Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-53696 State: PUBLISHED Published: 2025-03-07T16:13:55.595Z Last Updated: 2025-03-07T17:54:11.651Z Vendors: QNAP Systems Inc. Products: QuLog Center, QTS, QuTS hero Problem Types: CWE-918 Description: A server-side request forgery (SSRF) vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow remote attackers who have gained administrator access to read application data. We have already fixed the vulnerability in the following versions: QuLog Center 1.7.0.829 ( 2024/10/01 ) and later QuLog Center 1.8.0.888 ( 2024/10/15 ) and later QTS 4.5.4.2957 build 20241119 and later QuTS hero h4.5.4.2956 build 20241119 and later Additional Analy
0/15 ) and later QTS 4.5.4.2957 build 20241119 and later QuTS hero h4.5.4.2956 build 20241119 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-24-53
CVE ID: CVE-2024-53697 State: PUBLISHED Published: 2025-03-07T16:14:01.565Z Last Updated: 2025-03-07T17:53:42.938Z Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-787 Description: An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to modify or corrupt memory. We have already fixed the vulnerability in the following versions: QTS 5.2.3.3006 build 20250108 and later QuTS hero h5.2.3.3006 build 20250108 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-
nd later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-24-54
CVE ID: CVE-2024-53698 State: PUBLISHED Published: 2025-03-07T16:14:08.713Z Last Updated: 2025-03-07T17:53:17.143Z Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-415 Description: A double free vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to modify memory. We have already fixed the vulnerability in the following versions: QTS 5.2.3.3006 build 20250108 and later QuTS hero h5.2.3.3006 build 20250108 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-24-54
CVE ID: CVE-2024-53699 State: PUBLISHED Published: 2025-03-07T16:14:15.735Z Last Updated: 2025-03-07T17:52:52.877Z Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-787 Description: An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to modify or corrupt memory. We have already fixed the vulnerability in the following versions: QTS 5.2.3.3006 build 20250108 and later QuTS hero h5.2.3.3006 build 20250108 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-
CVE ID: CVE-2024-53700 State: PUBLISHED Published: 2025-03-07T16:14:22.908Z Last Updated: 2025-03-07T17:52:31.620Z Vendors: QNAP Systems Inc. Products: QuRouter Problem Types: CWE-77, CWE-78 Description: A command injection vulnerability has been reported to affect QHora. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute arbitrary commands. We have already fixed the vulnerability in the following version: QuRouter 2.4.6.028 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-25-07
CVE ID: CVE-2024-53701 State: PUBLISHED Published: 2024-11-29T05:39:28.139Z Last Updated: 2024-12-03T14:09:02.981Z Severity: LOW (CVSS 3.1 CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: FCNT LLC Products: arrows N F-51C, arrows We F-51B, arrows We FCG01, arrows We Problem Types: CWE-306 Description: Multiple FCNT Android devices provide the original security features such as "privacy mode" where arbitrary applications can be set not to be displayed, etc. Under certain conditions, and when an attacker can directly operate the device which its screen is unlocked by a user, the provided security features' setting pages may be exposed and/or the settings may be altered, without authentic
user, the provided security features' setting pages may be exposed and/or the settings may be altered, without authentication. For example, specific applications in the device configured to be hidden may be displayed and/or activated. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.fcnt.com/consumernotice/20741 - https://jvn.jp/en/jp/JVN43845108/
CVE ID: CVE-2024-53702 State: PUBLISHED Published: 2024-12-05T13:53:37.282Z Last Updated: 2024-12-05T15:10:12.280Z Vendors: SonicWall Products: SMA100 Problem Types: CWE-338 Description: Use of cryptographically weak pseudo-random number generator (PRNG) vulnerability in the SonicWall SMA100 SSLVPN backup code generator that, in certain cases, can be predicted by an attacker, potentially exposing the generated secret. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0018
CVE ID: CVE-2024-53703 State: PUBLISHED Published: 2024-12-05T13:59:35.490Z Last Updated: 2024-12-07T04:55:30.933Z Vendors: SonicWall Products: SMA100 Problem Types: CWE-121 Description: A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions mod_httprp library loaded by the Apache web server allows remote attackers to cause Stack-based buffer overflow and potentially lead to code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0018
CVE ID: CVE-2024-53704 State: PUBLISHED Published: 2025-01-09T06:52:16.771Z Last Updated: 2025-10-21T22:55:32.874Z Vendors: SonicWall Products: SonicOS Problem Types: CWE-287 Description: An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0003
CVE ID: CVE-2024-53705 State: PUBLISHED Published: 2025-01-09T06:58:40.573Z Last Updated: 2025-01-09T15:03:52.395Z Vendors: SonicWall Products: SonicOS Problem Types: CWE-918 Description: A Server-Side Request Forgery vulnerability in the SonicOS SSH management interface allows a remote attacker to establish a TCP connection to an IP address on any port when the user is logged in to the firewall. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0003
CVE ID: CVE-2024-53706 State: PUBLISHED Published: 2025-01-09T07:05:11.185Z Last Updated: 2025-01-09T15:31:37.317Z Vendors: SonicWall Products: SonicOS Problem Types: CWE-269 Description: A vulnerability in the Gen7 SonicOS Cloud platform NSv, allows a remote authenticated local low-privileged attacker to elevate privileges to `root` and potentially lead to code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0003
CVE ID: CVE-2024-53707 State: PUBLISHED Published: 2024-12-02T13:48:50.967Z Last Updated: 2024-12-02T18:59:22.349Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: Ahmet İmamoğlu Products: Ahmeti Wp Güzel Sözler Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Ahmet İmamoğlu Ahmeti Wp Güzel Sözler allows Cross Site Request Forgery.This issue affects Ahmeti Wp Güzel Sözler: from n/a through 4.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ahmeti-wp-guzel-sozler/vulnerability/wordpress-ahmeti-wp-guezel-soezler-plugin-4-0-cross-site-request-forgery-csrf-vu
in/ahmeti-wp-guzel-sozler/vulnerability/wordpress-ahmeti-wp-guezel-soezler-plugin-4-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-53708 State: PUBLISHED Published: 2024-12-02T13:48:50.444Z Last Updated: 2024-12-02T19:17:18.455Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: AutoQuiz Products: AI Quiz Problem Types: CWE-862 Description: Missing Authorization vulnerability in AutoQuiz AI Quiz allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects AI Quiz: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ai-quiz/vulnerability/wordpress-ai-quiz-plugin-1-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-53709 State: PUBLISHED Published: 2024-12-02T13:48:49.874Z Last Updated: 2024-12-02T18:59:30.490Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: bdevs Products: Generic Elements Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bdevs Generic Elements allows DOM-Based XSS.This issue affects Generic Elements: from n/a through 1.2.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/generic-elements-for-elementor/vulnerability/wordpress-generic-elements-plugin-1-2-3-cross-site-scripting-xss-vuln
lugin/generic-elements-for-elementor/vulnerability/wordpress-generic-elements-plugin-1-2-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53710 State: PUBLISHED Published: 2024-12-02T13:48:49.351Z Last Updated: 2024-12-02T18:59:38.735Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: ITERAS Products: ITERAS Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in ITERAS ITERAS allows Stored XSS.This issue affects ITERAS: from n/a through 1.7.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/iteras/vulnerability/wordpress-iteras-plugin-1-7-0-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53711 State: PUBLISHED Published: 2024-12-02T13:48:48.815Z Last Updated: 2024-12-02T18:59:48.000Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Jean-Marc BIANCA Products: Hotlink2Watermark Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Jean-Marc BIANCA Hotlink2Watermark allows Stored XSS.This issue affects Hotlink2Watermark: from n/a through 0.3.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/hotlink2watermark/vulnerability/wordpress-hotlink2watermark-plugin-0-3-2-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53712 State: PUBLISHED Published: 2024-12-02T13:48:48.281Z Last Updated: 2024-12-02T18:59:56.988Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Kevin McCabe Products: Kevin's Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Kevin McCabe Kevin's allows Stored XSS.This issue affects Kevin's: from n/a through 2.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/kevins-plugin/vulnerability/wordpress-kevin-s-plugin-2-0-0-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53713 State: PUBLISHED Published: 2024-12-02T13:48:47.772Z Last Updated: 2024-12-02T19:00:14.519Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Alain Diart for les-sushi-codeurs.fr & Eric Ambrosi for regart.net Products: Silverlight Video Player Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Alain Diart for les-sushi-codeurs.fr & Eric Ambrosi for regart.net Silverlight Video Player allows Stored XSS.This issue affects Silverlight Video Player: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/smooth-streaming-player/v
Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/smooth-streaming-player/vulnerability/wordpress-silverlight-video-player-plugin-1-0-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53714 State: PUBLISHED Published: 2024-12-02T13:48:47.241Z Last Updated: 2024-12-02T19:00:23.704Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Arrow Design Products: Continue Shopping From Cart Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Arrow Design Continue Shopping From Cart allows Stored XSS.This issue affects Continue Shopping From Cart: from n/a through 1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/continue-shopping-from-cart-page/vulnerability/wordpress-continue-shopping-from-cart-plugin-1-3-csrf-to-stored-xss-vulnerabi
inue-shopping-from-cart-page/vulnerability/wordpress-continue-shopping-from-cart-plugin-1-3-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53715 State: PUBLISHED Published: 2024-12-02T13:48:46.728Z Last Updated: 2024-12-02T19:00:33.393Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Thomas Hoefter Products: Simple Travel Map Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Thomas Hoefter Simple Travel Map allows Stored XSS.This issue affects Simple Travel Map: from n/a through 0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/simple-travel-map/vulnerability/wordpress-simple-travel-map-plugin-0-1-csrf-to-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53716 State: PUBLISHED Published: 2024-12-02T13:48:46.205Z Last Updated: 2024-12-02T19:00:42.240Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: overtrue Products: wp auto top Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in overtrue wp auto top allows Stored XSS.This issue affects wp auto top: from n/a through 2.9.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-auto-top/vulnerability/wordpress-wp-auto-top-plugin-2-9-3-csrf-to-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53717 State: PUBLISHED Published: 2024-12-02T13:48:45.688Z Last Updated: 2024-12-02T19:00:52.170Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Yonatan Reinberg Products: yPHPlista Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Yonatan Reinberg yPHPlista allows Stored XSS.This issue affects yPHPlista: from n/a through 1.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/yphplista/vulnerability/wordpress-yphplista-plugin-1-1-1-csrf-to-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53718 State: PUBLISHED Published: 2024-12-02T13:48:45.074Z Last Updated: 2024-12-02T19:01:00.308Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Eric Teubert Products: Multi Feed Reader Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Eric Teubert Multi Feed Reader allows Stored XSS.This issue affects Multi Feed Reader: from n/a through 2.2.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/multi-feed-reader/vulnerability/wordpress-multi-feed-reader-plugin-2-2-4-csrf-to-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53719 State: PUBLISHED Published: 2024-12-02T13:48:44.412Z Last Updated: 2024-12-02T19:01:09.126Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: onigetoc Products: Zajax – Ajax Navigation Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in onigetoc Zajax – Ajax Navigation allows Stored XSS.This issue affects Zajax – Ajax Navigation: from n/a through 0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/zajax-ajax-navigation/vulnerability/wordpress-zajax-ajax-navigation-plugin-0-4-csrf-to-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53720 State: PUBLISHED Published: 2024-12-02T13:48:43.883Z Last Updated: 2024-12-02T19:01:17.692Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: ole1986 , MachineITSvcs Products: WP-ISPConfig 3 Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in ole1986 , MachineITSvcs WP-ISPConfig 3 allows Stored XSS.This issue affects WP-ISPConfig 3: from n/a through 1.5.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-ispconfig3/vulnerability/wordpress-wp-ispconfig-3-plugin-1-5-6-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53721 State: PUBLISHED Published: 2024-12-02T13:48:43.338Z Last Updated: 2024-12-02T19:01:27.625Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Stachethemes Products: Advanced Event Manager Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stachethemes Advanced Event Manager allows Stored XSS.This issue affects Advanced Event Manager: from n/a through 1.1.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/advanced-event-manager/vulnerability/wordpress-advanced-event-manager-plugin-1-1-6-cr
tack.com/database/wordpress/plugin/advanced-event-manager/vulnerability/wordpress-advanced-event-manager-plugin-1-1-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53722 State: PUBLISHED Published: 2024-12-02T13:48:42.788Z Last Updated: 2024-12-02T19:01:41.338Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Rockemmusic Products: Favicon My Blog Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Rockemmusic Favicon My Blog allows Stored XSS.This issue affects Favicon My Blog: from n/a through 1.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/favicon-my-blog/vulnerability/wordpress-favicon-my-blog-plugin-1-0-2-csrf-to-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53723 State: PUBLISHED Published: 2024-12-02T13:48:42.246Z Last Updated: 2024-12-02T19:01:59.105Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: A.Cihangir BALTACI Products: Google Plus Share and +1 Button Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in A.Cihangir BALTACI Google Plus Share and +1 Button allows Stored XSS.This issue affects Google Plus Share and +1 Button: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/google-plus-share-and-plusone-button/vulnerability/wordpress-google-plus-share-and-1-button-plugin-1
se/wordpress/plugin/google-plus-share-and-plusone-button/vulnerability/wordpress-google-plus-share-and-1-button-plugin-1-0-csrf-to-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53724 State: PUBLISHED Published: 2024-12-02T13:48:41.669Z Last Updated: 2024-12-02T19:02:08.706Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Ronny L. Bull Products: IceStats Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Ronny L. Bull IceStats allows Stored XSS.This issue affects IceStats: from n/a through 1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/icestats/vulnerability/wordpress-icestats-plugin-1-3-csrf-to-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53725 State: PUBLISHED Published: 2024-12-02T13:48:41.123Z Last Updated: 2024-12-02T19:02:18.629Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Script-Recipes Products: Post Hits Counter Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Script-Recipes Post Hits Counter allows Reflected XSS.This issue affects Post Hits Counter: from n/a through 2.8.23. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/hits-counter/vulnerability/wordpress-post-hits-counter-plugin-2-8-23-csrf-to-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53726 State: PUBLISHED Published: 2024-12-02T13:48:40.587Z Last Updated: 2024-12-02T15:40:24.474Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Realty Candy Products: RealtyCandy IDX Broker Extended Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Realty Candy RealtyCandy IDX Broker Extended allows Stored XSS.This issue affects RealtyCandy IDX Broker Extended: from n/a through 1.5.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/realtycandy-idx-broker-extended/vulnerability/wordpress-realtycandy-idx-broker-extended-plugin-1-5-1-csrf-to-s
ss/plugin/realtycandy-idx-broker-extended/vulnerability/wordpress-realtycandy-idx-broker-extended-plugin-1-5-1-csrf-to-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53727 State: PUBLISHED Published: 2024-12-02T13:48:40.066Z Last Updated: 2024-12-02T15:40:24.348Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: LinkLaunder.com Products: LinkLaunder SEO Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in LinkLaunder.com LinkLaunder SEO allows Stored XSS.This issue affects LinkLaunder SEO: from n/a through 0.92.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/linklaunder-seo-plugin/vulnerability/wordpress-linklaunder-seo-plugin-0-92-1-csrf-to-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53728 State: PUBLISHED Published: 2024-12-02T13:48:39.516Z Last Updated: 2024-12-02T15:40:24.198Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: SEO-Küche Internet Marketing GmbH & Co. KG Products: Protect Your Content Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in SEO-Küche Internet Marketing GmbH & Co. KG Protect Your Content allows Stored XSS.This issue affects Protect Your Content: from n/a through 1.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/protect-your-content/vulnerability/wordpress-protect-your-content-plugin-1-0-2-csrf
hstack.com/database/wordpress/plugin/protect-your-content/vulnerability/wordpress-protect-your-content-plugin-1-0-2-csrf-to-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53729 State: PUBLISHED Published: 2024-12-02T13:48:38.937Z Last Updated: 2024-12-02T15:40:24.045Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Plumeria Web Design Products: Blizzard Quotes Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Plumeria Web Design Blizzard Quotes allows Stored XSS.This issue affects Blizzard Quotes: from n/a through 1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/blizzard-quotes/vulnerability/wordpress-blizzard-quotes-plugin-1-3-csrf-to-stored-cross-site-scripting-xss-vulnerability?_s_id=cve