{"items":[{"id":"CVE-2024-29833","published":"2024-03-26T15:30:28.269Z","updated":"2024-08-02T16:46:09.578Z","title":"WordPress Photo Gallery Plugin <= 1.8.21 Stored Cross Site Scripting in UploadHandler","severity":"MEDIUM","score":5.4,"vendor":"10Web","product":"PhotoGallery","kev":false,"epss":0.00431,"kevAdded":null},{"id":"CVE-2024-29810","published":"2024-03-26T15:28:58.519Z","updated":"2024-08-02T16:44:14.472Z","title":"WordPress Photo Gallery Plugin <= 1.8.21 Reflected Cross Site Scripting in editimage_bwg thumb_url","severity":"MEDIUM","score":5.4,"vendor":"10Web","product":"PhotoGallery","kev":false,"epss":0.00412,"kevAdded":null},{"id":"CVE-2024-29809","published":"2024-03-26T15:27:56.092Z","updated":"2024-08-02T16:39:55.380Z","title":"WordPress Photo Gallery Plugin <= 1.8.21 Reflected Cross Site Scripting in editimage_bwg image_url","severity":"MEDIUM","score":5.4,"vendor":"10Web","product":"PhotoGallery","kev":false,"epss":0.00412,"kevAdded":null},{"id":"CVE-2024-29808","published":"2024-03-26T15:26:34.537Z","updated":"2024-08-02T16:42:56.230Z","title":"WordPress Photo Gallery Plugin <= 1.8.21 Reflected Cross Site Scripting in editimage_bwg image_id","severity":"MEDIUM","score":5.4,"vendor":"10Web","product":"PhotoGallery","kev":false,"epss":0.00412,"kevAdded":null},{"id":"CVE-2024-29832","published":"2024-03-26T15:24:24.084Z","updated":"2024-08-02T16:41:57.722Z","title":"WordPress Photo Gallery Plugin <= 1.8.21 Unauthenticated Reflected Cross Site Scripting in GalleryBox current_url","severity":"MEDIUM","score":6.1,"vendor":"10Web","product":"PhotoGallery","kev":false,"epss":0.00446,"kevAdded":null},{"id":"CVE-2023-41137","published":"2023-11-09T15:07:51.211Z","updated":"2024-10-28T20:48:57.519Z","title":"Symmetric encryption used to protect messages between the AppsAnywhere server and client can be broken by reverse engineering the client and used to…","severity":"HIGH","score":8,"vendor":"AppsAnywhere","product":"AppsAnywhere Client","kev":false,"epss":0.00341,"kevAdded":null},{"id":"CVE-2023-41138","published":"2023-11-09T15:05:24.035Z","updated":"2024-09-04T13:38:11.911Z","title":"The AppsAnywhere macOS client-privileged helper can be tricked into executing arbitrary commands with elevated permissions by a local user process.","severity":"HIGH","score":7.5,"vendor":"AppsAnywhere","product":"AppsAnywhere Client","kev":false,"epss":0.00175,"kevAdded":null},{"id":"CVE-2021-40186","published":"2022-05-31T18:09:43.000Z","updated":"2024-08-04T02:27:31.884Z","title":"DNN CMS Server-Side Request Forgery (SSRF)","severity":"MEDIUM","score":6.5,"vendor":"DNNSoftware","product":"DNN Platform","kev":false,"epss":0.0115,"kevAdded":null},{"id":"CVE-2022-22690","published":"2022-01-18T16:52:21.650Z","updated":"2024-09-17T04:08:50.406Z","title":"Umbraco Remote ApplicationURL Overwrite","severity":"HIGH","score":8.6,"vendor":"Umbraco","product":"Umbraco CMS","kev":false,"epss":0.01138,"kevAdded":null},{"id":"CVE-2022-22691","published":"2022-01-18T16:52:20.429Z","updated":"2024-09-16T23:46:59.483Z","title":"Umbraco Password Reset URL Poison","severity":"MEDIUM","score":6.8,"vendor":"Umbraco","product":"Umbraco CMS","kev":false,"epss":0.01016,"kevAdded":null},{"id":"CVE-2021-43991","published":"2021-12-03T14:42:31.000Z","updated":"2024-08-04T04:10:17.117Z","title":"Persistent XSS via Avatar Upload in Kentico Xperience CMS","severity":"MEDIUM","score":6.8,"vendor":"Kentico","product":"Kentico Xperience XMS","kev":false,"epss":0.00563,"kevAdded":null},{"id":"CVE-2021-43408","published":"2021-11-19T15:41:32.539Z","updated":"2024-09-17T01:37:04.343Z","title":"Duplicate Post WordPress Plugin SQL Injection Vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Copy Delete Posts","product":"Duplicate Post WordPress Plugin","kev":false,"epss":0.09657,"kevAdded":null},{"id":"CVE-2021-43409","published":"2021-11-19T15:39:00.854Z","updated":"2024-09-17T00:11:29.060Z","title":"WPO365 | LOGIN - Wordpress Plugin Persistent Cross-Site Scripting","severity":"CRITICAL","score":9.3,"vendor":"wpo365.com","product":"WordPress + Microsoft Office 365 / Azure AD | LOGIN","kev":false,"epss":0.00968,"kevAdded":null}]}