Veille CVE

Semaine du 20 mars au 26 mars 2023

2 CVE sur 7

Critique 1 Élevée 4 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2023-28666 5.4 Moyenne

    InPost Gallery WordPress Plugin · Pluginus inpost gallery

    The InPost Gallery WordPress plugin, in versions < 2.2.2, is affected by a reflected cross-site scripting vulnerability in the 'imgurl' parameter to the add_inpost_gallery_slide_item action, which can only be triggered by an authenticated user.

  2. CVE-2023-28665 5.4 Moyenne

    Woo Bulk Price Update WordPress Plugin · Technocrackers bulk price update for woocommerce

    The Woo Bulk Price Update WordPress plugin, in versions < 2.2.2, is affected by a reflected cross-site scripting vulnerability in the 'page' parameter to the techno_get_products action, which can only be triggered by an authenticated user.