# CVEs published 2024-09-01

9 CVEs were published on September 1, 2024: 3 critical, 0 high. Days are UTC.

- [CVE-2024-45270](https://cve.now/CVE-2024-45270.md): WordPress plugin "Carousel Slider" provided by Sayful Islam contains a cross-site request forgery vulnerability on Hero image selection feat (CVSS 4.3, Sayful Islam Carousel Slider)
- [CVE-2024-45269](https://cve.now/CVE-2024-45269.md): WordPress plugin "Carousel Slider" provided by Sayful Islam contains a cross-site request forgery vulnerability on Carousel image selection (CVSS 4.3, Sayful Islam Carousel Slider)
- [CVE-2024-8370](https://cve.now/CVE-2024-8370.md): Grocy SVG File Upload recipepictures cross site scripting (CVSS 5.3, Grocy)
- [CVE-2024-5053](https://cve.now/CVE-2024-5053.md): Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder \<= 5.1.18 - Missing Authorization to Authenticated (Subscriber+) Mailchimp Integration Modification (CVSS 4.2, techjewel Fluent Forms – Customizable Contact Forms, Survey…)
- [CVE-2024-8368](https://cve.now/CVE-2024-8368.md): code-projects Hospital Management System Login index.php sql injection (CVSS 6.9, code-projects Hospital Management System)
- [CVE-2024-8367](https://cve.now/CVE-2024-8367.md): HM Courts & Tribunals Service Probate Back Office Markdown NotificationService.java injection (CVSS 5.1, HM Courts & Tribunals Service Probate Back Office)
- [CVE-2024-45508](https://cve.now/CVE-2024-45508.md): HTMLDOC before 1.9.19 has an out-of-bounds write in parse\_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a w (CVSS 9.8)
- [CVE-2024-45509](https://cve.now/CVE-2024-45509.md): In MISP through 2.4.196, app/Controller/BookmarksController.php does not properly restrict access to bookmarks data in the case where the us (CVSS 9.8)
- [CVE-2024-45522](https://cve.now/CVE-2024-45522.md): Linen before cd37c3e does not verify that the domain is linen.dev or www.linen.dev when resetting a password. (CVSS 9.1)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-09-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.