{"vulnerability": "CVE-2023-2964", "sightings": [{"uuid": "6f3358e5-2d14-41a9-8d54-4f1663563602", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-2964", "type": "seen", "source": "https://t.me/cibsecurity/66275", "content": "\u203c CVE-2023-2964 \u203c\n\nThe Simple Iframe WordPress plugin before 1.2.0 does not properly validate one of its WordPress block attribute's content, which may allow users whose role is at least that of a contributor to conduct Stored Cross-Site Scripting attacks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-10T20:30:02.000000Z"}, {"uuid": "8539aad9-43ef-4940-8138-3171bf740949", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-29643", "type": "seen", "source": "https://t.me/cibsecurity/63136", "content": "\u203c CVE-2023-29643 \u203c\n\nCross Site Scripting (XSS) vulnerability in PerfreeBlog 3.1.2 allows attackers to execute arbitrary code via the Post function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-01T20:29:50.000000Z"}, {"uuid": "ab658e04-0652-43b3-9e20-9917cd3a67ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-29641", "type": "seen", "source": "https://t.me/cibsecurity/63127", "content": "\u203c CVE-2023-29641 \u203c\n\nCross Site Scripting (XSS) vulnerability in pandao editor.md thru 1.5.0 allows attackers to inject arbitrary web script or HTML via crafted markdown text.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-01T20:29:39.000000Z"}]}