Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ble for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/1f818aad-8d05-4665-a7dc-50bc56cbde5f?source=cve - https://plugins.trac.wordpress.org/browser/sql-chart-builder/tags/2.3.6/functions.php#L469
CVE ID: CVE-2024-11431 State: PUBLISHED Published: 2024-11-28T08:47:31.809Z Last Updated: 2024-11-29T15:26:58.293Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: ragicsupport Products: Ragic Shortcode Problem Types: CWE-79 Description: The Ragic Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ragic' shortcode in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses a
ontributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4afa0148-ad08-493d-9642-0edbde5e8349?source=cve - https://plugins.trac.wordpress.org/browser/ragic-shortcode/trunk/ragic.php - https://wordpress.org/plugins/ragic-shortcode/ - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3194610%40ragic-shortcode&new=3194610%40ragic-shortcode&sfp_email=&sfph_mail=
CVE ID: CVE-2024-11432 State: PUBLISHED Published: 2024-11-21T02:06:30.420Z Last Updated: 2024-11-21T11:30:10.506Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: alexvtn Products: SuevaFree Essential Kit Problem Types: CWE-79 Description: The SuevaFree Essential Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'counter' shortcode in all versions up to, and including, 1.1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a
tackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3c55e673-93af-403e-a690-2ae02c63541f?source=cve - https://plugins.trac.wordpress.org/browser/suevafree-essential-kit/trunk/core/shortcodes/counter.php - https://wordpress.org/plugins/suevafree-essential-kit/
CVE ID: CVE-2024-11433 State: PUBLISHED Published: 2024-12-12T03:23:07.396Z Last Updated: 2024-12-12T16:39:11.760Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: surbma Products: Surbma | SalesAutopilot Shortcode Problem Types: CWE-79 Description: The Surbma | SalesAutopilot Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sa-form' shortcode in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will ex
authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/626c82a1-4157-4294-9563-08accccf2a10?source=cve - https://plugins.trac.wordpress.org/browser/surbma-salesautopilot-shortcode/trunk/surbma-salesautopilot-shortcode.php - https://wordpress.org/plugins/surbma-salesautopilot-shortcode/
CVE ID: CVE-2024-11434 State: PUBLISHED Published: 2025-01-07T04:21:56.465Z Last Updated: 2025-01-07T16:25:44.059Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: intergotelecom Products: WP – Bulk SMS – by SMS.to Problem Types: CWE-79 Description: The WP – Bulk SMS – by SMS.to plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.0.12 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking
rary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/17acbf24-b0ae-42c8-af8f-17e82213507d?source=cve - https://plugins.trac.wordpress.org/browser/wp-bulk-sms/trunk/includes/admin/outbox/class-wpsmstobulk-outbox.php#L171
CVE ID: CVE-2024-11435 State: PUBLISHED Published: 2024-11-21T02:06:33.066Z Last Updated: 2024-11-21T11:30:10.383Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: goback2 Products: salavat counter Plugin Problem Types: CWE-79 Description: The salavat counter Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 0.9.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Add
ts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3ecdd962-7d85-4a60-956d-1e8a49507ab2?source=cve - https://plugins.trac.wordpress.org/browser/salavat-counter/trunk/wp-table-class.php#L85
CVE ID: CVE-2024-11436 State: PUBLISHED Published: 2024-12-07T01:45:48.433Z Last Updated: 2024-12-09T16:23:16.692Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: genetechproducts Products: Drag & Drop Builder, Human Face Detector, Pre-built Templates, Spam Protection, User Email Notifications & more! Problem Types: CWE-79 Description: The Drag & Drop Builder, Human Face Detector, Pre-built Templates, Spam Protection, User Email Notifications & more! plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.4.19 due to insufficient input sanitization and output escaping. This makes i
er in all versions up to, and including, 1.4.19 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/125a1d8d-8cd9-439c-b765-198ad369f987?source=cve - https://plugins.trac.wordpress.org/changeset/3202800/
CVE ID: CVE-2024-11437 State: PUBLISHED Published: 2025-01-07T03:21:53.279Z Last Updated: 2025-01-07T16:30:53.130Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: solwininfotech Products: Timeline Designer Problem Types: CWE-89 Description: The Timeline Designer plugin for WordPress is vulnerable to SQL Injection via the 's' parameter in all versions up to, and including, 1.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information
tackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/12349179-e61c-42b8-b0ff-5b49fc4906c1?source=cve - https://plugins.trac.wordpress.org/browser/timeline-designer/trunk/admin/assets/admin-shortcode-list.php#L41
CVE ID: CVE-2024-11438 State: PUBLISHED Published: 2024-11-21T05:33:49.353Z Last Updated: 2024-11-21T11:30:09.039Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: jburleigh1 Products: StreamWeasels Online Status Bar Problem Types: CWE-79 Description: The StreamWeasels Online Status Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sw-status-bar' shortcode in all versions up to, and including, 2.1.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that
ible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/1cfbb817-1bb2-4829-9a63-d8e579053000?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3192626%40stream-status-for-twitch&new=3192626%40stream-status-for-twitch&sfp_email=&sfph_mail=
CVE ID: CVE-2024-11439 State: PUBLISHED Published: 2024-12-18T02:08:58.891Z Last Updated: 2024-12-18T16:36:59.055Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: aklaren Products: ScanCircle Problem Types: CWE-79 Description: The ScanCircle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'scancircle' shortcode in all versions up to, and including, 2.9.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an inject
or-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/27cc6931-086c-43a5-965b-2a19f15bb356?source=cve - https://plugins.trac.wordpress.org/browser/scancircle/trunk/scancircle.php - https://wordpress.org/plugins/scancircle/ - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3202428%40scancircle&new=3202428%40scancircle&sfp_email=&sfph_mail=
CVE ID: CVE-2024-11440 State: PUBLISHED Published: 2024-11-21T02:06:50.169Z Last Updated: 2024-11-21T11:30:09.438Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: greyowl0015 Products: Grey Owl Lightbox Problem Types: CWE-79 Description: The Grey Owl Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gol_button' shortcode in all versions up to, and including, 1.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user
rs, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/faf45a8d-1017-476e-8af9-2fbe250e8e19?source=cve - https://plugins.trac.wordpress.org/browser/grey-owl-lightbox/trunk/functions/functions.php#L146 - https://wordpress.org/plugins/grey-owl-lightbox/
CVE ID: CVE-2024-11441 State: PUBLISHED Published: 2025-03-20T10:08:46.700Z Last Updated: 2025-03-20T19:04:15.261Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: serge-chat Products: serge-chat/serge Problem Types: CWE-79 Description: A stored cross-site scripting (XSS) vulnerability exists in Serge version 0.9.0. The vulnerability is due to improper neutralization of input during web page generation in the chat prompt. An attacker can exploit this vulnerability by sending a crafted message containing malicious HTML/JavaScript code, which will be stored and executed whenever the chat is accessed, leading to unintended content being shown to the user and pot
will be stored and executed whenever the chat is accessed, leading to unintended content being shown to the user and potential phishing attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/ae76d1ea-21a4-456d-bef2-331aef3ea376
CVE ID: CVE-2024-11442 State: PUBLISHED Published: 2024-12-12T03:23:03.900Z Last Updated: 2024-12-12T15:16:54.157Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: gopiplus Products: Horizontal scroll image slideshow Problem Types: CWE-79 Description: The Horizontal scroll image slideshow plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'horizontal-scroll-image-slideshow' shortcode in all versions up to, and including, 10.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web
s. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/050d0352-c0a5-41b0-bf40-914f6bf7cba4?source=cve - https://plugins.trac.wordpress.org/browser/horizontal-scroll-image-slideshow/trunk/horizontal-scroll-image-slideshow.php - https://wordpress.org/plugins/horizontal-scroll-image-slideshow/
CVE ID: CVE-2024-11443 State: PUBLISHED Published: 2024-12-12T03:23:08.544Z Last Updated: 2024-12-12T16:28:31.909Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: decollete Products: de:branding Problem Types: CWE-862 Description: The de:branding plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the debranding_save() function in all versions up to, and including, 1.0.2. This makes it possible for authenticated attackers, with subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for re
ss and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a827cea5-e8c2-47dd-81d7-e3700c19c8da?source=cve - https://plugins.trac.wordpress.org/browser/debranding/trunk/classes/class-debrand-ajax.php#L6 - https://plugins.trac.wordpress.org/browser/debranding/trunk/classes/class-debrand-ajax.php#L19
CVE ID: CVE-2024-11444 State: PUBLISHED Published: 2024-12-06T08:24:50.320Z Last Updated: 2024-12-06T14:18:26.850Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: cluevo Products: CLUEVO LMS, E-Learning Platform Problem Types: CWE-352 Description: The CLUEVO LMS, E-Learning Platform plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.13.2. This is due to missing or incorrect nonce validation on the cluevo_render_module_ui() function. This makes it possible for unauthenticated attackers to delete modules via a forged request granted they can trick a site administrator into performing an action such as click
delete modules via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/2a3056d4-5ee9-4b31-9ef8-0e55f470ad23?source=cve - https://plugins.trac.wordpress.org/browser/cluevo-lms/tags/1.13.2/functions/functions.module-management.inc.php#L925 - https://plugins.trac.wordpress.org/browser/cluevo-lms/tags/1.13.2/functions/functions.module-management.inc.php#L928
CVE ID: CVE-2024-11445 State: PUBLISHED Published: 2025-01-07T04:21:59.744Z Last Updated: 2025-01-07T16:23:47.156Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: sazzadh Products: Image Magnify Problem Types: CWE-79 Description: The Image Magnify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'image_magnify' shortcode in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an
ntributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/55838de5-0795-429b-be87-a0d57b29e471?source=cve - https://plugins.trac.wordpress.org/browser/image-magnify/trunk/image-magnify.php - https://wordpress.org/plugins/image-magnify/
CVE ID: CVE-2024-11446 State: PUBLISHED Published: 2024-11-23T06:54:53.364Z Last Updated: 2024-11-23T13:18:20.147Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: mpol Products: Chessgame Shizzle Problem Types: CWE-79 Description: The Chessgame Shizzle plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'cs_nonce' parameter in all versions up to, and including, 1.3.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional A
es that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3d667f97-5072-4119-84d8-7104fd63559c?source=cve - https://plugins.trac.wordpress.org/browser/chessgame-shizzle/tags/1.3.0/thirdparty/pgn4web/cs-preview-iframe.php#L29 - https://plugins.trac.wordpress.org/changeset/3194845/chessgame-shizzle/trunk/thirdparty/pgn4web/cs-preview-iframe.php
CVE ID: CVE-2024-11447 State: PUBLISHED Published: 2024-11-21T02:06:18.381Z Last Updated: 2025-04-14T19:01:00.909Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: peepso Products: Community by PeepSo – Download from PeepSo.com Problem Types: CWE-79 Description: The Community by PeepSo – Download from PeepSo.com plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘filter’ parameter in all versions up to, and including, 7.0.3.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into p
thenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/049a36b1-4e24-4ac9-a594-9cabdc0dfe0f?source=cve - https://plugins.trac.wordpress.org/browser/peepso-core/trunk/classes/template.php#L68 - https://plugins.trac.wordpress.org/browser/peepso-core/tags/6.4.6.2/templates/activity/activity-stream-filters-simple.php#L131 - https://plugins.trac.wordpress.org/browser/peepso-core/tags/6.4.6.2/templates/activity/activity-stream-filters.php#L179 - https://www.peepso.c
ordpress.org/browser/peepso-core/tags/6.4.6.2/templates/activity/activity-stream-filters.php#L179 - https://www.peepso.com/7.0.4.0/
CVE ID: CVE-2024-11449 State: PUBLISHED Published: 2025-03-20T10:08:53.650Z Last Updated: 2025-03-20T19:01:08.620Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: haotian-liu Products: haotian-liu/llava Problem Types: CWE-918 Description: A vulnerability in haotian-liu/llava version 1.2.0 (LLaVA-1.6) allows for Server-Side Request Forgery (SSRF) through the /run/predict endpoint. An attacker can gain unauthorized access to internal networks or the AWS metadata endpoint by sending crafted requests that exploit insufficient validation of the path parameter. This flaw can lead to unauthorized network access, sensitive data exposure, and further exploitation withi
th parameter. This flaw can lead to unauthorized network access, sensitive data exposure, and further exploitation within the network. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/e96aba28-d564-4ecb-ab77-350511d2e1ee
CVE ID: CVE-2024-11450 State: PUBLISHED Published: 2024-12-06T08:24:53.990Z Last Updated: 2024-12-06T17:35:29.981Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: onlyoffice Products: ONLYOFFICE Docs Problem Types: CWE-79 Description: The ONLYOFFICE Docs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'onlyoffice' shortcode in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user acces
ith contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/80b71264-5b0f-41cb-86c1-a052d1976597?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3200917%40onlyoffice&new=3200917%40onlyoffice
CVE ID: CVE-2024-11451 State: PUBLISHED Published: 2024-12-07T01:45:49.685Z Last Updated: 2024-12-09T18:04:05.301Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: harshitpeer Products: Zooom Problem Types: CWE-79 Description: The Zooom plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'zooom' shortcode in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Ad
cess and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/6bd15878-a290-4613-83d9-011d60bb0233?source=cve - https://plugins.trac.wordpress.org/browser/zooom/trunk/zooom.php - https://wordpress.org/plugins/zooom/