Vulnerabilities

TI-2023-23771 CVE-2023-44245 · GHSA-p6fg-9q8x-647w

WordPress Contractor Contact Form Website to Workflow Tool Plugin <= 4.0.0 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Leap Contractor Contact Form Website to Workflow Tool plugin <= 4.0.0 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00406 Published 2023-10-02 No fix listed CWE-79

TI-2023-14007 CVE-2023-29758 · GHSA-68x9-xqgp-fp8j

An issue found in Blue Light Filter v.1.5.5 for Android allows unauthorized apps to cause…

MEDIUM 58

An issue found in Blue Light Filter v.1.5.5 for Android allows unauthorized apps to cause a persistent denial of service by manipulating the SharedPreference files.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00327 Published 2023-06-09 No fix listed CWE-863

TI-2023-14006 CVE-2023-29757 · GHSA-hj2h-4jxv-fcgr

An issue found in Blue Light Filter v.1.5.5 for Android allows unauthorized apps to cause…

HIGH 69

An issue found in Blue Light Filter v.1.5.5 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the SharedPreference files.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00398 Published 2023-06-09 No fix listed CWE-922

TI-2021-20075 CVE-2021-44466 · GHSA-57mh-5gf7-8mcg

Incorrect permission assignment in Bitmask Riseup VPN 0.21.6

LOW 32

Bitmask Riseup VPN 0.21.6 contains a local privilege escalation flaw due to improper access controls.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00412 Published 2021-12-30 No fix listed CWE-732

Vulnerabilities

Filters

WordPress Contractor Contact Form Website to Workflow Tool Plugin <= 4.0.0 is vulnerable to Cross Site Scripting (XSS)

An issue found in Blue Light Filter v.1.5.5 for Android allows unauthorized apps to cause…

An issue found in Blue Light Filter v.1.5.5 for Android allows unauthorized apps to cause…

Incorrect permission assignment in Bitmask Riseup VPN 0.21.6