{"vulnerability": "CVE-2023-4948", "sightings": [{"uuid": "148af258-ea05-453a-ba1c-ae9947710016", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-49489", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-49489.yaml", "content": "", "creation_timestamp": "2025-03-18T20:51:22.000000Z"}, {"uuid": "f7c42d78-056c-4a2a-9dbf-d7da89f7e4ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4948", "type": "seen", "source": "https://t.me/cibsecurity/70427", "content": "\u203c CVE-2023-4948 \u203c\n\nThe WooCommerce CVR Payment Gateway plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the refresh_order_cvr_data AJAX action in versions up to 6.1.0. This makes it possible for authenticated attackers with contributor-level access and above, to update CVR numbers for orders.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-14T07:24:12.000000Z"}, {"uuid": "f2bd8193-fafa-496a-844d-bbf3f23c9f51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-49489", "type": "seen", "source": "https://t.me/ctinow/167304", "content": "https://ift.tt/MrZymhf\nCVE-2023-49489 | kalcaddle KodeExplorer 4.51 config/i18n/en/main.php APP_HOST cross site scripting (Issue 526)", "creation_timestamp": "2024-01-12T15:11:36.000000Z"}, {"uuid": "0e124f42-9b9b-4907-9513-8332421df918", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-49485", "type": "seen", "source": "https://t.me/ctinow/161118", "content": "https://ift.tt/wQ9x0Dg\nCVE-2023-49485 | JFinalCMS 5.0.0 Column Management Department cross site scripting", "creation_timestamp": "2023-12-31T15:46:22.000000Z"}, {"uuid": "492a75a5-33a5-4e29-a6ee-b80eb54772ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-49484", "type": "seen", "source": "https://t.me/ctinow/161117", "content": "https://ift.tt/eDo0Vnj\nCVE-2023-49484 | Dreamer CMS 4.1.3 Article Management Department cross site scripting", "creation_timestamp": "2023-12-31T15:46:21.000000Z"}, {"uuid": "4e2c173c-5993-4ef6-974a-f538c4524c6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-49487", "type": "seen", "source": "https://t.me/ctinow/161116", "content": "https://ift.tt/3c4q5WY\nCVE-2023-49487 | JFinalCMS 5.0.0 Navigation Management Department cross site scripting", "creation_timestamp": "2023-12-31T15:46:20.000000Z"}, {"uuid": "c6ca7419-c3d5-4375-bd61-4db187f6275a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-49486", "type": "seen", "source": "https://t.me/ctinow/161115", "content": "https://ift.tt/EDAo69C\nCVE-2023-49486 | JFinalCMS 5.0.0 Model Management Department cross site scripting", "creation_timestamp": "2023-12-31T15:46:19.000000Z"}, {"uuid": "75939189-021f-46af-8678-f373d62df6f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-49488", "type": "seen", "source": "https://t.me/ctinow/161631", "content": "https://ift.tt/K07RiuQ\nCVE-2023-49488 | Openfiler ESA 2.99.1 nic cross site scripting", "creation_timestamp": "2024-01-02T10:06:51.000000Z"}, {"uuid": "cab60bd3-ba81-4de3-bba3-ee68d12d0890", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-49489", "type": "seen", "source": "https://t.me/ctinow/158366", "content": "https://ift.tt/Pdgkxe0\nCVE-2023-49489 Exploit", "creation_timestamp": "2023-12-22T13:16:59.000000Z"}]}