads by datafeedr.com) - [CVE-2023-49165](https://cve.now/CVE-2023-49165.md): WordPress Client Dash Plugin \<= 2.2.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Real Big Plugins Client Dash) - [CVE-2023-48765](https://cve.now/CVE-2023-48765.md): WordPress Email Address Encoder Plugin \<= 1.0.22 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Till Krüss Email Address Encoder) - [CVE-2023-49160](https://cve.now/CVE-2023-49160.md): WordPress Formzu WP Plugin \<= 1.6.6 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Formzu WP) - [CVE-2023-50871](https://cve.now/CVE-2023-50871.md): In JetBrains YouTrack before 2023.3.22268 authorization check for inline comments inside thread replies was missed (CVSS 4.3, JetBrains YouTrack) - [CVE-2023-50870](https://cve.now/CVE-2023-50870.md): In JetBrains TeamCity before 2023.11.1 a CSRF on login was possible (CVSS 4.3, JetBrains TeamCity) - [CVE-2023-46116](https://cve.now/CVE-2023-46116.md): Remote Code Execution via insufficiently sanitized call to shell.openExternal (CVSS 9.3, tutao tutanota) - [CVE-2023-30867](https://cve.now/CVE-2023-30867.md): Apache StreamPark (incubating): Authenticated system users could trigger SQL injection vulnerability (low (no CVSS), Apache Software Foundation Apache StreamPark · org.apache.s…) - [CVE-2023-49898](https://cve.now/CVE-2023-49898.md): Apache StreamPark (incubating): Authenticated system users could trigger remote command execution (low (no CVSS), Apache Software Foundation Apache StreamPark · org.apache.s…) - [CVE-2023-33222](https://cve.now/CVE-2023-33222.md): Stack buffer overflow when reading DESFire card (CVSS 6.8, IDEMIA SIGMA Lite & Lite + · IDEMIA SIGMA Wide +4) - [CVE-2023-33221](https://cve.now/CVE-2023-33221.md): Heap Buffer Overflow when reading DESFire card (CVSS 6.8, IDEMIA SIGMA Lite & Lite + · IDEMIA SIGMA Wide +4) - [CVE-2023-33220](https://cve.now/CVE-2023-33220.md): Stack Buffer Overflow when checking some attributes during retrofit (CVSS 9.1, IDEMIA SIGMA Lite & Lite + · IDEMIA SIGMA Wide +4) - [CVE-2023-33219](https://cve.now/CVE-2023-33219.md): Stack Buffer Overflow when checking retrofit package (CVSS 9.1, IDEMIA SIGMA Lite & Lite + · IDEMIA SIGMA Wide +4) - [CVE-2023-33218](https://cve.now/CVE-2023-33218.md): Stack Buffer Overflow in a binary run at upgrade startup (CVSS 9.1, IDEMIA SIGMA Lite & Lite + · IDEMIA SIGMA Wide +4) - [CVE-2023-6553](https://cve.now/CVE-2023-6553.md): Backup Migration \<= 1.3.7 - Unauthenticated Remote Code Execution (CVSS 9.8, inisev BackupBliss – Backup & Migration with Free Cloud Sto…) - [CVE-2023-33217](https://cve.now/CVE-2023-33217.md): Missing integrity check on upgrade package (CVSS 7.5, IDEMIA SIGMA Lite & Lite + · IDEMIA SIGMA Wide +4) - [CVE-2023-48522](https://cve.now/CVE-2023-48522.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48604](https://cve.now/CVE-2023-48604.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48512](https://cve.now/CVE-2023-48512.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48468](https://cve.now/CVE-2023-48468.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48501](https://cve.now/CVE-2023-48501.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48564](https://cve.now/CVE-2023-48564.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48607](https://cve.now/CVE-2023-48607.md): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48454](https://cve.now/CVE-2023-48454.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48503](https://cve.now/CVE-2023-48503.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48589](https://cve.now/CVE-2023-48589.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48538](https://cve.now/CVE-2023-48538.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48473](https://cve.now/CVE-2023-48473.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48496](https://cve.now/CVE-2023-48496.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48441](https://cve.now/CVE-2023-48441.md): Adobe Experience Manager | Improper Access Control (CWE-284) (CVSS 5.3, Adobe Experience Manager) - [CVE-2023-48591](https://cve.now/CVE-2023-48591.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48505](https://cve.now/CVE-2023-48505.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48567](https://cve.now/CVE-2023-48567.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48550](https://cve.now/CVE-2023-48550.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48575](https://cve.now/CVE-2023-48575.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48581](https://cve.now/CVE-2023-48581.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48624](https://cve.now/CVE-2023-48624.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48488](https://cve.now/CVE-2023-48488.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48622](https://cve.now/CVE-2023-48622.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48532](https://cve.now/CVE-2023-48532.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48457](https://cve.now/CVE-2023-48457.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48565](https://cve.now/CVE-2023-48565.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48452](https://cve.now/CVE-2023-48452.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48481](https://cve.now/CVE-2023-48481.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48614](https://cve.now/CVE-2023-48614.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48451](https://cve.now/CVE-2023-48451.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48617](https://cve.now/CVE-2023-48617.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48527](https://cve.now/CVE-2023-48527.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48543](https://cve.now/CVE-2023-48543.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48583](https://cve.now/CVE-2023-48583.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48464](https://cve.now/CVE-2023-48464.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-47064](https://cve.now/CVE-2023-47064.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48472](https://cve.now/CVE-2023-48472.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48613](https://cve.now/CVE-2023-48613.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48483](https://cve.now/CVE-2023-48483.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48620](https://cve.now/CVE-2023-48620.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48537](https://cve.now/CVE-2023-48537.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48587](https://cve.now/CVE-2023-48587.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48563](https://cve.now/CVE-2023-48563.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48515](https://cve.now/CVE-2023-48515.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48443](https://cve.now/CVE-2023-48443.md): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48490](https://cve.now/CVE-2023-48490.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48517](https://cve.now/CVE-2023-48517.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48595](https://cve.now/CVE-2023-48595.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48586](https://cve.now/CVE-2023-48586.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48551](https://cve.now/CVE-2023-48551.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48559](https://cve.now/CVE-2023-48559.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48588](https://cve.now/CVE-2023-48588.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48618](https://cve.now/CVE-2023-48618.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48605](https://cve.now/CVE-2023-48605.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48459](https://cve.now/CVE-2023-48459.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48533](https://cve.now/CVE-2023-48533.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48445](https://cve.now/CVE-2023-48445.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48448](https://cve.now/CVE-2023-48448.md): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48518](https://cve.now/CVE-2023-48518.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48539](https://cve.now/CVE-2023-48539.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48561](https://cve.now/CVE-2023-48561.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48471](https://cve.now/CVE-2023-48471.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48458](https://cve.now/CVE-2023-48458.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48462](https://cve.now/CVE-2023-48462.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48474](https://cve.now/CVE-2023-48474.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48570](https://cve.now/CVE-2023-48570.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48546](https://cve.now/CVE-2023-48546.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48510](https://cve.now/CVE-2023-48510.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48449](https://cve.now/CVE-2023-48449.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48508](https://cve.now/CVE-2023-48508.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48526](https://cve.now/CVE-2023-48526.md): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48498](https://cve.now/CVE-2023-48498.md): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48460](https://cve.now/CVE-2023-48460.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48465](https://cve.now/CVE-2023-48465.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48536](https://cve.now/CVE-2023-48536.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48568](https://cve.now/CVE-2023-48568.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48621](https://cve.now/CVE-2023-48621.md): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48612](https://cve.now/CVE-2023-48612.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48576](https://cve.now/CVE-2023-48576.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-47065](https://cve.now/CVE-2023-47065.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48542](https://cve.now/CVE-2023-48542.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48453](https://cve.now/CVE-2023-48453.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48608](https://cve.now/CVE-2023-48608.md): Adobe Experience Manager | Improper Input Validation (CWE-20) (CVSS 3.5, Adobe Experience Manager) - [CVE-2023-48528](https://cve.now/CVE-2023-48528.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48476](https://cve.now/CVE-2023-48476.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48544](https://cve.now/CVE-2023-48544.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48579](https://cve.now/CVE-2023-48579.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48592](https://cve.now/CVE-2023-48592.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48571](https://cve.now/CVE-2023-48571.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48584](https://cve.now/CVE-2023-48584.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48500](https://cve.now/CVE-2023-48500.md): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48456](https://cve.now/CVE-2023-48456.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48482](https://cve.now/CVE-2023-48482.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48497](https://cve.now/CVE-2023-48497.md): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48562](https://cve.now/CVE-2023-48562.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48540](https://cve.now/CVE-2023-48540.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48552](https://cve.now/CVE-2023-48552.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48489](https://cve.now/CVE-2023-48489.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48477](https://cve.now/CVE-2023-48477.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48596](https://cve.now/CVE-2023-48596.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48447](https://cve.now/CVE-2023-48447.md): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48525](https://cve.now/CVE-2023-48525.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48623](https://cve.now/CVE-2023-48623.md): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48513](https://cve.now/CVE-2023-48513.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48444](https://cve.now/CVE-2023-48444.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48531](https://cve.now/CVE-2023-48531.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48521](https://cve.now/CVE-2023-48521.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48440](https://cve.now/CVE-2023-48440.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48470](https://cve.now/CVE-2023-48470.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48520](https://cve.now/CVE-2023-48520.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48467](https://cve.now/CVE-2023-48467.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48541](https://cve.now/CVE-2023-48541.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48524](https://cve.now/CVE-2023-48524.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48578](https://cve.now/CVE-2023-48578.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48616](https://cve.now/CVE-2023-48616.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48556](https://cve.now/CVE-2023-48556.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48461](https://cve.now/CVE-2023-48461.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48580](https://cve.now/CVE-2023-48580.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48601](https://cve.now/CVE-2023-48601.md): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48516](https://cve.now/CVE-2023-48516.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48557](https://cve.now/CVE-2023-48557.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48499](https://cve.now/CVE-2023-48499.md): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48519](https://cve.now/CVE-2023-48519.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48480](https://cve.now/CVE-2023-48480.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48478](https://cve.now/CVE-2023-48478.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48553](https://cve.now/CVE-2023-48553.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48555](https://cve.now/CVE-2023-48555.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48493](https://cve.now/CVE-2023-48493.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48574](https://cve.now/CVE-2023-48574.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48598](https://cve.now/CVE-2023-48598.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48585](https://cve.now/CVE-2023-48585.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48486](https://cve.now/CVE-2023-48486.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48619](https://cve.now/CVE-2023-48619.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48450](https://cve.now/CVE-2023-48450.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48530](https://cve.now/CVE-2023-48530.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48507](https://cve.now/CVE-2023-48507.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48611](https://cve.now/CVE-2023-48611.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48549](https://cve.now/CVE-2023-48549.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48569](https://cve.now/CVE-2023-48569.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48547](https://cve.now/CVE-2023-48547.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48463](https://cve.now/CVE-2023-48463.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48529](https://cve.now/CVE-2023-48529.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48469](https://cve.now/CVE-2023-48469.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48455](https://cve.now/CVE-2023-48455.md): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48548](https://cve.now/CVE-2023-48548.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48534](https://cve.now/CVE-2023-48534.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48535](https://cve.now/CVE-2023-48535.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48602](https://cve.now/CVE-2023-48602.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48479](https://cve.now/CVE-2023-48479.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48590](https://cve.now/CVE-2023-48590.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48545](https://cve.now/CVE-2023-48545.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48554](https://cve.now/CVE-2023-48554.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48442](https://cve.now/CVE-2023-48442.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48573](https://cve.now/CVE-2023-48573.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48475](https://cve.now/CVE-2023-48475.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48446](https://cve.now/CVE-2023-48446.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48610](https://cve.now/CVE-2023-48610.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48558](https://cve.now/CVE-2023-48558.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48491](https://cve.now/CVE-2023-48491.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48577](https://cve.now/CVE-2023-48577.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48609](https://cve.now/CVE-2023-48609.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48597](https://cve.now/CVE-2023-48597.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48600](https://cve.now/CVE-2023-48600.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48566](https://cve.now/CVE-2023-48566.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48495](https://cve.now/CVE-2023-48495.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48511](https://cve.now/CVE-2023-48511.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48466](https://cve.now/CVE-2023-48466.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48572](https://cve.now/CVE-2023-48572.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48594](https://cve.now/CVE-2023-48594.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48603](https://cve.now/CVE-2023-48603.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48514](https://cve.now/CVE-2023-48514.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48504](https://cve.now/CVE-2023-48504.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48484](https://cve.now/CVE-2023-48484.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48593](https://cve.now/CVE-2023-48593.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48487](https://cve.now/CVE-2023-48487.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48560](https://cve.now/CVE-2023-48560.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48509](https://cve.now/CVE-2023-48509.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48502](https://cve.now/CVE-2023-48502.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48506](https://cve.now/CVE-2023-48506.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48494](https://cve.now/CVE-2023-48494.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48582](https://cve.now/CVE-2023-48582.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48492](https://cve.now/CVE-2023-48492.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48606](https://cve.now/CVE-2023-48606.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48615](https://cve.now/CVE-2023-48615.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48599](https://cve.now/CVE-2023-48599.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 4.3, Adobe Experience Manager) - [CVE-2023-48523](https://cve.now/CVE-2023-48523.md): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-48485](https://cve.now/CVE-2023-48485.md): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (CVSS 5.4, Adobe Experience Manager) - [CVE-2023-6839](https://cve.now/CVE-2023-6839.md): Due to improper error handling, a REST API resource could expose a server side error containing an internal WSO2 specific package name in th (CVSS 5.3, WSO2 API Manager) - [CVE-2023-6838](https://cve.now/CVE-2023-6838.md): Reflected XSS vulnerability can be exploited by tampering a request parameter in Authentication Endpoint. (CVSS 6.1, WSO2 API Manager · WSO2 Identity Server +1) - [CVE-2023-6837](https://cve.now/CVE-2023-6837.md): Incorrect Authorization in Multiple WSO2 Products via Federated Authentication with JIT Provisioning Leading to User Impersonation (CVSS 8.5, WSO2 API Manager · WSO2 Identity Server +3) - [CVE-2023-48395](https://cve.now/CVE-2023-48395.md): Kaifa Technology WebITR - SQL Injection (CVSS 6.5, Kaifa Technology WebITR) - [CVE-2023-6836](https://cve.now/CVE-2023-6836.md): Multiple WSO2 products have been identified as vulnerable due to an XML External Entity (XXE) attack abuses a widely available but rarely us (CVSS 4.6, WSO2 API Manager · WSO2 API Microgateway +10) - [CVE-2023-48394](https://cve.now/CVE-2023-48394.md): Kaifa Technology WebITR - Arbitrary File Upload (CVSS 8.8, Kaifa Technology WebITR) - [CVE-2023-48393](https://cve.now/CVE-2023-48393.md): Kaifa Technology WebITR - Error Message Leakage (CVSS 4.3, Kaifa Technology WebITR) - [CVE-2023-48392](https://cve.now/CVE-2023-48392.md): Kaifa Technology WebITR - Hard-coded Cryptographic Key (CVSS 9.8, Kaifa Technology WebITR) - [CVE-2023-6835](https://cve.now/CVE-2023-6835.md): Multiple WSO2 products have been identified as vulnerable due to lack of server-side input validation in the Forum feature, API rating could (CVSS 4.3, WSO2 API Manager · WSO2 IoT Server +1) - [CVE-2023-48390](https://cve.now/CVE-2023-48390.md): Multisuns EasyLog web+ - Command Injection (CVSS 9.8, Multisuns EasyLog web+) - [CVE-2023-48389](https://cve.now/CVE-2023-48389.md): Multisuns EasyLog web+ - Path Traversal (CVSS 7.5, Multisuns EasyLog web+) - [CVE-2023-48388](https://cve.now/CVE-2023-48388.md): Multisuns EasyLog web+ - Use of Hard-coded Password (CVSS 9.8, Multisuns EasyLog web+) - [CVE-2023-48387](https://cve.now/CVE-2023-48387.md): TAIWAN-CA(TWCA) JCICSecurityTool - Improper Input Validation (CVSS 8.8, TAIWAN-CA(TWCA) JCICSecurityTool) - [CVE-2023-48384](https://cve.now/CVE-2023-48384.md): ArmorX Global Technology Corporation ArmorX Spam - SQL Injectoin (CVSS 9.8, ArmorX Global Technology ArmorX Spam) - [CVE-2023-48382](https://cve.now/CVE-2023-48382.md): Softnext Mail SQR Expert - Local File Inclusion-2 (CVSS 6.5, Softnext Mail SQR Expert) - [CVE-2023-48381](https://cve.now/CVE-2023-48381.md): Softnext Mail SQR Expert - Local File Inclusion-1 (CVSS 6.5, Softnext Mail SQR Expert) - [CVE-2023-46279](https://cve.now/CVE-2023-46279.md): Apache Dubbo: Bypass deny serialize list check in Apache Dubbo (no CVSS, Apache Software Foundation Apache Dubbo · org.apache.dubbo:…) - [CVE-2023-29234](https://cve.now/CVE-2023-29234.md): Bypass serialize checks in Apache Dubbo (no CVSS, Apache Software Foundation Apache Dubbo · org.apache.dubbo:…) - [CVE-2023-48380](https://cve.now/CVE-2023-48380.md): Softnext Mail SQR Expert - Command Injection (CVSS 7.4, Softnext Mail SQR Expert) - [CVE-2023-48379](https://cve.now/CVE-2023-48379.md): Softnext Mail SQR Expert - Blind Server-Side Request Forgey (SSRF) (CVSS 5.3, Softnext Mail SQR Expert) - [CVE-2023-48378](https://cve.now/CVE-2023-48378.md): Softnext Mail SQR Expert - Path Traversal (CVSS 7.5, Softnext Mail SQR Expert) - [CVE-2023-48376](https://cve.now/CVE-2023-48376.md): SmartStar Software CWS Web-Base - Arbitrary File Upload (CVSS 9.8, SmartStar Software CWS Web-Base) - [CVE-2023-48375](https://cve.now/CVE-2023-48375.md): SmartStar Software CWS Web-Base - Broken Access Control (CVSS 8.8, SmartStar Software CWS Web-Base) - [CVE-2023-48374](https://cve.now/CVE-2023-48374.md): SmartStar Software CWS Web-Base - Use of Hard-coded Credentials (CVSS 6.5, SmartStar Software CWS Web-Base) - [CVE-2023-6827](https://cve.now/CVE-2023-6827.md): Essential Real Estate \<= 4.3.5 - Authenticated (Subscriber+) Arbitrary File Upload (CVSS 7.5, g5theme Essential Real Estate) - [CVE-2023-6826](https://cve.now/CVE-2023-6826.md): E2Pdf \<= 1.20.25 - Authenticated (Administrator+) Arbitrary File Upload (CVSS 7.2, oleksandrz E2Pdf – Export Pdf Tool for WordPress) - [CVE-2023-48373](https://cve.now/CVE-2023-48373.md): ITPison OMICARD EDM 's SMS - Path Traversal (CVSS 7.5, ITPison OMICARD EDM 's SMS) - [CVE-2023-48372](https://cve.now/CVE-2023-48372.md): ITPison OMICARD EDM 's SMS - SQL Injection (CVSS 9.8, ITPison OMICARD EDM 's SMS) - [CVE-2023-48371](https://cve.now/CVE-2023-48371.md): ITPison OMICARD EDM 's SMS - Arbitrary File Upload (CVSS 9.8, ITPison OMICARD EDM 's SMS) - [CVE-2023-50715](https://cve.now/CVE-2023-50715.md): User accounts disclosed to unauthenticated actors on the LAN (CVSS 4.3, home-assistant core · homeassistant) - [CVE-2023-36878](https://cve.now/CVE-2023-36878.md): Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability (CVSS 4.3, Microsoft Edge) - [CVE-2023-6832](https://cve.now/CVE-2023-6832.md): Business Logic Errors in microweber/microweber (CVSS 6.0, microweber/microweber) - [CVE-2023-6831](https://cve.now/CVE-2023-6831.md): Path Traversal: '\\..\\filename' in mlflow/mlflow (CVSS 8.1, mlflow/mlflow · mlflow) - [CVE-2023-40954](https://cve.now/CVE-2023-40954.md): A SQL injection vulnerability in Grzegorz Marczynski Dynamic Progress Bar (aka web\_progress) v. (no CVSS) - [CVE-2023-42183](https://cve.now/CVE-2023-42183.md): lockss-daemon (aka Classic LOCKSS Daemon) before 1.77.3 performs post-Unicode normalization, which may allow bypass of intended access restr (CVSS 5.3) - [CVE-2023-48050](https://cve.now/CVE-2023-48050.md): SQL injection vulnerability in Cams Biometrics Zkteco, eSSL, Cams Biometrics Integration Module with HR Attendance (aka odoo-biometric-atten (no CVSS) - [CVE-2023-50089](https://cve.now/CVE-2023-50089.md): A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. (no CVSS) - [CVE-2023-50469](https://cve.now/CVE-2023-50469.md): Shenzhen Libituo Technology Co., Ltd LBT-T300-T310 v2.2.2.6 was discovered to contain a buffer overflow via the ApCliEncrypType parameter at (no CVSS) - [CVE-2023-50917](https://cve.now/CVE-2023-50917.md): MajorDoMo (aka Major Domestic Module) before 0662e5e allows command execution via thumb.php shell metacharacters. (no CVSS) - [CVE-2023-50918](https://cve.now/CVE-2023-50918.md): app/Controller/AuditLogsController.php in MISP before 2.4.182 mishandles ACLs for audit logs. (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2023-12-15 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.