CVEs published June 22, 2024
22 CVEs were published on June 22, 2024: 1 critical, 5 high.
- Published
- 22
- Critical
- 1
- High
- 5
- Medium
- 13
- Low
- 3
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- opencart/opencart
- 6
- Apache Software Foundation Apache Allura
- 1
- ARMember Premium – Membership Plugin, Content Restriction,…
- 1
- BricksBuilder Bricks Builder
- 1
- fusionplugin Table Addons for Elementor
- 1
- gradio-app/gradio · gradio
- 1
- IBM Security SOAR
- 1
- itsourcecode Online Food Ordering System
- 1
- Online Booking & Scheduling Calendar for WordPress by vcita
- 1
- parisneo/lollms · lollms
- 1
Critical 1
High 5
- CVE-2024-38319IBM Security SOAR code executionIBM Security SOAR
- CVE-2024-3593UberMenu <= 3.8.3 - Cross-Site Request Forgery to Settings ResetSevenSpark UberMenu
- CVE-2024-21514This affects versions of the package opencart/opencart from 0.0.0.opencart/opencart
- CVE-2024-21518This affects versions of the package opencart/opencart from 4.0.0.0.opencart/opencart
- CVE-2024-5791Appointment Booking and Online Scheduling <= 4.4.2 - Missing Authorization to Unauthenticated Stored Cross-Site ScriptingOnline Booking & Scheduling Calendar for WordPress by vcita
Medium, low and unrated 16
- CVE-2024-6253itsourcecode Online Food Ordering System purchase.php sql injectionitsourcecode Online Food Ordering System
- CVE-2024-6252Zorlan SkyCaiji Task cross site scriptingZorlan SkyCaiji
- CVE-2024-6251playSMS New Phonebook cross site scriptingplaySMS
- CVE-2024-38379Apache Allura: Stored authenticated XSSApache Software Foundation Apache Allura
- CVE-2024-5596ARMember Premium <= 6.7 - Cross-Site Request Forgery via multiple functionsARMember Premium – Membership Plugin, Content Restriction,…
- CVE-2024-4940Open Redirect in gradio-app/gradiogradio-app/gradio · gradio
- CVE-2024-21516This affects versions of the package opencart/opencart from 4.0.0.0 and before 4.1.0.0.opencart/opencart
- CVE-2024-21519This affects versions of the package opencart/opencart from 4.0.0.0.opencart/opencart
- CVE-2024-21517This affects versions of the package opencart/opencart from 4.0.0.0.opencart/opencart
- CVE-2024-21515This affects versions of the package opencart/opencart from 4.0.0.0.opencart/opencart
- CVE-2024-4874Bricks Builder <= 1.9.8 - Insecure Direct Object ReferenceBricksBuilder Bricks Builder
- CVE-2024-5965Mosaic <= 1.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Shortcodewildweblab Mosaic
- CVE-2024-5966Grey Opaque <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Download-Button Shortcodeppfeufer Grey Opaque
- CVE-2024-4313Table Addons for Elementor <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id Parameterfusionplugin Table Addons for Elementor
- CVE-2024-2484Orbit Fox by ThemeIsle <= 2.10.34 - Authenticated (Contributor+) Stored Cross-Site Scripting via Services and Post Type Grid Widgetsthemeisle Orbit Fox: Duplicate Page, Menu Icons, SVG Suppor…
- CVE-2024-5346Flatsome | Multi-Purpose Responsive WooCommerce Theme <= 3.18.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple ShortcodesUX-themes Flatsome