{"vulnerability": "CVE-2023-3787", "sightings": [{"uuid": "c09f6a87-ae7c-446c-8704-f701c8db26cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-37871", "type": "seen", "source": "https://t.me/ctinow/157074", "content": "https://ift.tt/BtU6wZy\nCVE-2023-37871", "creation_timestamp": "2023-12-20T15:23:22.000000Z"}, {"uuid": "16546726-2c5e-4087-84be-79453bfa4b13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-37871", "type": "seen", "source": "https://t.me/ctinow/167831", "content": "https://ift.tt/TDgbaZr\nCVE-2023-37871 | WooCommerce GoCardless Plugin up to 2.5.6 on WordPress authorization", "creation_timestamp": "2024-01-13T14:21:22.000000Z"}, {"uuid": "eb761e00-56dc-426e-81ec-44f7137a3f3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-37879", "type": "seen", "source": "https://t.me/cibsecurity/70253", "content": "\u203c CVE-2023-37879 \u203c\n\nInsecure storage of sensitive information in Wing FTP Server (User Web Client) allows information elicitation.This issue affects Wing FTP Server: &lt;= 7.2.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-12T12:22:52.000000Z"}, {"uuid": "863f4378-75c3-40ac-b827-48aa0b9cbcf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-37878", "type": "seen", "source": "https://t.me/cibsecurity/70251", "content": "\u203c CVE-2023-37878 \u203c\n\nInsecure default permissions in Wing FTP Server (Admin Web Client) allows for privilege escalation.This issue affects Wing FTP Server: &lt;= 7.2.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-12T12:22:50.000000Z"}, {"uuid": "f9f16ca0-a2e3-47f8-878c-e9f9ca454ccf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-37875", "type": "seen", "source": "https://t.me/cibsecurity/70246", "content": "\u203c CVE-2023-37875 \u203c\n\nImproper encoding or escaping of output in Wing FTP Server (User Web Client) allows Cross-Site Scripting (XSS).This issue affects Wing FTP Server: &lt;= 7.2.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-12T12:22:45.000000Z"}, {"uuid": "5e5c4449-800f-46e1-a7ea-6730eba5725e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3787", "type": "seen", "source": "https://t.me/cibsecurity/67042", "content": "\u203c CVE-2023-3787 \u203c\n\nA vulnerability classified as problematic was found in Codecanyon Tiva Events Calender 1.4. This vulnerability affects unknown code. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-235054 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-20T18:32:55.000000Z"}, {"uuid": "9908e4c3-779a-46d4-a2bd-e2a40772c9ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-37873", "type": "seen", "source": "https://t.me/cibsecurity/67822", "content": "\u203c CVE-2023-37873 \u203c\n\nUnauth. Reflected Cross-Site Scripting (XSS) vulnerability in WooCommerce Shipping Multiple Addresses plugin &lt;=\u00c2\u00a03.8.5 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-06T02:12:00.000000Z"}]}