CVE-2023-2318

MarkText DOM-Based Cross-site Scripting leading to Remote Code Execution

DOM-based XSS in src/muya/lib/contentState/pasteCtrl.js in MarkText 0.17.1 and before on Windows, Linux and macOS allows arbitrary JavaScript code to run in the context of MarkText main window. This vulnerability can be exploited if a user copies text from a malicious webpage and paste it into MarkText.

CVSS 3.1 · 8.6 High EPSS < 1% KEV · Not listed

Vendors

Apple Linux Marktext and 1 more

Products

Macos Linux Kernel Marktext and 1 more

CVE-2023-2317

Typora DOM-Based Cross-site Scripting leading to Remote Code Execution

DOM-based XSS in updater/update.html in Typora before 1.6.7 on Windows and Linux allows a crafted markdown file to run arbitrary JavaScript code in the context of Typora main window via loading typora://app/typemark/updater/update.html in <embed> tag. This vulnerability can be exploited if a user opens a malicious markdown file in Typora, or copies text from a malicious webpage and paste it into Typora.

CVSS 3.1 · 8.6 High EPSS 2.4% KEV · Not listed

Vendors

Linux Microsoft Typora

Products

Linux Kernel Windows Typora

CVE-2023-2316

Typora Local File Disclosure

Improper path handling in Typora before 1.6.7 on Windows and Linux allows a crafted webpage to access local files and exfiltrate them to remote web servers via "typora://app/<absolute-path>". This vulnerability can be exploited if a user opens a malicious markdown file in Typora, or copies text from a malicious webpage and paste it into Typora.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed

Vendors

Linux Microsoft Typora

Products

Linux Kernel Windows Typora

CVE-2023-2315

Path Traversal in OpenCart versions 4.0.0.0 to 4.0.2.2

Path Traversal in OpenCart versions 4.0.0.0 to 4.0.2.2 allows an authenticated user with access/modify privilege on the Log component to empty out arbitrary files on the server

CVSS 3.1 · 8.1 High EPSS 1.0% KEV · Not listed

Vendors

Opencart

Products

Opencart

CVE-2023-2309

wpForo Forum < 2.1.9 - Reflected Cross-Site Scripting

The wpForo Forum WordPress plugin before 2.1.9 does not escape some request parameters while in debug mode, leading to a Reflected Cross-Site Scripting vulnerability.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Gvectors

Products

Wpforo Forum

CVE-2023-2294

UCMS Column Configuration saddpost.php cross site scripting

A vulnerability was found in UCMS 1.6.0. It has been classified as problematic. This affects an unknown part of the file saddpost.php of the component Column Configuration. The manipulation of the argument strorder leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-227481 was assigned to this vulnerability.

CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed

Vendors

Ucms Project

Products

Ucms

CVE-2023-2293

SourceCodester Purchase Order Management System cross site scripting

A vulnerability was found in SourceCodester Purchase Order Management System 1.0. It has been classified as problematic. This affects an unknown part of the file classes/Master.php?f=save_item. The manipulation of the argument description with the input <script>alert(document.cookie)</script> leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-227463.

CVSS 3.1 · 2.4 Low EPSS < 1% KEV · Not listed

Vendors

Purchase Order Management System Project

Products

Purchase Order Management System

CVE-2023-2272

Tiempo.com <= 0.1.2 - Reflected XSS

The Tiempo.com WordPress plugin through 0.1.2 does not sanitise and escape the page parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Tiempo

Products

Tiempo

CVE-2023-2271

Tiempo.com <= 0.1.2 - Shortcode Deletion via CSRF

The Tiempo.com WordPress plugin through 0.1.2 does not have CSRF check when deleting its shortcode, which could allow attackers to make logged in admins delete arbitrary shortcode via a CSRF attack

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Tiempo

Products

Tiempo

CVE-2023-2270

Local privilege escalation

The Netskope client service running with NT\SYSTEM privileges accepts network connections from localhost to start various services and execute commands. The connection handling function of Netskope client before R100 in this service utilized a relative path to download and unzip configuration files on the machine. This relative path provided a way for local users to write arbitrary files at a location which is accessible to only higher privileged users. This can be exploited by local users to execute code with NT\SYSTEM privileges on the end machine.

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed

Vendors

Microsoft Netskope

Products

Windows Netskope

CVE-2023-2268

Plane v0.7.1 - Unauthorized access to files

Plane version 0.7.1 allows an unauthenticated attacker to view all stored server files of all users.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Plane

Products

Plane

CVE-2023-2267

Improper input validation could lead to reflection injection attacks

An Improper Input Validation vulnerability in Schweitzer Engineering Laboratories SEL-411L could allow an attacker to perform reflection attacks against an authorized and authenticated user. See product Instruction Manual Appendix A dated 20230830 for more details.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Selinc

Products

Sel-411l Sel-411l Firmware

CVE-2023-2266

Improper neutralization of input during web page generation could lead to cross-site scripting based attacks

An Improper neutralization of input during web page generation in the Schweitzer Engineering Laboratories SEL-411L could allow an attacker to generate cross-site scripting based attacks against an authorized and authenticated user. See product Instruction Manual Appendix A dated 20230830 for more details.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Selinc

Products

Sel-411l Sel-411l Firmware

CVE-2023-2265

Improper restriction of rendered UI layers or frames could lead to clickjacking attack

An Improper Restriction of Rendered UI Layers or Frames in the Schweitzer Engineering Laboratories SEL-411L could allow an unauthenticated attacker to perform clickjacking based attacks against an authenticated and authorized user. See product Instruction Manual Appendix A dated 20230830 for more details.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Selinc

Products

Sel-411l Sel-411l Firmware

CVE-2023-2263

Rockwell Automation Kinetix 5700 DC Bus Power Supply Series A – CIP Message Attack Could Cause Denial-Of-Service

The Rockwell Automation Kinetix 5700 DC Bus Power Supply Series A is vulnerable to CIP fuzzing.  The new ENIP connections cannot be established if impacted by this vulnerability,  which prohibits operational capabilities of the device resulting in a denial-of-service attack.

CVSS 3.1 · 7.5 High EPSS 1.2% KEV · Not listed

Vendors

Rockwellautomation

Products

Kinetix 5700 Kinetix 5700 Firmware

CVE-2023-2262

Rockwell Automation Select Logix Communication Modules Vulnerable to Email Object Buffer Overflow

A buffer overflow vulnerability exists in the Rockwell Automation select 1756-EN* communication devices. If exploited, a threat actor could potentially leverage this vulnerability to perform a remote code execution. To exploit this vulnerability, a threat actor would have to send a maliciously crafted CIP request to device.

CVSS 3.1 · 9.8 Critical EPSS 1.3% KEV · Not listed

Vendors

Rockwellautomation

Products

1756-en2f Series A 1756-en2f Series A Firmware 1756-en2f Series B and 63 more

CVE-2023-2255

Remote documents loaded without prompt via IFrame

Improper access control in editor components of The Document Foundation LibreOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the affected versions of LibreOffice documents that used "floating frames" linked to external files, would load the contents of those frames without prompting the user for permission to do so. This was inconsistent with the treatment of other linked content in LibreOffice. This issue affects: The Document Foundation LibreOffice 7.4 versions prior to 7.4.7; 7.5 versions prior to 7.5.3.

CVSS 3.1 · 5.3 Medium EPSS 2.2% KEV · Not listed

Vendors

Debian Libreoffice Redhat

Products

Debian Linux Libreoffice Enterprise Linux

CVE-2023-2254

Ko-fi Button < 1.3.3 - Admin+ Stored XSS

The Ko-fi Button WordPress plugin before 1.3.3 does not properly some of its settings, which could allow high-privilege users to perform Stored Cross-Site Scripting (XSS) attacks even when the unfiltered_html capability is disallowed (for example in multisite setup), and we consider it a low risk.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Ko-fi

Products

Ko-fi Button

CVE-2023-2244

SourceCodester Online Eyewear Shop GET Parameter update_status.php sql injection

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. This affects an unknown part of the file /admin/orders/update_status.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-227229 was assigned to this vulnerability.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed

Vendors

Oretnom23

Products

Online Eyewear Shop

CVE-2023-2243

SourceCodester Complaint Management System POST Parameter registration.php sql injection

A vulnerability was found in SourceCodester Complaint Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file users/registration.php of the component POST Parameter Handler. The manipulation of the argument fullname leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-227228.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed

Vendors

Complaint Management System Project

Products

Complaint Management System