2023 CVE Vulnerabilities

31,510 CVEs published in 2023.

CVE IDSeverityCVSSDescription
CVE-2023-31061HIGH8.8Repetier Server through 1.4.10 does not have CSRF protection.
CVE-2023-31060CRITICAL9.8Repetier Server through 1.4.10 executes as SYSTEM. This can be leveraged in conjunction with CVE-2023-31059 for full com...
CVE-2023-31059HIGH7.5Repetier Server through 1.4.10 allows ..%5c directory traversal for reading files that contain credentials, as demonstra...
CVE-2023-31056MEDIUM6.5CloverDX before 5.17.3 writes passwords to the audit log in certain situations, if the audit log is enabled and single s...
CVE-2023-23753CRITICAL9.8The 'Visforms Base Package for Joomla 3' extension is vulnerable to SQL Injection as concatenation is used to construct ...
CVE-2023-31043HIGH7.5EnterpriseDB EDB Postgres Advanced Server (EPAS) before 14.6.0 logs unredacted passwords in situations where optional pa...
CVE-2023-2246CRITICAL9.8A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulne...
CVE-2023-23879HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Nicolas Zeh PHP Execution plugin <= 1.0.0 versions.
CVE-2023-22686HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in TriniTronic Nice PayPal Button Lite plugin <= 1.3.5 versions.
CVE-2023-27614MEDIUM4.8Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Ian Haycox Motor Racing League plugin <= 1.9.9 versions.
CVE-2023-27425MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in James Irving-Swift Electric Studio Client Login plugin...
CVE-2023-25451MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPChill CPO Content Types plugin <= 1.1.0 versions.
CVE-2023-23832MEDIUM5.4Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in TC Ultimate WP Query Search Filter plugin <= 1.0.10 ver...
CVE-2023-23827MEDIUM5.4Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Google Maps v3 Shortcode plugin <= 1.2.1 versions.
CVE-2023-23817MEDIUM5.4Auth. (contrinbutor+) Cross-Site Scripting (XSS) vulnerability in WebArea | Vera Nedvyzhenko Simple PDF Viewer plugin <=...
CVE-2023-23816MEDIUM4.8Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Twardes Sitemap Index plugin <= 1.2.3 versions.
CVE-2023-23806MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Davinder Singh Custom Settings plugin <= 1.0 versions.
CVE-2023-23717MEDIUM5.4Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in George Gecewicz Portfolio Slideshow plugin <= 1.13.0 ve...
CVE-2023-24404MEDIUM6.1Reflected Cross-Site Scripting (XSS) vulnerability in VryaSage Marketing Performance plugin <= 2.0.0 versions.
CVE-2023-24386MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Karishma Arora AI Contact Us Form plugin <= 1.0 versio...
CVE-2023-22718MEDIUM6.1Reflected Cross-Site Scripting (XSS) vulnerability in Jason Lau User Meta Manager plugin <= 3.4.9 versions.
CVE-2023-22698MEDIUM5.4Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Jason Bobich Theme Blvd Responsive Google Maps plugin <...
CVE-2023-1875MEDIUM5.4Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12.
CVE-2023-2245MEDIUM6.3A vulnerability was found in hansunCMS 1.4.3. It has been declared as critical. This vulnerability affects unknown code ...
CVE-2023-2244CRITICAL9.8A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. This affects an...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now