Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-4639 State: PUBLISHED Published: 2025-05-14T18:04:11.726Z Last Updated: 2025-05-14T20:53:09.395Z Vendors: Peergos Products: Peergos Problem Types: CWE-611 Description: CWE-611 Improper Restriction of XML External Entity Reference in the getDocumentBuilder() method of WebDav servlet in Peergos. This issue affects Peergos through version 1.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Peergos/Peergos/pull/1267
CVE ID: CVE-2025-4640 State: PUBLISHED Published: 2025-05-14T18:06:51.766Z Last Updated: 2025-05-15T13:47:49.560Z Vendors: PointCloudLibrary Products: pcl Problem Types: CWE-787 Description: Out-of-bounds Write vulnerability in PointCloudLibrary pcl allows Overflow Buffers. Since version 1.14.0, PCL by default uses a zlib installation from the system, unless the user sets WITH_SYSTEM_ZLIB=FALSE. So this potential vulnerability is only relevant if the PCL version is older than 1.14.0 or the user specifically requests to not use the system zlib. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/PointCloudLibrary/pcl/pull/6246 - https://github.com/PointCloudLib
SA ADP Vulnrichment: References: - https://github.com/PointCloudLibrary/pcl/pull/6246 - https://github.com/PointCloudLibrary/pcl/blob/master/surface/CMakeLists.txt#L70 - https://github.com/PointCloudLibrary/pcl/commit/502bd2b013ce635f21632d523aa8cf2e04f7b7ac
CVE ID: CVE-2025-4641 State: PUBLISHED Published: 2025-05-14T18:09:26.105Z Last Updated: 2025-05-14T20:49:57.890Z Vendors: bonigarcia Products: webdrivermanager Problem Types: CWE-611 Description: Improper Restriction of XML External Entity Reference vulnerability in bonigarcia webdrivermanager WebDriverManager on Windows, MacOS, Linux (XML parsing components modules) allows Data Serialization External Entities Blowup. This vulnerability is associated with program files src/main/java/io/github/bonigarcia/wdm/WebDriverManager.java. This issue affects webdrivermanager: from 1.0.0 before 6.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/bonigarcia/webdri
.0.0 before 6.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/bonigarcia/webdrivermanager/pull/1458
CVE ID: CVE-2025-4642 State: REJECTED Published: N/A Last Updated: 2025-05-22T22:15:57.744Z Description: No description available.
CVE ID: CVE-2025-4643 State: PUBLISHED Published: 2025-08-29T10:01:09.128Z Last Updated: 2025-08-29T11:54:27.895Z Vendors: Payload CMS Products: Payload Problem Types: CWE-613 Description: Payload uses JSON Web Tokens (JWT) for authentication. After log out JWT is not invalidated, which allows an attacker who has stolen or intercepted token to freely reuse it until expiration date (which is by default set to 2 hours, but can be changed). This issue has been fixed in version 3.44.0 of Payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2025/08/CVE-2025-4643 - https://payloadcms.com - https://github.com/payloadcms/payload
CVE ID: CVE-2025-4644 State: PUBLISHED Published: 2025-08-29T10:01:13.697Z Last Updated: 2025-08-29T11:53:31.892Z Vendors: Payload CMS Products: Payload Problem Types: CWE-384 Description: A Session Fixation vulnerability existed in Payload's SQLite adapter due to identifier reuse during account creation. A malicious attacker could create a new account, save its JSON Web Token (JWT), and then delete the account, which did not invalidate the JWT. As a result, the next newly created user would receive the same identifier, allowing the attacker to reuse the JWT to authenticate and perform actions as that user. This issue has been fixed in version 3.44.0 of Payload. Additional Analyst Notes: - C
and perform actions as that user. This issue has been fixed in version 3.44.0 of Payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2025/08/CVE-2025-4643 - https://payloadcms.com - https://github.com/payloadcms/payload
CVE ID: CVE-2025-4645 State: PUBLISHED Published: 2025-11-11T06:45:29.674Z Last Updated: 2025-11-12T04:57:42.720Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Axis Communications AB Products: AXIS OS Problem Types: CWE-1287 Description: An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.axis.com/dam/public/69/47/
CAP application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.axis.com/dam/public/69/47/ff/cve-2025-4645pdf-en-US-504211.pdf
CVE ID: CVE-2025-4646 State: PUBLISHED Published: 2025-05-13T09:17:35.146Z Last Updated: 2025-10-08T10:00:43.607Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Centreon Products: web Problem Types: CWE-863 Description: Incorrect Authorization vulnerability in Centreon web (API Token creation form modules) allows Privilege Escalation.This issue affects web: from 24.04.0 before 24.04.10, from 24.10.0 before 24.10.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://thewatch.centreon.com/latest-security-bulletins-64/cve-2024-55572-centreon-web-high-severity-4460 - https://github.com/centreon/centreon/releases
CVE ID: CVE-2025-4647 State: PUBLISHED Published: 2025-05-13T09:31:17.529Z Last Updated: 2025-05-13T13:08:24.128Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: Centreon Products: web Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon web allows Reflected XSS. A user with elevated privileges can bypass sanitization measures by replacing the content of an existing SVG. This issue affects web: from 24.10.0 before 24.10.5, from 24.04.0 before 24.04.11, from 23.10.0 before 23.10.22, from 23.04.0 before 23.04.27, from 22.10.0 before 22.10.29. Additional Analyst No
4.04.11, from 23.10.0 before 23.10.22, from 23.04.0 before 23.04.27, from 22.10.0 before 22.10.29. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://thewatch.centreon.com/latest-security-bulletins-64/cve-2024-55574-centreon-web-high-severity-4435 - https://github.com/centreon/centreon/releases
CVE ID: CVE-2025-4648 State: PUBLISHED Published: 2025-05-13T09:45:41.519Z Last Updated: 2025-10-08T10:07:58.081Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: Centreon Products: web Problem Types: CWE-434 Description: The content of a SVG file, received as input in Centreon web, was not properly checked. Allows Reflected XSS. A user with elevated privileges can inject JS script by altering the content of a SVG media, during the submit request. This issue affects web: from 24.10.0 before 24.10.5, from 24.04.0 before 24.04.11, from 23.10.0 before 23.10.22, from 23.04.0 before 23.04.27, from 22.10.0 before 22.10.29. Additional Analyst Notes: - CISA ADP Vulnric
efore 23.10.22, from 23.04.0 before 23.04.27, from 22.10.0 before 22.10.29. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://thewatch.centreon.com/latest-security-bulletins-64/cve-2024-55575-centreon-web-high-severity-4434 - https://github.com/centreon/centreon/releases
CVE ID: CVE-2025-4649 State: PUBLISHED Published: 2025-05-13T11:40:23.198Z Last Updated: 2025-10-15T13:05:23.113Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Centreon Products: web Problem Types: CWE-755 Description: Improper Handling of Exceptional Conditions vulnerability in Centreon web allows Privilege Escalation. ACL are not correctly taken into account in the display of the "event logs" page. This page requiring, high privileges, will display all available logs. This issue affects web: from 24.10.3 before 24.10.4, from 24.04.09 before 24.04.10, from 23.10.19 before 23.10.21, from 23.04.24 before 23.04.26. Additional Analyst Notes: - CISA ADP Vulnri
fore 24.04.10, from 23.10.19 before 23.10.21, from 23.04.24 before 23.04.26. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://thewatch.centreon.com/latest-security-bulletins-64/centreon-web-medium-severity-4349 - https://github.com/centreon/centreon/releases
CVE ID: CVE-2025-4650 State: PUBLISHED Published: 2025-08-22T18:50:42.034Z Last Updated: 2025-08-22T19:01:11.903Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Centreon Products: web Problem Types: CWE-89 Description: User with high privileges is able to introduce a SQLi using the Meta Service indicator page. Caused by an Improper Neutralization of Special Elements used in an SQL Command.This issue affects web: from 24.10.0 before 24.10.9, from 24.04.0 before 24.04.16, from 23.10.0 before 23.10.26. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/centreon/centreon/releases - https://thewatch.centreon.com/latest-security-bul
ichment: References: - https://github.com/centreon/centreon/releases - https://thewatch.centreon.com/latest-security-bulletins-64/cve-2025-4650-centreon-web-all-versions-high-severity-4901
CVE ID: CVE-2025-4652 State: PUBLISHED Published: 2025-06-09T06:00:14.489Z Last Updated: 2025-06-10T20:05:25.390Z Vendors: Unknown Products: Broadstreet Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Broadstreet WordPress plugin before 1.51.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/2a18ab96-ba95-4599-824f-df12e4851e6d/
CVE ID: CVE-2025-4653 State: PUBLISHED Published: 2025-06-10T15:53:22.364Z Last Updated: 2025-06-10T18:11:02.730Z Vendors: Pandora FMS Products: Pandora ITSM Problem Types: CWE-77 Description: Improper Neutralization of Special Elements in the backup name field may allow OS command injection. This issue affects Pandora ITSM 5.0.105. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/
CVE ID: CVE-2025-4654 State: PUBLISHED Published: 2025-07-02T03:47:24.306Z Last Updated: 2025-07-02T13:18:44.866Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: soumettre Products: Soumettre.fr Problem Types: CWE-285 Description: The Soumettre.fr plugin for WordPress is vulnerable to unauthorized access and modification of data due to a improper authorization checks on the make_signature function in all versions up to, and including, 2.1.5. This makes it possible for unauthenticated attackers to create/edit/delete Soumettre posts. This vulnerability affects only installations where the soumettre account is not connected (i.e. API key is not installed) Addition
ability affects only installations where the soumettre account is not connected (i.e. API key is not installed) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4f29d476-0730-437c-8065-309523278efa?source=cve - https://plugins.trac.wordpress.org/browser/soumettre-fr/tags/2.1.5/public/rest/class-soumettre-rest-route.php#L211
CVE ID: CVE-2025-4655 State: PUBLISHED Published: 2025-08-09T04:46:13.095Z Last Updated: 2025-08-11T18:52:47.191Z Vendors: Liferay Products: Portal, DXP Problem Types: CWE-918 Description: SSRF vulnerability in FreeMarker templates in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.5, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15, 7.4 GA through update 92 allows template editors to bypass access validations via crafted URLs. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-46
ment: References: - https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-4655
CVE ID: CVE-2025-4656 State: PUBLISHED Published: 2025-06-25T16:15:11.861Z Last Updated: 2025-06-25T20:05:45.581Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: HashiCorp Products: Vault, Vault Enterprise Problem Types: CWE-1088 Description: Vault Community and Vault Enterprise rekey and recovery key operations can lead to a denial of service due to uncontrolled cancellation by a Vault operator. This vulnerability (CVE-2025-4656) has been remediated in Vault Community Edition 1.20.0 and Vault Enterprise 1.20.0, 1.19.6, 1.18.11, 1.17.17, and 1.16.22. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://discuss.hashicorp.com/t/hcsec-2025-11-v
.16.22. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://discuss.hashicorp.com/t/hcsec-2025-11-vault-vulnerable-to-recovery-key-cancellation-denial-of-service/75570
CVE ID: CVE-2025-4657 State: PUBLISHED Published: 2025-07-17T19:22:28.459Z Last Updated: 2025-07-17T20:05:36.540Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: PC Manager, Browser, App Store Problem Types: CWE-122 Description: A buffer overflow vulnerability was reported in the Lenovo Protection Driver, prior to version 5.1.1110.4231, used in Lenovo PC Manager, Lenovo Browser, and Lenovo App Store could allow a local attacker with elevated privileges to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://iknow.lenovo.com.cn/detail/430155
CVE ID: CVE-2025-4658 State: PUBLISHED Published: 2025-05-13T16:33:35.195Z Last Updated: 2025-05-13T20:11:58.123Z Vendors: OPKSSH Products: OPKSSH Problem Types: CWE-305 Description: Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verification. As OPKSSH depends on the OpenPubkey library for authentication, this vulnerability in OpenPubkey also applies to OPKSSH versions prior to 0.5.0 and would allow an attacker to bypass OPKSSH authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/openpubkey/opkssh
CVE ID: CVE-2025-4659 State: PUBLISHED Published: 2025-05-30T05:23:20.289Z Last Updated: 2025-05-30T12:32:12.012Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: crmperks Products: Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms Problem Types: CWE-200 Description: The Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.4.4. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information
ted attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a99456c4-c828-4dc9-9375-8981eafbeb15?source=cve - https://plugins.trac.wordpress.org/changeset/3299864/
CVE ID: CVE-2025-4660 State: PUBLISHED Published: 2025-05-13T17:34:53.955Z Last Updated: 2025-08-21T15:14:15.922Z Vendors: Forescout Products: SecureConnector Problem Types: CWE-276 Description: A remote code execution vulnerability exists in the Windows agent component of SecureConnector due to improper access controls on a named pipe. The pipe is accessible to the Everyone group and does not restrict remote connections, allowing any network-based attacker to connect without authentication. By interacting with this pipe, an attacker can redirect the agent to communicate with a rogue server that can issue commands via the SecureConnector Agent. This does not impact Linux or OSX Secure Connec
th a rogue server that can issue commands via the SecureConnector Agent. This does not impact Linux or OSX Secure Connector. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://forescout.my.site.com/support/s/article/
CVE ID: CVE-2025-4661 State: PUBLISHED Published: 2025-06-19T02:27:04.559Z Last Updated: 2025-06-20T15:21:20.092Z Vendors: Brocade Products: Fabric OS Problem Types: CWE-22 Description: A path transversal vulnerability in Brocade Fabric OS 9.1.0 through 9.2.2 could allow a local admin user to gain access to files outside the intended directory potentially leading to the disclosure of sensitive information. Note: Admin level privilege is required on the switch in order to exploit Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/35814
CVE ID: CVE-2025-4662 State: PUBLISHED Published: 2025-07-10T20:41:20.151Z Last Updated: 2025-07-11T16:59:42.253Z Vendors: Broadcom Products: Brocade SANnav Problem Types: CWE-497 Description: Brocade SANnav before SANnav 2.4.0a logs plaintext passphrases in the Brocade SANnav host server audit logs while executing OpenSSL command using a passphrase from the command line or while providing the passphrase through a temporary file. These audit logs are the local server VM’s audit logs and are not controlled by SANnav. These logs are only visible to the server admin of the host server and are not visible to the SANnav admin or any SANnav user. Additional Analyst Notes: - CISA ADP Vulnrichment:
t server and are not visible to the SANnav admin or any SANnav user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/35908
CVE ID: CVE-2025-4663 State: PUBLISHED Published: 2025-07-08T17:53:53.048Z Last Updated: 2025-07-08T18:02:03.446Z Vendors: Broadcom Products: Brocade Fabric OS Problem Types: CWE-754 Description: An Improper Check for Unusual or Exceptional Conditions vulnerability in Brocade Fabric OS before 9.2.2.a could allow an authenticated, network-based attacker to cause a Denial-of-Service (DoS). The vulnerability is encountered when supportsave is invoked remotely, using ssh command or SANnav inline ssh, and the corresponding ssh session is terminated with Control C (^c ) before supportsave completion. This issue affects Brocade Fabric OS 9.0.0 through 9.2.2 Additional Analyst Notes: - CISA ADP Vuln
pportsave completion. This issue affects Brocade Fabric OS 9.0.0 through 9.2.2 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/35815
CVE ID: CVE-2025-4664 State: PUBLISHED Published: 2025-05-14T17:41:06.667Z Last Updated: 2025-06-05T19:46:02.588Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in Loader in Google Chrome prior to 136.0.7103.113 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/05/stable-channel-update-for-desktop_14.html - https://issues.chromium.org/issues/415810136
CVE ID: CVE-2025-4665 State: PUBLISHED Published: 2025-10-28T23:54:29.436Z Last Updated: 2025-10-29T14:48:16.726Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: WordPress Contact Form 7 Database Addon CFDB7 By Arshid Products: CFDB7 Problem Types: CWE-89 Description: WordPress plugin Contact Form CFDB7 versions up to and including 1.3.2 are affected by a pre-authentication SQL injection vulnerability that cascades into insecure deserialization (PHP Object Injection). The weakness arises due to insufficient validation of user input in plugin endpoints, allowing crafted input to influence backend queries in unexpected ways. Using specially crafted payloads,
gin endpoints, allowing crafted input to influence backend queries in unexpected ways. Using specially crafted payloads, this can escalate into unsafe deserialization, enabling arbitrary object injection in PHP. Although the issue is remotely exploitable without authentication, it does require a crafted interaction with the affected endpoint in order to trigger successfully. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2025/MNDT-2025-0006.md - https://wordpress.org/plugins/contact-form-cfdb7
CVE ID: CVE-2025-4666 State: PUBLISHED Published: 2025-06-11T03:41:52.079Z Last Updated: 2025-06-11T13:26:55.295Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: kseaborn Products: Zotpress Problem Types: CWE-79 Description: The Zotpress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘nickname’ parameter in all versions up to, and including, 7.3.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP V
web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/1058078b-3afa-4fe7-913a-b6fc32252bf6?source=cve - https://plugins.trac.wordpress.org/browser/zotpress/trunk/lib/admin/admin.accounts.php#L86 - https://plugins.trac.wordpress.org/browser/zotpress/trunk/lib/admin/admin.functions.php#L66 - https://plugins.trac.wordpress.org/browser/zotpress/trunk/lib/admin/admin.options.form.php#L33 - https://plugins.trac.wordpress.org/browser/zotpress/trunk/lib/admin/admin.options.form.php#L35
CVE ID: CVE-2025-4667 State: PUBLISHED Published: 2025-06-14T09:23:33.636Z Last Updated: 2025-06-17T18:38:28.265Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: croixhaug Products: Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin Problem Types: CWE-79 Description: The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ssa_admin_upcoming_appointments, ssa_admin_upcoming_appointments, and ssa_past_appointments shortcodes in all versions up to, and including, 1.6.8.30 due to insufficient input sanitization and output escaping on
shortcodes in all versions up to, and including, 1.6.8.30 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/414173b9-d23e-4e44-bf8c-77a074bb09e9?source=cve - https://wordpress.org/plugins/simply-schedule-appointments/#developers - https://plugins.trac.wordpress.org/browser/simply-schedule-appointments/tags/1.6.8.24/includes/class-shortcodes.p
pers - https://plugins.trac.wordpress.org/browser/simply-schedule-appointments/tags/1.6.8.24/includes/class-shortcodes.php#L718 - https://plugins.trac.wordpress.org/browser/simply-schedule-appointments/tags/1.6.8.24/includes/class-shortcodes.php#L754 - https://plugins.trac.wordpress.org/browser/simply-schedule-appointments/tags/1.6.8.24/includes/class-shortcodes.php#L784 - https://plugins.trac.wordpress.org/changeset/3306064/simply-schedule-appointments/tags/1.6.8.32/includes/class-shortcodes.php