CVE-2023-24499

MediumCVSS 4.6/10Last modified Jun 17, 2026

Description

Butterfly Button plugin may leave traces of its use on user's device. Since it is used for reporting domestic problems, this may lead to spouse knowing about its use.

Metrics

CVSS 3.1 4.6/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Feb 15, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-24504.4The FiboSearch - AJAX Search for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versionCVE-2023-245006.5Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW.CVE-2023-245019.8Electra Central AC unit – Hardcoded Credentials in unspecified code used by the unit.CVE-2023-245026.5Electra Central AC unit – The unit opens an AP with an easily calculated password.CVE-2023-245036.5Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW.CVE-2023-245046.5Electra Central AC unit – Adjacent attacker may cause the unit to connect to unauthorized update server.CVE-2023-245057.5Milesight NCR/camera version 71.8.0.6-r5 discloses sensitive information through an unspecified request.CVE-2023-245067.5Milesight NCR/camera version 71.8.0.6-r5 exposes credentials through an unspecified request.CVE-2023-245079.8AgilePoint NX v8.0 SU2.2 & SU2.3 – Insecure File Upload - Vulnerability allows insecure file upload, by an unspecified request.CVE-2023-245089.6Baicells Nova 227, Nova 233, and Nova 243 LTE TDD eNodeB and Nova 246 devices with firmware through RTS/RTD 3.6.6 are vulnerable to remote sCVE-2023-245097.8On affected modular platforms running Arista EOS equipped with both redundant supervisor modules and having the redundancy protocol configurCVE-2023-24519.8A vulnerability was found in SourceCodester Online DJ Management System 1.0 and classified as critical. This issue affects some unknown proc