Author: Angelo Barbosa

CVE-2023-49813 | J.N. Breetvelt WP Photo Album Plus Plugin up to 8.5.02.005 on WordPress cross site scripting

A vulnerability was found in J.N. Breetvelt WP Photo Album Plus Plugin up to 8.5.02.005 on WordPress. It has been classified as problematic. This affects an unknown part. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2023-49813. It is possible to initiate the attack remotely. There is no exploit...

Read More

CVE-2023-49771 | Peter Raschendorfer Smart External Link Click Monitor Plugin up to 5.0.2 on WordPress cross site scripting

A vulnerability was found in Peter Raschendorfer Smart External Link Click Monitor Plugin up to 5.0.2 on WordPress and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2023-49771. The attack may be launched remotely. There is no exploit...

Read More

CVE-2023-6367 | Progress WhatsUp Gold up to 2022.1 Role cross site scripting

A vulnerability has been found in Progress WhatsUp Gold up to 2022.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Role Handler. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2023-6367. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected...

Read More

CVE-2023-6366 | Progress WhatsUp Gold up to 2022.1 Alert Center cross site scripting

A vulnerability, which was classified as problematic, was found in Progress WhatsUp Gold up to 2022.1. Affected is an unknown function of the component Alert Center. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2023-6366. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected...

Read More

CVE-2023-6595 | Progress WhatsUp Gold up to 2022.1 API Endpoint authorization

A vulnerability, which was classified as problematic, has been found in Progress WhatsUp Gold up to 2022.1. This issue affects some unknown processing of the component API Endpoint. The manipulation leads to missing authorization. The identification of this vulnerability is CVE-2023-6595. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected...

Read More