Browse CVEs

HIGH 8.8 CVE-2023-36237 Cross Site Request Forgery vulnerability in Bagisto before v.1.5.1 allows an attacker to execute arbitrary code via a crafted HTML script. Bagisto 1.5.1+ Fix from $1,9502024-02-26 CRITICAL 9.8 CVE-2023-51210 SQL injection vulnerability in Webkul Bundle Product 6.0.1 allows a remote attacker to execute arbitrary code via the id_product parameters in the Up… Bundle Product No fix yet Fix from $2,3002024-01-23 MEDIUM 6.5 CVE-2023-36235 An issue in webkul qloapps before v1.6.0 allows an attacker to obtain sensitive information via the id_order parameter. Qloapps 1.6.0+ Fix from $1,6002024-01-17 MEDIUM 5.4 CVE-2023-37636 A stored cross-site scripting (XSS) vulnerability in UVDesk Community Skeleton v1.1.1 allows attackers to execute arbitrary web scripts or HTML via a… Uvdesk No fix yet Fix from $1,6002023-10-23 HIGH 7.8 CVE-2023-39147 An arbitrary file upload vulnerability in Uvdesk 1.1.3 allows attackers to execute arbitrary code via uploading a crafted image file. Uvdesk No fix yet Fix from $1,9502023-08-01 HIGH 8.8 CVE-2023-33570 Bagisto v1.5.1 is vulnerable to Server-Side Template Injection (SSTI). Bagisto No fix yet Fix from $1,9502023-06-28 HIGH 7.5 CVE-2023-36284 An unauthenticated Time-Based SQL injection found in Webkul QloApps 1.6.0 via GET parameter date_from, date_to, and id_product allows a remote attack… Qloapps No fix yet Fix from $1,9502023-06-23 MEDIUM 6.1 CVE-2023-36287 An unauthenticated Cross-Site Scripting (XSS) vulnerability found in Webkul QloApps 1.6.0 allows an attacker to obtain a user's session cookie and th… Qloapps No fix yet Fix from $1,6002023-06-23 MEDIUM 6.1 CVE-2023-36289 An unauthenticated Cross-Site Scripting (XSS) vulnerability found in Webkul QloApps 1.6.0 allows an attacker to obtain a user's session cookie and th… Qloapps No fix yet Fix from $1,6002023-06-23 MEDIUM 5.4 CVE-2023-36288 An unauthenticated Cross-Site Scripting (XSS) vulnerability found in Webkul QloApps 1.6.0 allows an attacker to obtain a user's session cookie and th… Qloapps No fix yet Fix from $1,6002023-06-23 MEDIUM 5.4 CVE-2023-2925 A vulnerability, which was classified as problematic, was found in Webkul krayin crm 1.2.4. This affects an unknown part of the file /admin/contacts/… Krayin Crm No fix yet Fix from $1,6002023-05-27 MEDIUM 6.1 CVE-2023-30256EPSS 9% Cross Site Scripting vulnerability found in Webkil QloApps v.1.5.2 allows a remote attacker to obtain sensitive information via the back and email_cr… Qloapps No fix yet Fix from $1,6002023-05-11 MEDIUM 6.1 CVE-2021-41924 Webkul krayin crm before 1.2.2 is vulnerable to Cross Site Scripting (XSS). Krayin 1.2.2+ Fix from $1,6002022-06-21 HIGH 8.8 CVE-2019-16403 In Webkul Bagisto before 0.1.5, the functionalities for customers to change their own values (such as address, review, orders, etc.) can also be mani… Bagisto 0.1.5+ Fix from $1,9502019-09-18 HIGH 8.8 CVE-2019-14933 Bagisto 0.1.5 allows CSRF under /admin URIs. Bagisto No fix yet Fix from $1,9502019-08-11 MEDIUM 5.0 CVE-2010-1659EPSS 14% Directory traversal vulnerability in the Ultimate Portfolio (com_ultimateportfolio) component 1.0 for Joomla! allows remote attackers to read arbitra… Com Ultimateportfolio No fix yet Fix from $1,6002010-05-03