Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-4019 State: PUBLISHED Published: 2024-04-20T13:31:04.135Z Last Updated: 2024-08-01T20:26:57.295Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Byzoro Products: Smart S80 Management Platform Problem Types: CWE-502 Description: A vulnerability classified as critical has been found in Byzoro Smart S80 Management Platform up to 20240411. Affected is an unknown function of the file /importhtml.php. The manipulation of the argument sql leads to deserialization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-261666 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early ab
ic and may be used. VDB-261666 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.261666 - https://vuldb.com/?ctiid.261666 - https://vuldb.com/?submit.314927 - https://github.com/scausoft/cve/blob/main/rce.md
CVE ID: CVE-2024-4020 State: PUBLISHED Published: 2024-04-20T23:00:06.043Z Last Updated: 2024-08-01T20:26:57.278Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Tenda Products: FH1206 Problem Types: CWE-120 Description: A vulnerability was found in Tenda FH1206 1.2.0.8(8155) and classified as critical. This issue affects the function fromAddressNat of the file /goform/addressNat. The manipulation of the argument entrys leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-261671. NOTE: The vendor was contacted early about this disclosure but did not respo
tifier of this vulnerability is VDB-261671. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.261671 - https://vuldb.com/?ctiid.261671 - https://vuldb.com/?submit.316036 - https://palm-vertebra-fe9.notion.site/fromAddressNat_entrys-b04d5356e5f04e30b37cb9037b94e1b2
CVE ID: CVE-2024-4021 State: PUBLISHED Published: 2024-04-21T10:00:05.279Z Last Updated: 2024-08-01T20:26:57.279Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Keenetic Products: KN-1010, KN-1410, KN-1711, KN-1810, KN-1910 Problem Types: CWE-200 Description: A vulnerability was found in Keenetic KN-1010, KN-1410, KN-1711, KN-1810 and KN-1910 up to 4.1.2.15. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /ndmComponents.js of the component Configuration Setting Handler. The manipulation leads to information disclosure. The attack can be launched remotely. The exploit has been disclosed to the publi
lation leads to information disclosure. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-261673 was assigned to this vulnerability. NOTE: The vendor is aware of this issue and plans to fix it by the end of 2024. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.261673 - https://vuldb.com/?ctiid.261673 - https://netsecfish.notion.site/Information-Disclosure-in-Keenetic-Router-d4a12a499cef4acf80e191bdaf20c151?pvs=4
CVE ID: CVE-2024-4022 State: PUBLISHED Published: 2024-04-21T10:31:04.754Z Last Updated: 2024-08-01T20:26:57.265Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Keenetic Products: KN-1010, KN-1410, KN-1711, KN-1810, KN-1910 Problem Types: CWE-200 Description: A vulnerability was found in Keenetic KN-1010, KN-1410, KN-1711, KN-1810 and KN-1910 up to 4.1.2.15. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /version.js of the component Version Data Handler. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-2
ion disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-261674 is the identifier assigned to this vulnerability. NOTE: The vendor is aware of this issue and plans to fix it by the end of 2024. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.261674 - https://vuldb.com/?ctiid.261674 - https://vuldb.com/?submit.316276 - https://netsecfish.notion.site/Information-Disclosure-in-Keenetic-Router-d4a12a499cef4acf80e191bdaf20c151?pvs=4
CVE ID: CVE-2024-4023 State: PUBLISHED Published: 2025-03-20T10:09:54.666Z Last Updated: 2025-03-20T18:33:07.166Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H) Vendors: flatpressblog Products: flatpressblog/flatpress Problem Types: CWE-79 Description: A stored cross-site scripting (XSS) vulnerability exists in flatpressblog/flatpress version 1.3. When a user uploads a file with a `.xsig` extension and directly accesses this file, the server responds with a Content-type of application/octet-stream, leading to the file being processed as an HTML file. This allows an attacker to execute arbitrary JavaScript code, which can be used to steal user cookies, perform HTTP req
This allows an attacker to execute arbitrary JavaScript code, which can be used to steal user cookies, perform HTTP requests, and access content of the same origin. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/ed803c13-0858-4c22-93ba-bf2384ab1e9d - https://github.com/flatpressblog/flatpress/commit/3c9cc69364a45fd3f92d4bd606344b5dd1205d6a
CVE ID: CVE-2024-4024 State: PUBLISHED Published: 2024-04-25T13:30:46.597Z Last Updated: 2024-10-03T06:23:19.266Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-302 Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 7.8 before 16.9.6, all versions starting from 16.10 before 16.10.4, all versions starting from 16.11 before 16.11.1. Under certain conditions, an attacker with their Bitbucket account credentials may be able to take over a GitLab account linked to another user's Bitbucket account, if Bitbucket is used as an OAuth 2.0 provider on GitLab. Additional Analyst Notes:
to another user's Bitbucket account, if Bitbucket is used as an OAuth 2.0 provider on GitLab. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/452426
CVE ID: CVE-2024-4025 State: PUBLISHED Published: 2025-06-20T18:14:33.011Z Last Updated: 2025-06-23T15:22:59.976Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: GitLab Products: GitLab Problem Types: CWE-1333 Description: A Denial of Service (DoS) condition has been discovered in GitLab CE/EE affecting all versions from 7.10 prior before 16.11.5, version 17.0 before 17.0.3, and 17.1 before 17.1.1. It is possible for an attacker to cause a denial of service using a crafted markdown page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/457474 - https://hackerone.com/reports/2024974
CVE ID: CVE-2024-4026 State: PUBLISHED Published: 2024-04-22T11:51:25.205Z Last Updated: 2024-08-01T20:26:57.379Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: Holded Products: Holded Problem Types: CWE-79 Description: Cross-Site Scripting (XSS) vulnerability in the Holded application. This vulnerability could allow an attacker to store a JavaScript payload within all editable parameters within the 'General' and 'Team ID' functionalities, which could result in a session takeover. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-holded-applicatio
ogram Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-holded-application
CVE ID: CVE-2024-4028 State: PUBLISHED Published: 2025-02-18T17:54:08.752Z Last Updated: 2025-11-21T06:47:28.566Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N) Vendors: Red Hat Products: Red Hat Build of Keycloak, Red Hat Single Sign-On 7 Problem Types: CWE-20 Description: A vulnerability was found in Keycloak. This issue may allow a privileged attacker to use a malicious payload as the permission while creating items (Resource and Permissions) from the admin console, leading to a stored cross-site scripting (XSS) attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2024-4028 - https://bugzilla.redhat.com/
CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2024-4028 - https://bugzilla.redhat.com/show_bug.cgi?id=2276418
CVE ID: CVE-2024-4029 State: PUBLISHED Published: 2024-05-02T14:55:27.135Z Last Updated: 2025-11-11T16:25:46.399Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat JBoss Enterprise Application Platform 7, Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8, Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9, Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7, Red Hat JBoss Enterprise Application Platform 8, Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8, Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9, Red Hat Build of Keycloak, Red Hat Data Grid 8, Red Hat Fuse 7, Red Hat JBoss D
ise Application Platform 8.0 for RHEL 9, Red Hat Build of Keycloak, Red Hat Data Grid 8, Red Hat Fuse 7, Red Hat JBoss Data Grid 7, Red Hat JBoss Enterprise Application Platform Expansion Pack, Red Hat Process Automation 7, Red Hat Single Sign-On 7 Problem Types: CWE-770 Description: A vulnerability was found in Wildfly’s management interface. Due to the lack of limitation of sockets for the management interface, it may be possible to cause a denial of service hitting the nofile limit as there is no possibility to configure or set a maximum number of connections. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-20
Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2024:8075 - https://access.redhat.com/errata/RHSA-2024:8076 - https://access.redhat.com/errata/RHSA-2024:8077 - https://access.redhat.com/errata/RHSA-2024:8080 - https://access.redhat.com/errata/RHSA-2024:8823 - https://access.redhat.com/errata/RHSA-2024:8824 - https://access.redhat.com/errata/RHSA-2024:8826 - https://access.redhat.com/security/cve/CVE-2024-4029 - https://bugzilla.redhat.com/show_bug.cgi?id=2278615
CVE ID: CVE-2024-4030 State: PUBLISHED Published: 2024-05-07T21:02:55.284Z Last Updated: 2024-09-07T02:44:36.613Z Vendors: Python Software Foundation Products: CPython Problem Types: CWE-276 Description: On Windows a directory returned by tempfile.mkdtemp() would not always have permissions set to restrict reading and writing to the temporary directory by other users, instead usually inheriting the correct permissions from the default location. Alternate configurations or users without a profile directory may not have the intended permissions. If you’re not using Windows or haven’t changed the temporary directory location then you aren’t affected by this vulnerability. On other platforms the
haven’t changed the temporary directory location then you aren’t affected by this vulnerability. On other platforms the returned directory is consistently readable and writable only by the current user. This issue was caused by Python not supporting Unix permissions on Windows. The fix adds support for Unix “700” for the mkdir function on Windows which is used by mkdtemp() to ensure the newly created directory has the proper permissions. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://mail.python.org/archives/list/security-announce@python.org/thread/PRGS5OR3N3PNPT4BMV2VAGN5GMUI5636/ - https://github.com/python/cpython/issues/118486 - https:/
announce@python.org/thread/PRGS5OR3N3PNPT4BMV2VAGN5GMUI5636/ - https://github.com/python/cpython/issues/118486 - https://github.com/python/cpython/commit/81939dad77001556c527485d31a2d0f4a759033e - https://github.com/python/cpython/commit/8ed546679524140d8282175411fd141fe7df070d - https://github.com/python/cpython/commit/35c799d79177b962ddace2fa068101465570a29a - https://github.com/python/cpython/commit/5130731c9e779b97d00a24f54cdce73ce9975dfd - https://github.com/python/cpython/commit/66f8bb76a15e64a1bb7688b177ed29e26230fdee - https://github.com/python/cpython/commit/6d0850c4c8188035643586ab4d8ec2468abd699e - https://github.com/python/cpython/commit/91e3669e01245185569d09e9e6e11641282971ee -
c4c8188035643586ab4d8ec2468abd699e - https://github.com/python/cpython/commit/91e3669e01245185569d09e9e6e11641282971ee - https://github.com/python/cpython/commit/94591dca510c796c7d40e9b4167ea56f2fdf28ca - https://github.com/python/cpython/commit/c8f868dc52f98011d0f9b459b6487920bfb0ac4d - https://github.com/python/cpython/commit/d86b49411753bf2c83291e3a14ae43fefded2f84 - https://github.com/python/cpython/commit/e1dfa978b1ad210d551385ad8073ec6154f53763 - https://github.com/python/cpython/commit/eb29e2f5905da93333d1ce78bc98b151e763ff46 - https://security.netapp.com/advisory/ntap-20240705-0005/
CVE ID: CVE-2024-4031 State: PUBLISHED Published: 2024-04-23T06:29:58.858Z Last Updated: 2024-08-01T20:26:57.253Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Logitech Products: MEVO WEBCAM APP Problem Types: CWE-428 Description: Unquoted Search Path or Element vulnerability in Logitech MEVO WEBCAM APP on Windows allows Local Execution of Code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/428.html
CVE ID: CVE-2024-4032 State: PUBLISHED Published: 2024-06-17T15:05:58.827Z Last Updated: 2025-11-03T21:57:16.975Z Vendors: Python Software Foundation Products: CPython Description: The “ipaddress” module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as “globally reachable” or “private”. This affected the is_private and is_global properties of the ipaddress.IPv4Address, ipaddress.IPv4Network, ipaddress.IPv6Address, and ipaddress.IPv6Network classes, where values wouldn’t be returned in accordance with the latest information from the IANA Special-Purpose Address Registries. CPython 3.12.4 and 3.13.0a6 contain updated information from these regist
m the IANA Special-Purpose Address Registries. CPython 3.12.4 and 3.13.0a6 contain updated information from these registries and thus have the intended behavior. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/python/cpython/issues/113171 - https://github.com/python/cpython/pull/113179 - https://www.iana.org/assignments/iana-ipv4-special-registry/iana-ipv4-special-registry.xhtml - https://www.iana.org/assignments/iana-ipv6-special-registry/iana-ipv6-special-registry.xhtml - https://mail.python.org/archives/list/security-announce@python.org/thread/NRUHDUS2IV2USIZM2CVMSFL6SCKU3RZA/ - https://github.com/python/cpython/commit/22adf29da
curity-announce@python.org/thread/NRUHDUS2IV2USIZM2CVMSFL6SCKU3RZA/ - https://github.com/python/cpython/commit/22adf29da8d99933ffed8647d3e0726edd16f7f8 - https://github.com/python/cpython/commit/40d75c2b7f5c67e254d0a025e0f2e2c7ada7f69f - https://github.com/python/cpython/commit/895f7e2ac23eff4743143beef0f0c5ac71ea27d3 - https://github.com/python/cpython/commit/ba431579efdcbaed7a96f2ac4ea0775879a332fb - https://github.com/python/cpython/commit/c62c9e518b784fe44432a3f4fc265fb95b651906 - https://github.com/python/cpython/commit/f86b17ac511e68192ba71f27e752321a3252cee3 - http://www.openwall.com/lists/oss-security/2024/06/17/3 - https://security.netapp.com/advisory/ntap-20240726-0004/
CVE ID: CVE-2024-4033 State: PUBLISHED Published: 2024-05-02T16:52:46.859Z Last Updated: 2024-08-01T20:26:57.252Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: plugins360 Products: All-in-One Video Gallery Problem Types: CWE-434 Unrestricted Upload of File with Dangerous Type Description: The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the aiovg_create_attachment_from_external_image_url function in all versions up to, and including, 3.6.4. This makes it possible for authenticated attackers, with contributor access and above, to upload arbitrary files on the affected site's serve
e for authenticated attackers, with contributor access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e0f295f9-1090-4b10-abc5-3f73c5b4e28d?source=cve - https://plugins.trac.wordpress.org/browser/all-in-one-video-gallery/trunk/includes/functions.php#L140 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3078876%40all-in-one-video-gallery%2Ftrunk&old=3072329%40all-in-one-video-gallery%2Ftrunk&sfp_email=&sfph_mail=
CVE ID: CVE-2024-4034 State: PUBLISHED Published: 2024-05-02T16:52:43.574Z Last Updated: 2024-08-01T20:26:57.266Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: britner Products: Virtue Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Virtue theme for WordPress is vulnerable to Stored Cross-Site Scripting via a Post Author's name in all versions up to, and including, 3.4.8 due to insufficient input sanitization and output escaping when the latest posts feature is enabled on the homepage. This makes it possible for authenticated attackers, with contributor-level access and above, to i
abled on the homepage. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d8272233-afb3-46f1-ab85-189a3923e29d?source=cve - https://themes.trac.wordpress.org/browser/virtue/3.4.8/templates/home/blog-home.php#L87 - https://themes.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=225592%40virtue&new=225592%40virtue&sfp_email=&sfph_mail=#file18
CVE ID: CVE-2024-4035 State: PUBLISHED Published: 2024-04-25T09:29:57.872Z Last Updated: 2024-08-01T20:26:57.325Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: gt3themes Products: Photo Gallery – GT3 Image Gallery & Gutenberg Block Gallery Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Photo Gallery – GT3 Image Gallery & Gutenberg Block Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image alt text in all versions up to, and including, 2.7.7.21 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attacke
g, 2.7.7.21 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/06ef1f0c-fdcc-4aaf-9e48-19b5be52351d?source=cve - https://plugins.trac.wordpress.org/changeset/3076342/gt3-photo-video-gallery/trunk/core/actions/gt3pg_gallery_shortcode.php
CVE ID: CVE-2024-4036 State: PUBLISHED Published: 2024-05-02T16:52:36.724Z Last Updated: 2024-08-01T20:26:57.402Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: athemes Products: Sydney Toolbox Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Sydney Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the style parameter in all versions up to, and including, 1.30 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor access and above, to inject arbitrary web scripts in pages that will e
ble for authenticated attackers, with contributor access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c6d5275d-43d0-41f6-96c7-e7646eac4534?source=cve - https://plugins.trac.wordpress.org/browser/sydney-toolbox/trunk/inc/elementor/block-employee.php#L346 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3075394%40sydney-toolbox%2Ftrunk&old=3064481%40sydney-toolbox%2Ftrunk&sfp_email=&sfph_mail=
CVE ID: CVE-2024-4037 State: PUBLISHED Published: 2024-05-24T08:30:25.222Z Last Updated: 2024-08-01T20:26:57.318Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: opajaap Products: WP Photo Album Plus Problem Types: CWE-94 Improper Control of Generation of Code ('Code Injection') Description: The WP Photo Album Plus plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 8.7.02.003. This is due to the plugin allowing unauthenticated users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes
value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3d6b95ee-0a0d-49f7-83b1-4716eec3b863?source=cve - https://plugins.trac.wordpress.org/browser/wp-photo-album-plus/trunk/wppa-ajax.php#L1138 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3079831%40wp-photo-album-plus&new=3079831%40wp-photo-album-plus&sfp_email=&sfph_mail= - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3078746%40wp-photo-album-plus&new=30787
https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3078746%40wp-photo-album-plus&new=3078746%40wp-photo-album-plus&sfp_email=&sfph_mail=#file3
CVE ID: CVE-2024-4038 State: PUBLISHED Published: 2024-05-09T20:03:40.586Z Last Updated: 2024-08-01T20:26:57.274Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: codewoogeek Products: Back In Stock Notifier for WooCommerce | WooCommerce Waitlist Pro Problem Types: CWE-94 Improper Control of Generation of Code ('Code Injection') Description: The The Back In Stock Notifier for WooCommerce | WooCommerce Waitlist Pro plugin for WordPress for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.3.1. This is due to the plugin for WordPress allowing users to execute an action that does not properly validate a value before