Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-11841 State: PUBLISHED Published: 2025-11-04T01:50:26.195Z Last Updated: 2025-11-04T20:49:06.880Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: wpsoul Products: Greenshift – animation and page builder blocks Problem Types: CWE-79 Description: The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Chart Data attributes in all versions up to, and including, 12.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute
nticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ee2455fb-69b9-4dbc-9c59-fd2cdd5b4d0f?source=cve - https://plugins.trac.wordpress.org/changeset/3386004/
CVE ID: CVE-2025-11842 State: PUBLISHED Published: 2025-10-16T15:32:14.804Z Last Updated: 2025-10-16T16:19:36.391Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:ND/RL:OF/RC:C) Vendors: Shazwazza Products: Smidge Problem Types: CWE-22 Description: A security vulnerability has been detected in Shazwazza Smidge up to 4.5.1. The impacted element is an unknown function of the component Bundle Handler. The manipulation of the argument Version leads to path traversal. Remote exploitation of the attack is possible. Upgrading to version 4.6.0 is sufficient to resolve this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
ue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.328776 - https://vuldb.com/?ctiid.328776 - https://vuldb.com/?submit.664905 - https://github.com/asust9/smidge-vuln?tab=readme-ov-file - https://github.com/Shazwazza/Smidge/releases/tag/v4.6.0
CVE ID: CVE-2025-11843 State: PUBLISHED Published: 2025-10-31T09:43:08.597Z Last Updated: 2025-10-31T18:52:36.823Z Vendors: Therefore Corporation GmbH Products: Therefore Online and Therefore On-Premises Problem Types: CWE-290 Description: Therefore Corporation GmbH has recently become aware that Therefore™ Online and Therefore™ On-Premises contain an account impersonation vulnerability. A malicious user may potentially be able to impersonate the web service account or the account of a service using the API when connecting to the Therefore™ Server. If the malicious user gains this impersonation user access, then it is possible for them to access the documents stored in Therefore™. This imper
ns this impersonation user access, then it is possible for them to access the documents stored in Therefore™. This impersonation is at application level (Therefore access level), not the operating system level. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.canon-europe.com/psirt/advisory-information/
CVE ID: CVE-2025-11844 State: PUBLISHED Published: 2025-10-22T13:13:55.882Z Last Updated: 2025-10-22T14:09:51.303Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: huggingface Products: huggingface/smolagents Problem Types: CWE-643 Description: Hugging Face Smolagents version 1.20.0 contains an XPath injection vulnerability in the search_item_ctrl_f function located in src/smolagents/vision_web_browser.py. The function constructs an XPath query by directly concatenating user-supplied input into the XPath expression without proper sanitization or escaping. This allows an attacker to inject malicious XPath syntax that can alter the intended query logic. The vul
n or escaping. This allows an attacker to inject malicious XPath syntax that can alter the intended query logic. The vulnerability enables attackers to bypass search filters, access unintended DOM elements, and disrupt web automation workflows. This can lead to information disclosure, manipulation of AI agent interactions, and compromise the reliability of automated web tasks. The issue is fixed in version 1.22.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/01ab4405-9bca-4b26-b7a3-5ca1863a69b4 - https://github.com/huggingface/smolagents/commit/f570ed5e17999d4cf7d5e79c2830fbaefab8a794
CVE ID: CVE-2025-11849 State: PUBLISHED Published: 2025-10-17T05:00:06.278Z Last Updated: 2025-10-17T14:24:39.437Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:H/E:P) Vendors: n/a Products: mammoth, Mammoth, org.zwobble.mammoth:mammoth Problem Types: CWE-22 Description: Versions of the package mammoth from 0.3.25 and before 1.11.0; versions of the package mammoth from 0.3.25 and before 1.11.0; versions of the package mammoth before 1.11.0; versions of the package org.zwobble.mammoth:mammoth before 1.11.0 are vulnerable to Directory Traversal due to the lack of path or file type validation when processing a docx file containing an image with an external link (r:link
o the lack of path or file type validation when processing a docx file containing an image with an external link (r:link attribute instead of embedded r:embed). The library resolves the URI to a file path and after reading, the content is encoded as base64 and included in the HTML output as a data URI. An attacker can read arbitrary files on the system where the conversion is performed or cause an excessive resources consumption by crafting a docx file that links to special device files such as /dev/random or /dev/zero. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-JS-MAMMOTH-13554470 - https://security.snyk.io/vuln/SNYK-PYTHON-MAMMOTH-13
erences: - https://security.snyk.io/vuln/SNYK-JS-MAMMOTH-13554470 - https://security.snyk.io/vuln/SNYK-PYTHON-MAMMOTH-13561967 - https://security.snyk.io/vuln/SNYK-DOTNET-MAMMOTH-13561968 - https://security.snyk.io/vuln/SNYK-JAVA-ORGZWOBBLEMAMMOTH-13561969 - https://gist.github.com/AudunWA/4d690d9ae5efdafe7cf71d9c2ee90a10 - https://github.com/mwilliamson/mammoth.js/commit/c54aaeb43a7941317c1f3c119ffa92090f988820
CVE ID: CVE-2025-11851 State: PUBLISHED Published: 2025-10-16T16:02:06.073Z Last Updated: 2025-10-16T17:25:36.075Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: Apeman Products: ID71 Problem Types: CWE-79, CWE-94 Description: A vulnerability has been found in Apeman ID71 EN75.8.53.20. The affected element is an unknown function of the file /set_alias.cgi. Such manipulation of the argument alias leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: Refer
ted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.328797 - https://vuldb.com/?ctiid.328797 - https://vuldb.com/?submit.668771 - https://github.com/juliourena/APEMAN-Camera-PoCs/blob/main/XSS/apeman_id71_xss_poc.py
CVE ID: CVE-2025-11852 State: PUBLISHED Published: 2025-10-16T19:02:05.129Z Last Updated: 2025-10-16T19:58:41.348Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:W/RC:R) Vendors: Apeman Products: ID71 Problem Types: CWE-306, CWE-287 Description: A vulnerability was found in Apeman ID71 218.53.203.117. The impacted element is an unknown function of the file /onvif/device_service of the component ONVIF Service. Performing manipulation results in missing authentication. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way. Addition
public and could be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.328798 - https://vuldb.com/?ctiid.328798 - https://vuldb.com/?submit.668899 - https://github.com/juliourena/APEMAN-Camera-PoCs/blob/main/RTSP/RTSP_Unauthenticated.md
CVE ID: CVE-2025-11853 State: PUBLISHED Published: 2025-10-16T19:02:07.747Z Last Updated: 2025-10-16T19:56:06.504Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Sismics Products: Teedy Problem Types: CWE-284, CWE-266 Description: A vulnerability was determined in Sismics Teedy up to 1.11. This affects an unknown function of the file /api/file of the component API Endpoint. Executing manipulation can lead to improper access controls. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnri
or was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.328799 - https://vuldb.com/?ctiid.328799 - https://vuldb.com/?submit.657060 - https://docs.google.com/document/d/1PzTPCtavuLx_GwREvshGMQ8N5zFDmpe-OAR5kZwOZfE/edit?usp=sharing
CVE ID: CVE-2025-11854 State: REJECTED Published: N/A Last Updated: 2025-10-16T16:43:49.157Z Description: No description available.
CVE ID: CVE-2025-11855 State: PUBLISHED Published: 2025-11-11T06:00:08.010Z Last Updated: 2025-11-13T18:02:50.228Z Vendors: Unknown Products: age-restriction Problem Types: CWE-269 Improper Privilege Management Description: The age-restriction WordPress plugin through 3.0.2 does not have authorisation in the age_restrictionRemoteSupportRequest function, allowing any authenticated users, such as subscriber to create an admin user with a hardcoded username and arbitrary password. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/1a16440e-817f-4ec2-9c70-261f6b63fb8a/
CVE ID: CVE-2025-11856 State: PUBLISHED Published: 2025-11-11T03:30:42.658Z Last Updated: 2025-11-14T15:31:36.944Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: eventbee Products: Eventbee Ticketing Widget Problem Types: CWE-79 Description: The Eventbee Ticketing Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'eventbeeticketwidget' shortcode in all versions up to, and including, 1.0. This is due to the plugin not properly sanitizing user input and output of several parameters. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will exec
uthenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/7c439193-cc7d-4e40-8585-87cb2c40fe9b?source=cve - https://plugins.trac.wordpress.org/browser/eventbee-ticketing-widget/tags/1.0/ticket-widget.php#L23
CVE ID: CVE-2025-11857 State: PUBLISHED Published: 2025-10-18T05:41:56.057Z Last Updated: 2025-10-20T18:59:33.908Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: mxp Products: XX2WP Integration Tools Problem Types: CWE-79 Description: The XX2WP Integration Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mxp_fb2wp_display_embed' shortcode in all versions up to, and including, 1.9.9. This is due to the plugin not properly sanitizing user input and output of the 'post_id' parameter. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will exe
authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/5cbb28e2-a7a1-4e33-93e5-872d6f2e00ec?source=cve - https://plugins.trac.wordpress.org/browser/fb2wp-integration-tools/tags/1.9.9/index.php#L302 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3379625%40fb2wp-integration-tools&new=3379625%40fb2wp-integration-tools&sfp_email=&sfph_mail=
CVE ID: CVE-2025-11859 State: PUBLISHED Published: 2025-11-11T03:30:47.724Z Last Updated: 2025-11-12T20:05:22.203Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: coenjacobs Products: Paypal Donation Shortcode Problem Types: CWE-79 Description: The Paypal Donation Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'paypal' shortcode in all versions up to, and including, 0.1. This is due to the plugin not properly sanitizing user input and output of the 'title' and 'text' parameters. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will e
r authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b66ab7c4-7963-424f-afec-0e52b987c6b3?source=cve - https://plugins.trac.wordpress.org/browser/paypal-donation-shortcode/tags/0.1/paypal-donation-shortcode.php#L23
CVE ID: CVE-2025-11860 State: PUBLISHED Published: 2025-11-11T03:30:49.264Z Last Updated: 2025-11-14T15:30:18.210Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: caselock Products: Twitter Feed Problem Types: CWE-79 Description: The Twitter Feed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ottwitter_feed' shortcode in all versions up to, and including, 1.3.1. This is due to the plugin not properly sanitizing user input and output of the 'width' and 'height' parameters. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever
attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ce182e57-a9d4-4c4b-b124-e6626ccdd712?source=cve - https://plugins.trac.wordpress.org/browser/ot-twitter-feed/trunk/ottwitterfeed-shortcode.php#L27
CVE ID: CVE-2025-11862 State: PUBLISHED Published: 2025-11-11T13:43:10.584Z Last Updated: 2025-11-12T20:03:32.814Z Vendors: Rockwell Automation Products: Verve Asset Manager Problem Types: CWE-863 Description: A security issue was discovered within Verve Asset Manager allowing unauthorized read-only users to read, update, and delete users via the API. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1759.html
CVE ID: CVE-2025-11863 State: PUBLISHED Published: 2025-11-11T03:30:35.537Z Last Updated: 2025-11-12T20:08:29.376Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: mindstien Products: My Geo Posts Free Problem Types: CWE-79 Description: The My Geo Posts Free plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mygeo_city' shortcode in all versions up to, and including, 1.2. This is due to the plugin not properly sanitizing user input or escaping output of the 'default' shortcode attribute. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execut
henticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/374a26dd-dd62-4583-8aff-90e5ae6b7468?source=cve - https://plugins.trac.wordpress.org/browser/my-geo-posts-free/tags/1.2/inc/shortcodes.php#L22
CVE ID: CVE-2025-11864 State: PUBLISHED Published: 2025-10-16T21:02:05.652Z Last Updated: 2025-10-17T14:10:35.740Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:ND/RL:ND/RC:UR) Vendors: NucleoidAI Products: Nucleoid Problem Types: CWE-918 Description: A vulnerability was identified in NucleoidAI Nucleoid up to 0.7.10. The impacted element is the function extension.apply of the file /src/cluster.ts of the component Outbound Request Handler. Such manipulation of the argument https/ip/port/path/headers leads to server-side request forgery. The attack may be performed from remote. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.328809 - https://vuldb
om remote. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.328809 - https://vuldb.com/?ctiid.328809 - https://vuldb.com/?submit.669928 - https://github.com/lakshayyverma/CVE-Discovery/blob/main/Nucleoid.md
CVE ID: CVE-2025-11865 State: PUBLISHED Published: 2025-11-15T08:03:59.731Z Last Updated: 2025-11-17T20:12:20.808Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-863 Description: An issue has been discovered in GitLab EE affecting all versions from 18.1 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that, under certain circumstances, could have allowed an attacker to remove Duo flows of another user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://about.gitlab.com/releases/2025/11/12/patch-release-gitlab-18-5-2-released/ - https://gitlab.com/gitlab-org/gitlab/-/issues/561399
CVE ID: CVE-2025-11866 State: PUBLISHED Published: 2025-10-22T08:27:08.571Z Last Updated: 2025-10-22T13:21:18.551Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: aurelienpierre Products: Photographers galleries Problem Types: CWE-79 Description: The Photographers galleries plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple shortcode attributes (`w`, `h`, `raw_css`, `look`, etc.) in all versions up to, and including, 1.1.8. This is due to the plugin not properly sanitizing user input or escaping output when inserting these values into HTML attributes and inline styles. This makes it possible for authenticated attackers, with contr
ting these values into HTML attributes and inline styles. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9300af5d-7886-4f4e-8454-0dcf2d895fee?source=cve - https://plugins.trac.wordpress.org/browser/photographers-galleries/tags/1.1.8/includes/shortcodes.php#L61
CVE ID: CVE-2025-11867 State: PUBLISHED Published: 2025-10-22T08:27:09.739Z Last Updated: 2025-10-22T14:27:59.962Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: vbog Products: Bg Book Publisher Problem Types: CWE-79 Description: The Bg Book Publisher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `book_author` post meta, rendered through the `[book_author]` shortcode, in all versions up to, and including, 1.25. This is due to the plugin not properly escaping the meta value before output. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will
or authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/af181085-0a6b-4e87-b250-1fb4574d808d?source=cve - https://plugins.trac.wordpress.org/browser/bg-book-publisher/tags/1.25/bg_bpub.php#L121
CVE ID: CVE-2025-11868 State: PUBLISHED Published: 2025-11-18T08:27:38.282Z Last Updated: 2025-11-18T14:23:23.353Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: everviz Products: everviz – Charts, Maps and Tables – Interactive and responsive Problem Types: CWE-79 Description: The everviz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `everviz` shortcode attributes in versions up to, and including, 1.1. This is due to the plugin not properly sanitizing user input or escaping output when building a `<div id=...>` from the `type` and `hash` attributes. This makes it possible for authenticated attackers, with contributor-level access
from the `type` and `hash` attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f3b265d9-dddd-4cf7-8d1a-980fdd17777d?source=cve - https://plugins.trac.wordpress.org/browser/everviz/tags/1.0/highcharts-editor.php#L136
CVE ID: CVE-2025-11869 State: PUBLISHED Published: 2025-11-11T03:30:45.729Z Last Updated: 2025-11-12T20:05:51.447Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: simonpedge Products: Precise Columns Problem Types: CWE-79 Description: The Precise Columns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `wrap_id` shortcode attribute in all versions up to, and including, 1.0. This is due to the plugin not properly sanitizing user input or escaping output when inserting the wrapper ID into the generated HTML. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in p
s it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/909afec0-7ff5-430d-814d-d75fcfcd6232?source=cve - https://plugins.trac.wordpress.org/browser/precise-columns/tags/1.0/precise-columns.php#L522
CVE ID: CVE-2025-11870 State: PUBLISHED Published: 2025-10-22T08:27:10.113Z Last Updated: 2025-10-22T14:20:17.268Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: dmbarber Products: Simple Business Data Problem Types: CWE-79 Description: The Simple Business Data plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'simple_business_data' shortcode attributes in all versions up to, and including, 1.0.1. This is due to the plugin not properly sanitizing user input or escaping output when embedding the `type` attribute into the `class` attribute in rendered HTML. This makes it possible for authenticated attackers, with contributor-level access a
`class` attribute in rendered HTML. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/bd2754f9-11f7-4690-99dd-2204e69bf14b?source=cve - https://plugins.trac.wordpress.org/browser/simple-business-data/tags/1.0.1/templates/simple-business-data-template.php#L14