2023 CVE Vulnerabilities

31,509 CVEs published in 2023.

CVE IDSeverityCVSSDescription
CVE-2023-35877MEDIUM6.1Cross-Site Request Forgery (CSRF) vulnerability in Vadym K. Extra User Details allows Stored XSS.This issue affects Extr...
CVE-2023-6101HIGH7.5A vulnerability, which was classified as problematic, has been found in Maiwei Safety Production Control Platform 4.1. T...
CVE-2023-6100MEDIUM5.3A vulnerability classified as problematic was found in Maiwei Safety Production Control Platform 4.1. This vulnerability...
CVE-2023-6099CRITICAL9.8A vulnerability classified as critical has been found in Shenzhen Youkate Industrial Facial Love Cloud Payment System up...
CVE-2023-48068MEDIUM5.4DedeCMS v6.2 was discovered to contain a Cross-site Scripting (XSS) vulnerability via spec_add.php.
CVE-2023-48063MEDIUM4.3An issue was discovered in dreamer_cms 4.1.3. There is a CSRF vulnerability that can delete a theme project via /admin/c...
CVE-2023-48060HIGH8.8Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/task/add
CVE-2023-48058HIGH8.8Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/task/run
CVE-2023-6098MEDIUM6.1An XSS vulnerability has been discovered in ICS Business Manager affecting version 7.06.0028.7066. A remote attacker cou...
CVE-2023-6097HIGH8.8A SQL injection vulnerability has been found in ICS Business Manager, affecting version 7.06.0028.7089. This vulnerabili...
CVE-2023-6104——Rejected reason: The CVE Record was published by accident.
CVE-2023-46092MEDIUM6.1Cross-Site Request Forgery (CSRF) vulnerability in LionScripts.Com Webmaster Tools allows Stored XSS.This issue affects ...
CVE-2023-40335MEDIUM6.1Cross-Site Request Forgery (CSRF) vulnerability in Jeremy O'Connell Cleverwise Daily Quotes allows Stored XSS.This issue...
CVE-2023-47801MEDIUM4.7An issue was discovered in Click Studios Passwordstate before 9811. Existing users (Security Administrators) could use t...
CVE-2023-5747HIGH8.8Bashis, a Security Researcher at IPVM has found a flaw that allows for a remote code execution during the installation o...
CVE-2023-5741MEDIUM5.4The POWR plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'powr-powr-pack' shortcode i...
CVE-2023-5037HIGH7.2badmonkey, a Security Researcher has found a flaw that allows for a authenticated command injection on the camera. An at...
CVE-2023-4775MEDIUM5.4The Advanced iFrame plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'advanced_iframe' shortcod...
CVE-2023-46201MEDIUM6.1Cross-Site Request Forgery (CSRF) vulnerability in Jeff Sherk Auto Login New User After Registration allows Stored XSS.T...
CVE-2023-47652MEDIUM6.1Cross-Site Request Forgery (CSRF) vulnerability in Lucian Apostol Auto Affiliate Links allows Stored XSS.This issue affe...
CVE-2023-47516MEDIUM6.1Cross-Site Request Forgery (CSRF) vulnerability in Stark Digital Category Post List Widget allows Stored XSS.This issue ...
CVE-2023-46634MEDIUM6.1Cross-Site Request Forgery (CSRF) vulnerability in phoeniixx Custom My Account for Woocommerce allows Cross-Site Scripti...
CVE-2023-47163HIGH7.5Remarshal prior to v0.17.1 expands YAML alias nodes unlimitedly, hence Remarshal is vulnerable to Billion Laughs Attack....
CVE-2023-46207HIGH7.5Server-Side Request Forgery (SSRF) vulnerability in StylemixThemes Motors – Car Dealer, Classifieds & Listing.This issue...
CVE-2023-41239MEDIUM6.5Server-Side Request Forgery (SSRF) vulnerability in Blubrry PowerPress Podcasting plugin by Blubrry.This issue affects P...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now