https://db.gcve.eu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 15 May 2026 04:53:44 +0000 https://db.gcve.eu/sighting/a4f68781-f9f4-48a5-a252-9c63674d260c/export {"uuid": "a4f68781-f9f4-48a5-a252-9c63674d260c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-7303", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15454", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-7303\n\ud83d\udd25 CVSS Score: 5.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as problematic, was found in q2apro q2apro-on-site-notifications up to 1.4.6. This affects the function process_request of the file q2apro-onsitenotifications-page.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.4.8 is able to address this issue. The patch is named 0ca85ca02f8aceb661e9b71fd229c45d388ea5b5. It is recommended to upgrade the affected component.\n\ud83d\udccf Published: 2025-05-07T22:00:06.639Z\n\ud83d\udccf Modified: 2025-05-07T22:00:06.639Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.307479\n2. https://vuldb.com/?ctiid.307479\n3. https://vuldb.com/?submit.564749\n4. https://github.com/q2apro/q2apro-on-site-notifications/issues/43\n5. https://github.com/q2apro/q2apro-on-site-notifications/issues/43#issuecomment-1694357344\n6. https://github.com/q2apro/q2apro-on-site-notifications/commit/0ca85ca02f8aceb661e9b71fd229c45d388ea5b5", "creation_timestamp": "2025-05-07T22:23:14.000000Z"} {"uuid": "a4f68781-f9f4-48a5-a252-9c63674d260c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-7303", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15454", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-7303\n\ud83d\udd25 CVSS Score: 5.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as problematic, was found in q2apro q2apro-on-site-notifications up to 1.4.6. This affects the function process_request of the file q2apro-onsitenotifications-page.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.4.8 is able to address this issue. The patch is named 0ca85ca02f8aceb661e9b71fd229c45d388ea5b5. It is recommended to upgrade the affected component.\n\ud83d\udccf Published: 2025-05-07T22:00:06.639Z\n\ud83d\udccf Modified: 2025-05-07T22:00:06.639Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.307479\n2. https://vuldb.com/?ctiid.307479\n3. https://vuldb.com/?submit.564749\n4. https://github.com/q2apro/q2apro-on-site-notifications/issues/43\n5. https://github.com/q2apro/q2apro-on-site-notifications/issues/43#issuecomment-1694357344\n6. https://github.com/q2apro/q2apro-on-site-notifications/commit/0ca85ca02f8aceb661e9b71fd229c45d388ea5b5", "creation_timestamp": "2025-05-07T22:23:14.000000Z"} https://db.gcve.eu/sighting/a4f68781-f9f4-48a5-a252-9c63674d260c/export Wed, 07 May 2025 22:23:14 +0000 https://db.gcve.eu/sighting/df1d5726-8bf9-4c5d-a4ce-0b4036dbd549/export {"uuid": "df1d5726-8bf9-4c5d-a4ce-0b4036dbd549", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-7303", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lomnooothy2l", "content": "", "creation_timestamp": "2025-05-08T00:27:22.269347Z"} {"uuid": "df1d5726-8bf9-4c5d-a4ce-0b4036dbd549", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-7303", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lomnooothy2l", "content": "", "creation_timestamp": "2025-05-08T00:27:22.269347Z"} https://db.gcve.eu/sighting/df1d5726-8bf9-4c5d-a4ce-0b4036dbd549/export Thu, 08 May 2025 00:27:22 +0000 https://db.gcve.eu/sighting/1f79ed03-c7de-4210-8ee5-d8ee9cf59b1b/export {"uuid": "1f79ed03-c7de-4210-8ee5-d8ee9cf59b1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-7303", "type": "seen", "source": "https://t.me/cvedetector/24777", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2023-7303 - Q2Apro Q2Apro-On-Site-Notifications Cross Site Scripting Vulnerability\", \n \"Content\": \"CVE ID : CVE-2023-7303 \nPublished : May 7, 2025, 10:15 p.m. | 29\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, was found in q2apro q2apro-on-site-notifications up to 1.4.6. This affects the function process_request of the file q2apro-onsitenotifications-page.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.4.8 is able to address this issue. The patch is named 0ca85ca02f8aceb661e9b71fd229c45d388ea5b5. It is recommended to upgrade the affected component. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"08 May 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-08T00:52:52.000000Z"} {"uuid": "1f79ed03-c7de-4210-8ee5-d8ee9cf59b1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-7303", "type": "seen", "source": "https://t.me/cvedetector/24777", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2023-7303 - Q2Apro Q2Apro-On-Site-Notifications Cross Site Scripting Vulnerability\", \n \"Content\": \"CVE ID : CVE-2023-7303 \nPublished : May 7, 2025, 10:15 p.m. | 29\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, was found in q2apro q2apro-on-site-notifications up to 1.4.6. This affects the function process_request of the file q2apro-onsitenotifications-page.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.4.8 is able to address this issue. The patch is named 0ca85ca02f8aceb661e9b71fd229c45d388ea5b5. It is recommended to upgrade the affected component. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"08 May 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-08T00:52:52.000000Z"} https://db.gcve.eu/sighting/1f79ed03-c7de-4210-8ee5-d8ee9cf59b1b/export Thu, 08 May 2025 00:52:52 +0000