Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-47393 State: PUBLISHED Published: 2023-11-22T00:00:00 Last Updated: 2024-09-04T18:42:15.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access control issue in Mercedes me IOS APP v1.34.0 and below allows attackers to view the maintenance orders of other users and access sensitive user information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/wwwziziyu/7dbf7fd43f9e304ce0819f8a9784d2c6
CVE ID: CVE-2023-47397 State: PUBLISHED Published: 2023-11-08T00:00:00 Last Updated: 2024-09-03T20:06:56.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: WeBid <=1.2.2 is vulnerable to code injection via admin/categoriestrans.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://liotree.github.io/2023/webid.html
CVE ID: CVE-2023-47415 State: PUBLISHED Published: 2024-03-07T00:00:00 Last Updated: 2024-08-29T18:13:38.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cypress Solutions CTM-200 v2.7.1.5600 and below was discovered to contain an OS command injection vulnerability via the cli_text parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://ctm-200.com - http://cypress.com - https://gitlab.com/loudmouth-security/vulnerability-disclosures/cve-2023-47415
CVE ID: CVE-2023-47417 State: PUBLISHED Published: 2023-11-20T00:00:00 Last Updated: 2024-08-02T21:09:36.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in the component /shells/embedder.html of DZSlides after v2011.07.25 allows attackers to execute arbitrary code via a crafted payload. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/paulrouget/dzslides - https://gist.github.com/cd80/5b7702ffbfc8531f30b56356a4a7f4dd
CVE ID: CVE-2023-47418 State: PUBLISHED Published: 2023-11-30T00:00:00 Last Updated: 2024-08-02T21:09:36.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: Remote Code Execution (RCE) vulnerability in o2oa version 8.1.2 and before, allows attackers to create a new interface in the service management function to execute JavaScript. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Onlyning/O2OA - https://gist.github.com/Onlyning/0cf7b1c597a36dd3a2e9ec948b881ac8
CVE ID: CVE-2023-47422 State: PUBLISHED Published: 2024-02-20T00:00:00 Last Updated: 2024-08-26T15:26:43.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access control issue in /usr/sbin/httpd in Tenda TX9 V1 V22.03.02.54, Tenda AX3 V3 V16.03.12.11, Tenda AX9 V1 V22.03.01.46, and Tenda AX12 V1 V22.03.01.46 allows attackers to bypass authentication on any endpoint via a crafted URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xiaobye-ctf/My-CVE/tree/main/Tenda/CVE-2023-47422
CVE ID: CVE-2023-47430 State: PUBLISHED Published: 2024-03-25T00:00:00 Last Updated: 2024-11-14T15:48:02.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-buffer-overflow vulnerability in ReadyMedia (MiniDLNA) v1.3.3 allows attackers to cause a denial of service via via the SendContainer() function at tivo_commands.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceforge.net/projects/minidlna/ - https://sourceforge.net/p/minidlna/bugs/361/
CVE ID: CVE-2023-47435 State: PUBLISHED Published: 2024-04-19T00:00:00 Last Updated: 2024-08-02T21:09:36.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the verifyPassword function of hexo-theme-matery v2.0.0 allows attackers to bypass authentication and access password protected pages. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/blinkfox/hexo-theme-matery/issues/897
CVE ID: CVE-2023-47437 State: PUBLISHED Published: 2023-11-27T00:00:00 Last Updated: 2024-08-02T21:09:37.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability has been identified in Pachno 1.0.6 allowing an authenticated attacker to execute a cross-site scripting (XSS) attack. The vulnerability exists due to inadequate input validation in the Project Description and comments, which enables an attacker to inject malicious java script. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pachno/pachno - https://github.com/herombey/CVE-2023-47437
CVE ID: CVE-2023-47438 State: PUBLISHED Published: 2024-03-27T00:00:00 Last Updated: 2024-09-04T16:23:41.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Reportico Till 8.1.0 allows attackers to obtain sensitive information or other system information via the project parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/reportico-web/reportico/issues/52
CVE ID: CVE-2023-47440 State: PUBLISHED Published: 2023-12-07T00:00:00 Last Updated: 2024-08-02T21:09:37.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gladys Assistant v4.27.0 and prior is vulnerable to Directory Traversal. The patch of CVE-2023-43256 was found to be incomplete, allowing authenticated attackers to extract sensitive files in the host machine. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GladysAssistant/Gladys/pull/1918/commits/4f56ba250ff9f46578f1afa6a97e62e74bad83b7 - https://blog.moku.fr/cve/ - https://blog.moku.fr/cves/CVE-2023-47440/
CVE ID: CVE-2023-47444 State: PUBLISHED Published: 2023-11-15T00:00:00 Last Updated: 2024-08-29T15:26:32.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in OpenCart 4.0.0.0 to 4.0.2.3 allows authenticated backend users having common/security write privilege can write arbitrary untrusted data inside config.php and admin/config.php, resulting in remote code execution on the underlying server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://0xbro.red/disclosures/disclosed-vulnerabilities/opencart-cve-2023-47444/
CVE ID: CVE-2023-47445 State: PUBLISHED Published: 2023-11-15T00:00:00 Last Updated: 2024-08-29T17:54:49.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pre-School Enrollment version 1.0 is vulnerable to SQL Injection via the username parameter in preschool/admin/ page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/termanix/PHPGrukul-Pre-School-Enrollment-System-v1.0/blob/main/CVE-2023-47445%20PHPGurukul-Pre-School-Enrollment-System-v1.0%20SQL%20Injection.md
CVE ID: CVE-2023-47446 State: PUBLISHED Published: 2023-11-15T00:00:00 Last Updated: 2024-08-29T17:53:27.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pre-School Enrollment version 1.0 is vulnerable to Cross Site Scripting (XSS) on the profile.php page via fullname parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/termanix/PHPGrukul-Pre-School-Enrollment-System-v1.0/blob/main/CVE-2023-47446%20PHPGurukul-Pre-School-Enrollment-System-v1.0%20Stored%20XSS%20Vulnerability.md
CVE ID: CVE-2023-47452 State: PUBLISHED Published: 2023-11-30T00:00:00 Last Updated: 2024-08-02T21:09:37.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Untrusted search path vulnerability in notepad++ 6.5 allows local users to gain escalated privileges through the msimg32.dll file in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xieqiang11/poc-1/tree/main
CVE ID: CVE-2023-47453 State: PUBLISHED Published: 2023-11-30T00:00:00 Last Updated: 2024-11-26T15:46:15.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Untrusted search path vulnerability in Sohu Video Player 7.0.15.0 allows local users to gain escalated privileges through the version.dll file in the current working directory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/xieqiang11/poc-2/tree/main
CVE ID: CVE-2023-47454 State: PUBLISHED Published: 2023-11-30T00:00:00 Last Updated: 2024-08-02T21:09:37.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Untrusted search path vulnerability in NetEase CloudMusic 2.10.4 for Windows allows local users to gain escalated privileges through the urlmon.dll file in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xieqiang11/poc-3/tree/main
CVE ID: CVE-2023-47455 State: PUBLISHED Published: 2023-11-07T00:00:00 Last Updated: 2024-10-28T19:04:42.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1806 V1.0.0.1 contains a heap overflow vulnerability in setSchedWifi function, in which the src and v12 are directly obtained from http request parameter schedStartTime and schedEndTime without checking their size. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Anza2001/IOT_VULN/blob/main/Tenda/AX1806/setSchedWifi.md
CVE ID: CVE-2023-47456 State: PUBLISHED Published: 2023-11-07T00:00:00 Last Updated: 2024-10-28T19:04:00.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX1806 V1.0.0.1 contains a stack overflow vulnerability in function sub_455D4, called by function fromSetWirelessRepeat. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Anza2001/IOT_VULN/blob/main/Tenda/AX1806/fromSetWirelessRepeat.md
CVE ID: CVE-2023-47458 State: PUBLISHED Published: 2024-01-02T00:00:00.000Z Last Updated: 2025-04-17T18:54:14.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in SpringBlade v.3.7.0 and before allows a remote attacker to escalate privileges via the lack of permissions control framework. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/smallc/SpringBlade - http://springblade.com - https://gist.github.com/Mr-F0reigner/b05487f5ca52d17e214fffd6e1e0312a
CVE ID: CVE-2023-47459 State: PUBLISHED Published: 2024-01-16T00:00:00.000Z Last Updated: 2025-06-17T19:42:49.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Knovos Discovery v.22.67.0 allows a remote attacker to obtain sensitive information via the /DiscoveryReview/Service/CaseManagement.svc/GetProductSiteName component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.knovos.com - https://github.com/aleksey-vi/CVE-2023-47459
CVE ID: CVE-2023-47460 State: PUBLISHED Published: 2024-01-16T00:00:00.000Z Last Updated: 2025-06-03T13:59:32.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Knovos Discovery v.22.67.0 allows a remote attacker to execute arbitrary code via the /DiscoveryProcess/Service/Admin.svc/getGridColumnStructure component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.knovos.com - https://github.com/aleksey-vi/CVE-2023-47460
CVE ID: CVE-2023-47462 State: PUBLISHED Published: 2023-11-29T00:00:00 Last Updated: 2024-08-02T21:09:37.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Permissions vulnerability in GL.iNet AX1800 v.3.215 and before allows a remote attacker to execute arbitrary code via the file sharing function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gl-inet/CVE-issues/blob/main/3.215/Arbitrary%20File%20Read%20through%20file%20share.md
CVE ID: CVE-2023-47463 State: PUBLISHED Published: 2023-11-30T00:00:00 Last Updated: 2024-10-16T19:26:54.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Permissions vulnerability in GL.iNet AX1800 version 4.0.0 before 4.5.0 allows a remote attacker to execute arbitrary code via a crafted script to the gl_nas_sys authentication function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/an%20unauthenticated%20remote%20code%20execution.md
CVE ID: CVE-2023-47464 State: PUBLISHED Published: 2023-11-30T00:00:00 Last Updated: 2024-08-02T21:09:37.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Permissions vulnerability in GL.iNet AX1800 version 4.0.0 before 4.5.0 allows a remote attacker to execute arbitrary code via the upload API function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Arbitrary%20File%20Creation%20Through%20API%20upload.md
CVE ID: CVE-2023-47465 State: PUBLISHED Published: 2023-12-09T00:00:00 Last Updated: 2024-08-02T21:09:37.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in GPAC v.2.2.1 and before allows a local attacker to cause a denial of service (DoS) via the ctts_box_read function of file src/isomedia/box_code_base.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/2652
CVE ID: CVE-2023-47466 State: PUBLISHED Published: 2025-05-22T00:00:00.000Z Last Updated: 2025-05-22T14:20:27.793Z Severity: LOW (CVSS 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: TagLib Products: TagLib Problem Types: CWE-476 Description: TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/taglib/taglib/issues/1163 - https://github.com/taglib/taglib/pull/1164 - https://github.com/taglib/taglib/compare/v1.13.1...v2.0 - https://github.com/taglib/taglib/commit/dfa33bec0806cbb45785accb8cc6c2
github.com/taglib/taglib/compare/v1.13.1...v2.0 - https://github.com/taglib/taglib/commit/dfa33bec0806cbb45785accb8cc6c2048a7d40cf
CVE ID: CVE-2023-47467 State: PUBLISHED Published: 2023-11-22T00:00:00 Last Updated: 2024-08-02T21:09:37.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability in jeecg-boot v.3.6.0 allows a remote privileged attacker to obtain sensitive information via the file directory structure. Additional Analyst Notes: - CVE Program Container: References: - https://www.yuque.com/u2479829/tegvu8/dvmfdl5fssfen05q
CVE ID: CVE-2023-47470 State: PUBLISHED Published: 2023-11-16T00:00:00 Last Updated: 2024-08-02T21:09:37.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in Ffmpeg before github commit 4565747056a11356210ed8edcecb920105e40b60 allows a remote attacker to achieve an out-of-array write, execute arbitrary code, and cause a denial of service (DoS) via the ref_pic_list_struct function in libavcodec/evc_ps.c Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FFmpeg/FFmpeg/commit/4565747056a11356210ed8edcecb920105e40b60 - https://patchwork.ffmpeg.org/project/ffmpeg/patch/20230915131147.5945-2-michael%40niedermayer.cc/ - ht
ecb920105e40b60 - https://patchwork.ffmpeg.org/project/ffmpeg/patch/20230915131147.5945-2-michael%40niedermayer.cc/ - https://github.com/goldds96/Report/tree/main/FFmpeg
CVE ID: CVE-2023-47471 State: PUBLISHED Published: 2023-11-16T00:00:00 Last Updated: 2024-08-02T21:09:37.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in strukturag libde265 v1.10.12 allows a local attacker to cause a denial of service via the slice_segment_header function in the slice.cc component. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/strukturag/libde265/issues/426 - https://github.com/strukturag/libde265/commit/e36b4a1b0bafa53df47514c419d5be3e8916ebc7 - https://lists.debian.org/debian-lts-announce/2023/11/msg00032.html
CVE ID: CVE-2023-47473 State: PUBLISHED Published: 2024-01-03T00:00:00 Last Updated: 2024-09-06T17:51:17.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability in fuwushe.org iFair versions 23.8_ad0 and before allows an attacker to obtain sensitive information via a crafted script. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.yuque.com/ssr123/gxhh8t/xv5oxd5i5pxmxd1a?singleDoc - https://github.com/THMOAS0/SSR123/blob/main/%E4%BC%81%E8%AF%ADiFair%20Any%20file%20read.pdf
CVE ID: CVE-2023-47480 State: PUBLISHED Published: 2024-09-20T00:00:00 Last Updated: 2024-09-25T23:02:37.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Pure Data 0.54-0 and fixed in 0.54-1 allows a local attacker to escalate privileges via the set*id () function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://puredata.info/ - https://github.com/pure-data/pure-data/issues/2063 - https://github.com/pure-data/pure-data/commit/0b5e467b8728b3ed56e1a8ee5b367ce78e7e6e5d
CVE ID: CVE-2023-47488 State: PUBLISHED Published: 2023-11-09T00:00:00.000Z Last Updated: 2025-09-29T13:27:49.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Combodo iTop v.3.1.0-2-11973 allows a local attacker to obtain sensitive information via a crafted script to the attrib_manager_id parameter in the General Information page and the id parameter in the contact page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugplorer.github.io/cve-xss-itop/ - https://nitipoom-jar.github.io/CVE-2023-47488/ - https://nitipoom-jaroonchaipipat.github.io/security-research-portal/2023-47488
CVE ID: CVE-2023-47489 State: PUBLISHED Published: 2023-11-09T00:00:00.000Z Last Updated: 2025-09-29T13:40:42.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSV injection in export as csv in Combodo iTop v.3.1.0-2-11973 allows a local attacker to execute arbitrary code via a crafted script to the export-v2.php and ajax.render.php components. Additional Analyst Notes: - CVE Program Container: References: - https://bugplorer.github.io/cve-csv-itop/ - https://nitipoom-jar.github.io/CVE-2023-47489/ - https://nitipoom-jaroonchaipipat.github.io/security-research-portal/2023-47489
CVE ID: CVE-2023-47503 State: PUBLISHED Published: 2023-11-28T00:00:00 Last Updated: 2024-08-02T21:09:37.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in jflyfox jfinalCMS v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the login.jsp component in the template management module. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jflyfox/jfinal_cms/issues/58
CVE ID: CVE-2023-47504 State: PUBLISHED Published: 2024-04-24T15:49:48.943Z Last Updated: 2024-08-02T21:09:37.352Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Elementor Products: Elementor Website Builder Problem Types: CWE-287 Description: Improper Authentication vulnerability in Elementor Elementor Website Builder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Elementor Website Builder: from n/a through 3.16.4. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/elementor/wordpress-elementor-plugin-3-16-4-contributor-arbitrary-attachmen
ttps://patchstack.com/database/vulnerability/elementor/wordpress-elementor-plugin-3-16-4-contributor-arbitrary-attachment-read-vulnerability?_s_id=cve
CVE ID: CVE-2023-47505 State: PUBLISHED Published: 2023-11-30T12:02:09.750Z Last Updated: 2024-08-02T21:09:37.234Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Elementor.com Products: Elementor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elementor.Com Elementor allows Cross-Site Scripting (XSS).This issue affects Elementor: from n/a through 3.16.4. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/elementor/wordpress-elementor-plugin-3-16-4-cross-site-scripting-xss-vulnerability?_s_id=cve - https://patch
lnerability/elementor/wordpress-elementor-plugin-3-16-4-cross-site-scripting-xss-vulnerability?_s_id=cve - https://patchstack.com/articles/arbitrary-attachment-render-to-xss-in-elementor-plugin?_s_id=cve
CVE ID: CVE-2023-47506 State: PUBLISHED Published: 2023-12-18T23:00:45.912Z Last Updated: 2024-08-02T21:09:36.908Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L) Vendors: Master slider Products: Master Slider Pro Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Master slider Master Slider Pro allows SQL Injection.This issue affects Master Slider Pro: from n/a through 3.6.5. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/masterslider/wordpress-master-slider-pro-plugin-3-6-5-authenticated-editor-sql-injection-vulnerabili
abase/vulnerability/masterslider/wordpress-master-slider-pro-plugin-3-6-5-authenticated-editor-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2023-47507 State: PUBLISHED Published: 2023-12-20T13:25:07.448Z Last Updated: 2024-08-02T21:09:37.204Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Master Slider Products: Master Slider Pro Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in Master Slider Master Slider Pro.This issue affects Master Slider Pro: from n/a through 3.6.5. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/masterslider/wordpress-master-slider-pro-plugin-3-6-5-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2023-47508 State: PUBLISHED Published: 2023-11-16T18:26:56.019Z Last Updated: 2024-08-02T21:09:37.340Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Averta Products: Master Slider Pro Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Averta Master Slider Pro plugin <= 3.6.5 versions. Additional Analyst Notes: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/masterslider/wordpress-master-slider-pro-plugin-3-6-5-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47509 State: PUBLISHED Published: 2023-11-16T18:20:56.596Z Last Updated: 2024-08-28T15:12:31.832Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: ioannup Products: Edit WooCommerce Templates Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ioannup Edit WooCommerce Templates plugin <= 1.1.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/woo-edit-templates/wordpress-edit-woocommerce-templates-plugin-1-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2023-47510 State: PUBLISHED Published: 2023-11-07T10:11:03.284Z Last Updated: 2024-09-04T19:10:09.578Z Vendors: WPSolutions-HQ Products: WPDBSpringClean Problem Types: CWE-79 Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPSolutions-HQ WPDBSpringClean plugin <= 1.6 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wpdbspringclean/wordpress-wpdbspringclean-plugin-1-6-cross-site-scripting-xss-vulnerability?_s_id=cve