Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-4975 State: PUBLISHED Published: 2025-05-22T21:17:52.691Z Last Updated: 2025-10-08T09:37:20.297Z Vendors: TP-Link Systems Inc. Products: TP-Link Tapo app Problem Types: CWE-863 Description: When a notification relating to low battery appears for a user with whom the device has been shared, tapping the notification grants full access to the power settings of that device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.tp-link.com/us/support/faq/4464/ - https://play.google.com/store/apps/details?id=com.tplink.iot&hl=en_US
CVE ID: CVE-2025-4976 State: PUBLISHED Published: 2025-07-24T06:05:37.730Z Last Updated: 2025-07-24T13:36:32.546Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-213 Description: An issue has been discovered in GitLab EE affecting all versions from 17.0 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1 that, under certain circumstances, could have allowed an attacker to access internal notes in GitLab Duo responses. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/543905 - https://hackerone.com/reports/3149956
CVE ID: CVE-2025-4977 State: PUBLISHED Published: 2025-05-20T13:00:06.001Z Last Updated: 2025-05-20T14:54:51.056Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Netgear Products: DGND3700 Problem Types: CWE-200, CWE-284 Description: A vulnerability, which was classified as problematic, has been found in Netgear DGND3700 1.1.00.15_1.00.15NA. Affected by this issue is some unknown functionality of the file /BRS_top.html. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other products might be affected as well. The vendor was contacted early about this disclosur
he public and may be used. Other products might be affected as well. The vendor was contacted early about this disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309638 - https://vuldb.com/?ctiid.309638 - https://vuldb.com/?submit.564711 - https://github.com/at0de/my_vulns/blob/main/Netgear/DGND3700v2/BRS_top.md - https://www.netgear.com/
CVE ID: CVE-2025-4978 State: PUBLISHED Published: 2025-05-20T13:00:08.375Z Last Updated: 2025-05-20T14:55:01.985Z Severity: N/A (CVSS 10 AV:N/AC:L/Au:N/C:C/I:C/A:C) Vendors: Netgear Products: DGND3700 Problem Types: CWE-287 Description: A vulnerability, which was classified as very critical, was found in Netgear DGND3700 1.1.00.15_1.00.15NA. This affects an unknown part of the file /BRS_top.html of the component Basic Authentication. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other products might be affected as well. The vendor was contacted early about this disclosure. Addit
c and may be used. Other products might be affected as well. The vendor was contacted early about this disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309639 - https://vuldb.com/?ctiid.309639 - https://vuldb.com/?submit.564712 - https://github.com/at0de/my_vulns/blob/main/Netgear/DGND3700v2/backdoor.md - https://www.netgear.com/
CVE ID: CVE-2025-4979 State: PUBLISHED Published: 2025-05-22T13:30:28.496Z Last Updated: 2025-05-22T14:21:32.253Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-1220 Description: An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. An attacker may be able to reveal masked or hidden CI variables (that they did not author) in the WebUI, by simply creating their own variable and observing the HTTP response. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/524455
CVE ID: CVE-2025-4980 State: PUBLISHED Published: 2025-05-20T14:00:06.347Z Last Updated: 2025-05-20T14:08:50.774Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Netgear Products: DGND3700 Problem Types: CWE-200, CWE-284 Description: A vulnerability has been found in Netgear DGND3700 1.1.00.15_1.00.15NA and classified as problematic. This vulnerability affects unknown code of the file /currentsetting.htm of the component mini_http. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other products might be affected as well. The vendor was contacted early about t
isclosed to the public and may be used. Other products might be affected as well. The vendor was contacted early about this disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309640 - https://vuldb.com/?ctiid.309640 - https://vuldb.com/?submit.564714 - https://github.com/at0de/my_vulns/blob/main/Netgear/DGND3700v2/currentsetting.md - https://www.netgear.com/
CVE ID: CVE-2025-4981 State: PUBLISHED Published: 2025-06-20T10:27:13.471Z Last Updated: 2025-06-20T13:10:32.981Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Mattermost Products: Mattermost Problem Types: CWE-427 Description: Mattermost versions 10.5.x <= 10.5.5, 9.11.x <= 9.11.15, 10.8.x <= 10.8.0, 10.7.x <= 10.7.2, 10.6.x <= 10.6.5 fail to sanitize filenames in the archive extractor which allows authenticated users to write files to arbitrary locations on the filesystem via uploading archives with path traversal sequences in filenames, potentially leading to remote code execution. The vulnerability impacts instances where file uploads and document se
es, potentially leading to remote code execution. The vulnerability impacts instances where file uploads and document search by content is enabled (FileSettings.EnableFileAttachments = true and FileSettings.ExtractContent = true). These configuration settings are enabled by default. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2025-4983 State: PUBLISHED Published: 2025-05-30T14:19:42.824Z Last Updated: 2025-05-30T21:59:35.691Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: Dassault Systèmes Products: City Referential Manager Problem Types: CWE-79 Description: A stored Cross-site Scripting (XSS) vulnerability affecting City Referential in City Referential Manager on Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.3ds.com/vulnerability/advisories
CVE ID: CVE-2025-4984 State: PUBLISHED Published: 2025-05-30T14:19:35.131Z Last Updated: 2025-05-30T21:59:41.720Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: Dassault Systèmes Products: City Referential Manager Problem Types: CWE-79 Description: A stored Cross-site Scripting (XSS) vulnerability affecting City Discover in City Referential Manager on Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.3ds.com/vulnerability/advisories
CVE ID: CVE-2025-4985 State: PUBLISHED Published: 2025-05-30T14:19:28.044Z Last Updated: 2025-05-30T21:59:47.795Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: Dassault Systèmes Products: Project Portfolio Manager Problem Types: CWE-79 Description: A stored Cross-site Scripting (XSS) vulnerability affecting Risk Management in Project Portfolio Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.3ds.com/vulnerability/advisories
CVE ID: CVE-2025-4986 State: PUBLISHED Published: 2025-05-30T14:19:21.517Z Last Updated: 2025-05-30T21:59:53.449Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: Dassault Systèmes Products: Product Manager Problem Types: CWE-79 Description: A stored Cross-site Scripting (XSS) vulnerability affecting Model Definition in Product Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.3ds.com/vulnerability/advisories
CVE ID: CVE-2025-4987 State: PUBLISHED Published: 2025-06-16T07:22:02.131Z Last Updated: 2025-06-16T17:40:13.331Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: Dassault Systèmes Products: Project Portfolio Manager Problem Types: CWE-79 Description: A stored Cross-site Scripting (XSS) vulnerability affecting Opportunity Management in Project Portfolio Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.3ds.com/vulnerability/advisories
CVE ID: CVE-2025-4988 State: PUBLISHED Published: 2025-05-30T14:19:11.723Z Last Updated: 2025-05-30T21:59:59.493Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: Dassault Systèmes Products: Multidisciplinary Optimization Engineer Problem Types: CWE-79 Description: A stored Cross-site Scripting (XSS) vulnerability affecting Results Analytics in Multidisciplinary Optimization Engineer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.3ds.com/vulnerability/advisories
CVE ID: CVE-2025-4989 State: PUBLISHED Published: 2025-05-30T14:19:03.554Z Last Updated: 2025-05-30T22:00:14.117Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: Dassault Systèmes Products: Product Manager Problem Types: CWE-79 Description: A stored Cross-site Scripting (XSS) vulnerability affecting Requirements in Product Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.3ds.com/vulnerability/advisories
CVE ID: CVE-2025-4990 State: PUBLISHED Published: 2025-05-30T14:16:51.792Z Last Updated: 2025-05-30T22:00:20.115Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: Dassault Systèmes Products: Product Manager Problem Types: CWE-79 Description: A stored Cross-site Scripting (XSS) vulnerability affecting Change Governance in Product Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.3ds.com/vulnerability/advisories
CVE ID: CVE-2025-4991 State: PUBLISHED Published: 2025-05-30T14:16:25.877Z Last Updated: 2025-05-30T22:00:25.737Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: Dassault Systèmes Products: Collaborative Industry Innovator Problem Types: CWE-79 Description: A stored Cross-site Scripting (XSS) vulnerability affecting 3D Markup in Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.3ds.com/vulnerability/advisories
CVE ID: CVE-2025-4992 State: PUBLISHED Published: 2025-05-30T14:15:45.186Z Last Updated: 2025-05-30T22:00:31.561Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: Dassault Systèmes Products: Service Process Engineer Problem Types: CWE-79 Description: A stored Cross-site Scripting (XSS) vulnerability affecting Service Items Management in Service Process Engineer from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.3ds.com/vulnerability/advisories
CVE ID: CVE-2025-4993 State: PUBLISHED Published: 2025-09-23T17:51:51.489Z Last Updated: 2025-09-23T18:36:56.917Z Vendors: RTI Products: Connext Professional Problem Types: CWE-822 Description: Untrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation.This issue affects Connext Professional: from 7.4.0 before 7.6.0, from 7.0.0 before 7.3.0.10, from 6.1.0 before 6.1.2.27, from 6.0.0 before 6.0.*, from 5.3.0 before 5.3.*, from 4.4a before 5.2.*. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rti.com/vulnerabilities/#cve-2025-4993
CVE ID: CVE-2025-4996 State: PUBLISHED Published: 2025-05-20T19:00:09.160Z Last Updated: 2025-05-20T19:29:56.525Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: Intelbras Products: RF 301K Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, has been found in Intelbras RF 301K 1.1.5. This issue affects some unknown processing of the component Add Static IP. The manipulation of the argument Description leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: R
may be used. The vendor was contacted early about this disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309647 - https://vuldb.com/?ctiid.309647 - https://vuldb.com/?submit.501900
CVE ID: CVE-2025-4997 State: PUBLISHED Published: 2025-05-20T19:31:04.192Z Last Updated: 2025-05-20T19:58:19.328Z Severity: N/A (CVSS 6.8 AV:N/AC:L/Au:S/C:N/I:N/A:C) Vendors: H3C Products: R2+ProG Problem Types: CWE-404 Description: A vulnerability, which was classified as problematic, was found in H3C R2+ProG up to 200R004. Affected is the function UpdateWanParams/AddMacList/EditMacList/AddWlanMacList/EditWlanMacList/Edit_BasicSSID/Edit_GuestSSIDFor2P4G/Edit_BasicSSID_5G/SetAPInfoById of the file /goform/aspForm of the component HTTP POST Request Handler. The manipulation of the argument param leads to denial of service. It is possible to launch the attack remotely. The exploit has been dis
of the argument param leads to denial of service. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309648 - https://vuldb.com/?ctiid.309648 - https://vuldb.com/?submit.563551 - https://github.com/CH13hh/tmp_store_cc/blob/main/H3C%20R2%2BProG/1.md
CVE ID: CVE-2025-4998 State: PUBLISHED Published: 2025-05-20T20:31:04.319Z Last Updated: 2025-05-21T14:03:34.800Z Severity: N/A (CVSS 6.8 AV:N/AC:L/Au:S/C:N/I:N/A:C) Vendors: H3C Products: Magic R200G Problem Types: CWE-404 Description: A vulnerability has been found in H3C Magic R200G up to 100R002 and classified as problematic. Affected by this vulnerability is the function Edit_BasicSSID/Edit_BasicSSID_5G/SetAPWifiorLedInfoById/SetMobileAPInfoById/Asp_SetTimingtimeWifiAndLed/AddMacList/EditMacList/AddWlanMacList/EditWlanMacList of the file /goform/aspForm of the component HTTP POST Request Handler. The manipulation of the argument param leads to denial of service. The attack can be launch
t HTTP POST Request Handler. The manipulation of the argument param leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309649 - https://vuldb.com/?ctiid.309649 - https://vuldb.com/?submit.563583 - https://github.com/CH13hh/tmp_store_cc/blob/main/H3C%20Magic%20R200G/1.md
CVE ID: CVE-2025-4999 State: PUBLISHED Published: 2025-05-20T21:00:11.127Z Last Updated: 2025-05-21T14:02:17.528Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Linksys Products: FGW3000-AH, FGW3000-HK Problem Types: CWE-77, CWE-74 Description: A vulnerability was found in Linksys FGW3000-AH and FGW3000-HK up to 1.0.17.000000 and classified as critical. Affected by this issue is the function sub_4153FC of the file /cgi-bin/sysconf.cgi of the component HTTP POST Request Handler. The manipulation of the argument supplicant_rnd_id_en leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contact
he attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309650 - https://vuldb.com/?ctiid.309650 - https://vuldb.com/?submit.565909 - https://github.com/CH13hh/tmp_store_cc/blob/main/FGW3000/1.md - https://www.linksys.com/
CVE ID: CVE-2025-50008 State: PUBLISHED Published: 2025-06-20T15:04:04.919Z Last Updated: 2025-06-23T15:31:31.216Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: cscode Products: WooCommerce Manager &#8211; Customize and Control Cart page, Add to Cart button, Checkout fields easily Problem Types: CWE-862 Description: Missing Authorization vulnerability in cscode WooCommerce Manager &#8211; Customize and Control Cart page, Add to Cart button, Checkout fields easily allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WooCommerce Manager &#8211; Customize and Control Cart page, Add to Cart button, Checkout fields easily:
s issue affects WooCommerce Manager &#8211; Customize and Control Cart page, Add to Cart button, Checkout fields easily: from n/a through 1.2.4.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/innovs-woo-manager/vulnerability/wordpress-woocommerce-manager-customize-and-control-cart-page-add-to-cart-button-checkout-fields-easily-plugin-1-2-4-5-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-50009 State: PUBLISHED Published: 2025-06-20T15:04:04.413Z Last Updated: 2025-06-23T16:19:15.655Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Climax Themes Products: Kata Plus Problem Types: CWE-862 Description: Missing Authorization vulnerability in Climax Themes Kata Plus allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Kata Plus: from n/a through 1.5.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/kata-plus/vulnerability/wordpress-kata-plus-plugin-1-5-3-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-50010 State: PUBLISHED Published: 2025-06-20T15:04:03.937Z Last Updated: 2025-06-23T16:19:21.303Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: Zapier Products: Zapier for WordPress Problem Types: CWE-862 Description: Missing Authorization vulnerability in Zapier Zapier for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Zapier for WordPress: from n/a through 1.5.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/zapier/vulnerability/wordpress-zapier-for-wordpress-plugin-1-5-2-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-50011 State: PUBLISHED Published: 2025-06-20T15:04:03.446Z Last Updated: 2025-06-23T16:19:26.915Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Félix Martínez Products: Recipes manager - WPH Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Félix Martínez Recipes manager - WPH allows Stored XSS. This issue affects Recipes manager - WPH: from n/a through 1.0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wph-recipes-manager/vulnerability/wordpress-plugin-recipes-manager-wph-1-0-4-cross-
hstack.com/database/wordpress/plugin/wph-recipes-manager/vulnerability/wordpress-plugin-recipes-manager-wph-1-0-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-50012 State: PUBLISHED Published: 2025-06-20T15:04:02.968Z Last Updated: 2025-06-23T16:19:32.761Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: fridaysystems Products: Inventory Presser Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fridaysystems Inventory Presser allows Stored XSS. This issue affects Inventory Presser: from n/a through 15.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/inventory-presser/vulnerability/wordpress-inventory-presser-plugin-15-0-0-cross-site-scripting-x
tabase/wordpress/plugin/inventory-presser/vulnerability/wordpress-inventory-presser-plugin-15-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-50013 State: PUBLISHED Published: 2025-06-20T15:04:02.485Z Last Updated: 2025-06-23T16:19:38.650Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Jason Judge Products: CSV Importer Improved Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jason Judge CSV Importer Improved allows Stored XSS. This issue affects CSV Importer Improved: from n/a through 0.6.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/csv-importer-improved/vulnerability/wordpress-csv-importer-improved-plugin-0-6-1-cross-si
.com/database/wordpress/plugin/csv-importer-improved/vulnerability/wordpress-csv-importer-improved-plugin-0-6-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-50014 State: PUBLISHED Published: 2025-06-20T15:04:01.831Z Last Updated: 2025-06-23T16:19:44.241Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: iamapinan Products: PDPA Consent for Thailand Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in iamapinan PDPA Consent for Thailand allows Stored XSS. This issue affects PDPA Consent for Thailand: from n/a through 1.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/pdpa-consent/vulnerability/wordpress-pdpa-consent-for-thailand-plugin-1-1-1-cross
tchstack.com/database/wordpress/plugin/pdpa-consent/vulnerability/wordpress-pdpa-consent-for-thailand-plugin-1-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-50015 State: PUBLISHED Published: 2025-06-20T15:04:01.287Z Last Updated: 2025-06-23T16:19:49.996Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Rodrigo Bastos Products: Hand Talk Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rodrigo Bastos Hand Talk allows Stored XSS. This issue affects Hand Talk: from n/a through 6.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/handtalk/vulnerability/wordpress-hand-talk-plugin-6-0-cross-site-scripting-xss-vulnerability?_s_id=cve