Marco Milesi 13 CVEs across 7 Marco Milesi products. Browse Marco Milesi vulnerabilities, severities, and proof-of-concept exploits.
Marco Milesi products with known CVEs Marco Milesi CVEs — newest first CVE Severity Score Published Summary CVE-2025-64252Medium 4.92026-01-22 Server-Side Request Forgery (SSRF) vulnerability in Marco Milesi ANAC XML Viewer anac-xml-viewer allows Server Side Request Forgery.This issue affects ANAC XML… CVE-2025-62888Medium 5.42025-12-31 Missing Authorization vulnerability in Marco Milesi WP Attachments wp-attachments allows Exploiting Incorrectly Configured Access Control Security Levels.This… CVE-2025-64260High 7.12025-12-18 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Marco Milesi ANAC XML Bandi di Gara avcp allows Reflected… CVE-2025-23819High 7.52025-02-03 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Marco Milesi WP Cloud cloud allows Absolute Path Traversal.This… CVE-2024-38789Medium 5.42025-01-02 Cross-Site Request Forgery (CSRF) vulnerability in Marco Milesi Telegram Bot & Channel telegram-bot allows Cross Site Request Forgery.This issue affects Telegr… CVE-2024-22291Medium 4.32024-01-31 Cross-Site Request Forgery (CSRF) vulnerability in Marco Milesi Browser Theme Color.This issue affects Browser Theme Color: from n/a through 1.3. CVE-2023-47655Medium 5.42023-11-18 Cross-Site Request Forgery (CSRF) vulnerability in Marco Milesi ANAC XML Bandi di Gara.This issue affects ANAC XML Bandi di Gara: from n/a through 7.5. CVE-2023-47245Medium 5.92023-11-16 Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Milesi ANAC XML Viewer plugin <= 1.7 versions. CVE-2023-47242Medium 6.52023-11-16 Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Milesi ANAC XML Bandi di Gara plugin <= 7.5 versions. CVE-2023-47656Medium 5.92023-11-14 Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Milesi ANAC XML Bandi di Gara plugin <= 7.5 versions. CVE-2023-45758Medium 5.92023-10-25 Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Milesi Amministrazione Trasparente plugin <= 8.0.2 versions. CVE-2023-45651Medium 4.32023-10-16 Cross-Site Request Forgery (CSRF) vulnerability in Marco Milesi WP Attachments allows Cross Site Request Forgery.This issue affects WP Attachments: from n/a th… CVE-2023-34006Medium 5.92023-06-22 Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Milesi Telegram Bot & Channel plugin <= 3.6.2 versions.