Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-9047 State: PUBLISHED Published: 2024-10-12T06:51:11.974Z Last Updated: 2024-10-15T15:10:53.008Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: nickboss Products: WordPress File Upload Problem Types: CWE-22 Description: The WordPress File Upload plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 4.24.11 via wfu_file_downloader.php. This makes it possible for unauthenticated attackers to read or delete files outside of the originally intended directory. Successful exploitation requires the targeted WordPress installation to be using PHP 7.4 or earlier. Additional Analyst Notes: - CISA ADP Vulnrichmen
res the targeted WordPress installation to be using PHP 7.4 or earlier. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/554a314c-9e8e-4691-9792-d086790ef40f?source=cve - https://plugins.trac.wordpress.org/changeset/3164449/wp-file-upload
CVE ID: CVE-2024-9048 State: PUBLISHED Published: 2024-09-21T08:31:19.316Z Last Updated: 2024-09-23T15:51:04.588Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: y_project Products: RuoYi Problem Types: CWE-79 Description: A vulnerability was found in y_project RuoYi up to 4.7.9. It has been declared as problematic. Affected by this vulnerability is the function SysUserServiceImpl of the file ruoyi-system/src/main/java/com/ruoyi/system/service/impl/SysUserServiceImpl.java of the component Backend User Import. The manipulation of the argument loginName leads to cross site scripting. The attack can be launched remotely. The complexity of an attack is rather high.
oginName leads to cross site scripting. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The patch is named 9b68013b2af87b9c809c4637299abd929bc73510. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.278215 - https://vuldb.com/?ctiid.278215 - https://gitee.com/y_project/RuoYi/issues/IAR6Q3 - https://gitee.com/y_project/RuoYi/issues/IAR6Q3#note_31993641_link - https://gitee.com/y_project/RuoYi/commit/9b68013b2af87b9c809c4637299abd929bc73510
CVE ID: CVE-2024-9049 State: PUBLISHED Published: 2024-09-27T06:53:57.896Z Last Updated: 2024-09-27T16:22:12.280Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: justinbusa Products: Beaver Builder – WordPress Page Builder Problem Types: CWE-79 Description: The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Button Group module in all versions up to, and including, 2.8.3.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in
kes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/13517c2f-43ce-4e9a-81c4-d422b0e7273a?source=cve - https://plugins.trac.wordpress.org/changeset/3157026/beaver-builder-lite-version
CVE ID: CVE-2024-9050 State: PUBLISHED Published: 2024-10-22T12:14:31.701Z Last Updated: 2025-11-20T07:34:26.744Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 7.7 Advanced Update Support, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.
es for SAP Solutions, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 10 Problem Types: CWE-94 Description: A flaw was found in the libreswan client plugin for NetworkManager (NetkworkManager-libreswan), where it fails to properly sanitize the VPN configuration from the
lugin for NetworkManager (NetkworkManager-libreswan), where it fails to properly sanitize the VPN configuration from the local unprivileged user. In this configuration, composed by a key-value format, the plugin fails to escape special characters, leading the application to interpret values as keys. One of the most critical parameters that could be abused by a malicious user is the `leftupdown`key. This key takes an executable command as a value and is used to specify what executes as a callback in NetworkManager-libreswan to retrieve configuration settings back to NetworkManager. As NetworkManager uses Polkit to allow an unprivileged user to control the system's network configuration, a mal
anager. As NetworkManager uses Polkit to allow an unprivileged user to control the system's network configuration, a malicious actor could achieve local privilege escalation and potential code execution as root in the targeted machine by creating a malicious configuration. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2024:8312 - https://access.redhat.com/errata/RHSA-2024:8338 - https://access.redhat.com/errata/RHSA-2024:8352 - https://access.redhat.com/errata/RHSA-2024:8353 - https://access.redhat.com/errata/RHSA-2024:8354 - https://access.redhat.com/errata/RHSA-2024:8355 - https://access.redhat.com/errata/RHS
edhat.com/errata/RHSA-2024:8354 - https://access.redhat.com/errata/RHSA-2024:8355 - https://access.redhat.com/errata/RHSA-2024:8356 - https://access.redhat.com/errata/RHSA-2024:8357 - https://access.redhat.com/errata/RHSA-2024:8358 - https://access.redhat.com/errata/RHSA-2024:9555 - https://access.redhat.com/errata/RHSA-2024:9556 - https://access.redhat.com/security/cve/CVE-2024-9050 - https://bugzilla.redhat.com/show_bug.cgi?id=2313828 - https://www.openwall.com/lists/oss-security/2024/10/25/1
CVE ID: CVE-2024-9051 State: PUBLISHED Published: 2024-10-11T07:37:46.718Z Last Updated: 2024-10-11T15:24:31.102Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: brechtvds Products: WP Ultimate Post Grid Problem Types: CWE-79 Description: The WP Ultimate Post Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpupg-grid-with-filters shortcode in all versions up to, and including, 3.9.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute
nticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f3154a7a-b8b3-490b-9822-b3a92d1b4fef?source=cve - https://wordpress.org/plugins/wp-ultimate-post-grid/#developers - https://plugins.trac.wordpress.org/browser/wp-ultimate-post-grid/trunk/includes/public/class-wpupg-shortcode.php#L55 - https://plugins.trac.wordpress.org/browser/wp-ultimate-post-grid/trunk/includes/public/class-wpupg-blocks.php#L142 - https://plugins.trac.wordpress.org/changeset/3166429/
CVE ID: CVE-2024-9052 State: REJECTED Published: 2025-03-20T10:09:31.436Z Last Updated: 2025-04-10T16:17:38.776Z Description: No description available.
CVE ID: CVE-2024-9053 State: PUBLISHED Published: 2025-03-20T10:09:33.924Z Last Updated: 2025-10-15T12:50:44.722Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: vllm-project Products: vllm-project/vllm Problem Types: CWE-502 Description: vllm-project vllm version 0.6.0 contains a vulnerability in the AsyncEngineRPCServer() RPC server entrypoints. The core functionality run_server_loop() calls the function _make_handler_coro(), which directly uses cloudpickle.loads() on received messages without any sanitization. This can result in remote code execution by deserializing malicious pickle data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
code execution by deserializing malicious pickle data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/75a544f3-34a3-4da0-b5a3-1495cb031e09
CVE ID: CVE-2024-9054 State: PUBLISHED Published: 2024-10-04T19:42:44.129Z Last Updated: 2025-08-29T20:24:45.480Z Vendors: Microchip Products: TimeProvider 4100 Problem Types: CWE-78 Description: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'), Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Microchip TimeProvider 4100 (Configuration modules) allows Command Injection.This issue affects TimeProvider 4100: from 1.0 before 2.4.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.microchip.com/en-us/solutions/technologies/embedded-security/how-to-report-potential-product-security-vulnerabilities/tim
icrochip.com/en-us/solutions/technologies/embedded-security/how-to-report-potential-product-security-vulnerabilities/timeprovider-4100-grandmaster-rce-through-configuration-file - https://www.gruppotim.it/it/footer/red-team.html
CVE ID: CVE-2024-9055 State: PUBLISHED Published: 2025-03-17T13:46:36.464Z Last Updated: 2025-03-17T16:32:28.491Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Silicon Labs Products: Simplicity SDK Problem Types: CWE-331 Description: The DPA countermeasures on Silicon Labs' Series 2 devices are not reseeded periodically as they should be. This may allow an attacker to eventually extract secret keys through a DPA attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://community.silabs.com/069Vm00000LJMlfIAH
CVE ID: CVE-2024-9056 State: PUBLISHED Published: 2025-03-20T10:10:11.720Z Last Updated: 2025-10-15T12:50:00.564Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: bentoml Products: bentoml/bentoml Problem Types: CWE-770 Description: BentoML version v1.3.4post1 is vulnerable to a Denial of Service (DoS) attack. The vulnerability can be exploited by appending characters, such as dashes (-), to the end of a multipart boundary in an HTTP request. This causes the server to continuously process each character, leading to excessive resource consumption and rendering the service unavailable. The issue is unauthenticated and does not require any user interaction, impact
on and rendering the service unavailable. The issue is unauthenticated and does not require any user interaction, impacting all users of the service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/a24a13c2-0300-4a95-b26a-ac7fe8f6521b
CVE ID: CVE-2024-9057 State: PUBLISHED Published: 2024-10-10T02:06:09.939Z Last Updated: 2024-10-10T13:12:15.053Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: curatorio Products: Curator.io: Show all your social media posts in a beautiful feed. Problem Types: CWE-79 Description: The Curator.io: Show all your social media posts in a beautiful feed. plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘feed_id’ attribute in all versions up to, and including, 1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web
g. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/953d64f2-a514-48e9-9ab3-f9a793ad953a?source=cve - https://wordpress.org/plugins/curatorio/#developers
CVE ID: CVE-2024-9058 State: PUBLISHED Published: 2024-12-03T06:50:54.098Z Last Updated: 2024-12-03T11:23:43.067Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: bdthemes Products: Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) Problem Types: CWE-79 Description: The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Lightbox widget in all versions up to, and including, 5.10.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated
including, 5.10.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3e343ea3-996c-47c7-9480-e6264cbded98?source=cve - https://plugins.trac.wordpress.org/changeset/3189994/bdthemes-element-pack-lite
CVE ID: CVE-2024-9059 State: PUBLISHED Published: 2024-11-13T08:29:34.137Z Last Updated: 2024-11-13T14:39:20.217Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: wproyal Products: Royal Elementor Addons and Templates Problem Types: CWE-79 Description: The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Google Maps widget in all versions up to, and including, 1.7.1001 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user acces
ith Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/37223d1f-82c8-414f-bf39-63e728541aa3?source=cve - https://plugins.trac.wordpress.org/browser/royal-elementor-addons/tags/1.7.1002/modules/google-maps/widgets/wpr-google-maps.php?rev=3184222
CVE ID: CVE-2024-9060 State: PUBLISHED Published: 2024-10-01T09:30:31.950Z Last Updated: 2024-10-01T13:31:50.198Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: grandplugins Products: AVIF Uploader Problem Types: CWE-79 Description: The AVIF & SVG Uploader plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in version 1.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Additional Analyst Notes: - CISA ADP Vulnrichment: Referen
ages that will execute whenever a user accesses the SVG file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a09113d3-8be0-45fa-b1d7-4eb6ebb1780e?source=cve - https://wordpress.org/plugins/avif-support/#developers - https://plugins.trac.wordpress.org/changeset/3159481/
CVE ID: CVE-2024-9061 State: PUBLISHED Published: 2024-10-16T07:31:49.028Z Last Updated: 2024-10-16T18:02:58.970Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: themehunk Products: WP Popup Builder – Popup Forms and Marketing Lead Generation Problem Types: CWE-94 Description: The The WP Popup Builder – Popup Forms and Marketing Lead Generation plugin for WordPress is vulnerable to arbitrary shortcode execution via the wp_ajax_nopriv_shortcode_Api_Add AJAX action in all versions up to, and including, 1.3.5. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible
g users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. NOTE: This vulnerability was partially fixed in version 1.3.5 with a nonce check, which effectively prevented access to the affected function. However, version 1.3.6 incorporates the correct authorization check to prevent unauthorized access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0cac1dc0-87dc-43eb-9db1-638a91200b43?source=cve - https://plugins.trac.wordpress.org/changeset/3166506/wp-popup-builder
CVE ID: CVE-2024-9062 State: PUBLISHED Published: 2025-06-10T23:25:30.420Z Last Updated: 2025-06-11T13:41:12.653Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Archify Products: Archify Problem Types: CWE-306 Description: The Archify application contains a local privilege escalation vulnerability due to insufficient client validation in its privileged helper tool, com.oct4pie.archifyhelper, which is exposed via XPC. Archify follows the "factored applications" model, delegating privileged operations—such as arbitrary file deletion and file permission changes—to this helper running as root. However, the helper does not verify the code signature, entitlements,
ermission changes—to this helper running as root. However, the helper does not verify the code signature, entitlements, or signing flags of the connecting client. Although macOS provides secure validation mechanisms like auditToken, these are not implemented. As a result, any local process can establish a connection to the helper and invoke privileged functionality, leading to unauthorized execution of actions with root-level privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://pentraze.com/ - https://pentraze.com/vulnerability-reports/
CVE ID: CVE-2024-9063 State: REJECTED Published: N/A Last Updated: 2024-09-24T17:35:38.937Z Description: No description available.
CVE ID: CVE-2024-9064 State: PUBLISHED Published: 2024-10-10T02:06:07.549Z Last Updated: 2024-10-10T13:12:45.992Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: namogo Products: Elementor Inline SVG Problem Types: CWE-79 Description: The Elementor Inline SVG plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.2.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Additional Analyst Notes: - C
ct arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/5aab3dea-5d14-4316-9a4c-97b0d30762bf?source=cve - https://wordpress.org/plugins/inline-svg-elementor/#developers
CVE ID: CVE-2024-9065 State: PUBLISHED Published: 2024-10-10T02:06:08.162Z Last Updated: 2024-10-10T17:38:07.505Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: matbao Products: WP Helper Premium Problem Types: CWE-862 Description: The WP Helper Premium plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'whp_smtp_send_mail_test' function in all versions up to, and including, 4.6.1. This makes it possible for unauthenticated attackers to send emails containing any content and originating from the vulnerable WordPress instance to any recipient. Additional Analyst Notes: - CISA ADP Vulnrichment: Ref
ginating from the vulnerable WordPress instance to any recipient. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/5f3c6d98-6f30-4a98-91c9-e77c1f960527?source=cve - https://plugins.trac.wordpress.org/browser/wp-helper-lite/trunk/functions/class.wps-frontend-setup-function.php#L55
CVE ID: CVE-2024-9066 State: PUBLISHED Published: 2024-10-10T02:06:06.984Z Last Updated: 2024-10-10T13:13:00.890Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: dale668 Products: Marketing and SEO Booster Problem Types: CWE-79 Description: The Marketing and SEO Booster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.9.10 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Additional Analys
ove, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/52144ff6-0617-496c-8159-ec5d7bc86f60?source=cve - https://wordpress.org/plugins/marketing-and-seo-booster/#developers
CVE ID: CVE-2024-9067 State: PUBLISHED Published: 2024-10-10T02:06:12.657Z Last Updated: 2024-10-10T14:26:04.505Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: youzify Products: Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress Problem Types: CWE-862 Description: The Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'delete_attachment' function in all versions up to, and including, 1.3.0. This makes it possible for authenticated attackers, with Subscriber-l
ction in all versions up to, and including, 1.3.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary attachments. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e099d8e2-6305-43fc-8807-a37791deb2ff?source=cve - https://plugins.trac.wordpress.org/browser/youzify/trunk/includes/public/core/class-youzify-attachments.php#L1183
CVE ID: CVE-2024-9068 State: PUBLISHED Published: 2024-09-25T02:05:10.925Z Last Updated: 2024-09-25T13:49:10.665Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: themexclub Products: OneElements – Best Elementor Addons Problem Types: CWE-79 Description: The OneElements – Best Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.3.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG f
or-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3f83a514-2b42-4348-9525-438205daeeab?source=cve - https://wordpress.org/plugins/oneelements-ultimate-addons-for-elementor/#developers