Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-24649 State: PUBLISHED Published: 2022-11-21T00:00:00.000Z Last Updated: 2025-04-30T13:27:11.190Z Vendors: Unknown Products: WP User Frontend Problem Types: CWE-287 Improper Authentication Description: The WP User Frontend WordPress plugin before 3.5.29 uses a user supplied argument called urhidden in its registration form, which contains the role for the account to be created with, encrypted via wpuf_encryption(). This could allow an attacker having access to the AUTH_KEY and AUTH_SALT constant (via an arbitrary file access issue for example, or if the blog is using the default keys) to create an account with any role they want, such as admin Additional Analyst Notes: - CVE
g is using the default keys) to create an account with any role they want, such as admin Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/9486744e-ab24-44e4-b06e-9e0b4be132e2
CVE ID: CVE-2021-24651 State: PUBLISHED Published: 2021-10-11T10:45:35 Last Updated: 2024-08-03T19:35:20.416Z Vendors: Unknown Products: Poll Maker Problem Types: CWE-89, CWE-203 Description: The Poll Maker WordPress plugin before 3.4.2 allows unauthenticated users to perform SQL injection via the ays_finish_poll AJAX action. While the result is not disclosed in the response, it is possible to use a timing attack to exfiltrate data such as password hash. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/24f933b0-ad57-4ed3-817d-d637256e2fb1
CVE ID: CVE-2021-24652 State: PUBLISHED Published: 2021-09-27T15:25:30 Last Updated: 2024-08-03T19:35:20.368Z Vendors: Unknown Products: PostX – Gutenberg Blocks for Post Grid Problem Types: CWE-863 Description: The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10 performs incorrect checks before allowing any logged in user to perform some ajax based requests, allowing any user to modify, delete or add ultp_options values. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/5375bd3e-a30d-4f24-9b17-470b28a8231c
CVE ID: CVE-2021-24653 State: PUBLISHED Published: 2021-10-25T13:20:47 Last Updated: 2024-08-03T19:35:20.316Z Vendors: Unknown Products: Cookie Bar Problem Types: CWE-79 Description: The Cookie Bar WordPress plugin before 1.8.9 doesn't properly sanitise the Cookie Bar Message setting, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/bfa8f46f-d323-4a2d-b875-39cd9b4cee0a
CVE ID: CVE-2021-24654 State: PUBLISHED Published: 2021-10-04T11:20:17 Last Updated: 2024-08-03T19:35:20.367Z Vendors: Unknown Products: User Registration – Custom Registration Form, Login And User Profile For WordPress Problem Types: CWE-79 Description: The User Registration WordPress plugin before 2.0.2 does not properly sanitise the user_registration_profile_pic_url value when submitted directly via the user_registration_update_profile_details AJAX action. This could allow any authenticated user, such as subscriber, to perform Stored Cross-Site attacks when their profile is viewed Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/5c7a9473-d3
is viewed Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/5c7a9473-d32e-47d6-9f8e-15b96fe758f2
CVE ID: CVE-2021-24655 State: PUBLISHED Published: 2022-07-17T10:35:28 Last Updated: 2024-08-03T19:35:20.306Z Vendors: Unknown Products: WP User Manager – User Profile Builder & Membership Problem Types: CWE-639 Description: The WP User Manager WordPress plugin before 2.6.3 does not ensure that the user ID to reset the password of is related to the reset key given. As a result, any authenticated user can reset the password (to an arbitrary value) of any user knowing only their ID, and gain access to their account. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/cce03550-7f65-4172-819e-025755fb541f
CVE ID: CVE-2021-24656 State: PUBLISHED Published: 2021-10-11T10:45:36 Last Updated: 2024-08-03T19:35:20.407Z Vendors: Unknown Products: Simple Social Media Share Buttons – Social Sharing for Everyone Problem Types: CWE-79 Description: The Simple Social Media Share Buttons WordPress plugin before 3.2.4 does not escape the Share Title settings before outputting it in the frontend pages or posts (depending on the settings used), allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/8e897dcc-6e52-440b-83ad-b119c55751c7
CVE ID: CVE-2021-24657 State: PUBLISHED Published: 2021-09-20T10:06:48 Last Updated: 2024-08-03T19:35:20.431Z Vendors: Unknown Products: Limit Login Attempts Problem Types: CWE-79 Description: The Limit Login Attempts WordPress plugin before 4.0.50 does not escape the IP addresses (which can be controlled by attacker via headers such as X-Forwarded-For) of attempted logins before outputting them in the reports table, leading to an Unauthenticated Stored Cross-Site Scripting issue. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/c789ca04-d88c-4789-8be1-812888f0c8f8
CVE ID: CVE-2021-24658 State: PUBLISHED Published: 2021-08-23T11:10:20 Last Updated: 2024-08-03T19:35:20.374Z Vendors: Libin V Babu Products: Erident Custom Login and Dashboard Problem Types: CWE-79 Description: The Erident Custom Login and Dashboard WordPress plugin before 3.5.9 did not properly sanitise its settings, allowing high privilege users to use XSS payloads in them (even when the unfileted_html is disabled) Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/ec70f02b-02a1-4511-949e-68f2d9d37ca8 - https://plugins.trac.wordpress.org/changeset/2507516
CVE ID: CVE-2021-24659 State: PUBLISHED Published: 2021-09-27T15:25:32 Last Updated: 2024-08-03T19:35:20.408Z Vendors: Unknown Products: PostX – Gutenberg Blocks for Post Grid Problem Types: CWE-79 Description: The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10 allows users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks via the plugin's block. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/5f2fe510-7513-4d33-82d9-3107b3b3f2ae
CVE ID: CVE-2021-24660 State: PUBLISHED Published: 2021-09-27T15:25:33 Last Updated: 2024-08-03T19:35:20.414Z Vendors: Unknown Products: PostX – Gutenberg Blocks for Post Grid Problem Types: CWE-79 Description: The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10, with Saved Templates Addon enabled, allows users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks via the plugin's shortcode. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/af14ac23-843d-4f80-beaf-237618109edd
CVE ID: CVE-2021-24661 State: PUBLISHED Published: 2021-09-27T15:25:35 Last Updated: 2024-08-03T19:42:16.109Z Vendors: Unknown Products: PostX – Gutenberg Blocks for Post Grid Problem Types: CWE-200 Description: The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10, with Saved Templates Addon enabled, allows users with Contributor roles or higher to read password-protected or private post contents the user is otherwise unable to read, given the post ID. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/8d966ff1-9c88-43c7-8f4b-93c88e214677
CVE ID: CVE-2021-24662 State: PUBLISHED Published: 2021-10-25T13:20:48 Last Updated: 2024-08-03T19:42:16.041Z Vendors: Unknown Products: Game Server Status Problem Types: CWE-89 Description: The Game Server Status WordPress plugin through 1.0 does not validate or escape the server_id parameter before using it in SQL statement, leading to an Authenticated SQL Injection in an admin page Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/8a74a2a0-3d8c-427f-9a83-0160d652c5f0
CVE ID: CVE-2021-24663 State: PUBLISHED Published: 2021-09-20T10:06:49 Last Updated: 2024-08-03T19:42:16.028Z Vendors: Unknown Products: Simple Schools Staff Directory Problem Types: CWE-434 Description: The Simple Schools Staff Directory WordPress plugin through 1.1 does not validate uploaded logo pictures to ensure that are indeed images, allowing high privilege users such as admin to upload arbitrary file like PHP, leading to RCE Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/8b5b5b57-50c5-4cd8-9171-168c3e9df46a
CVE ID: CVE-2021-24664 State: PUBLISHED Published: 2021-11-08T17:34:58 Last Updated: 2024-08-03T19:42:15.967Z Vendors: Unknown Products: School Management System – WPSchoolPress Problem Types: CWE-79 Description: The School Management System – WPSchoolPress WordPress plugin before 2.1.17 sanitise some fields using sanitize_text_field() but does not escape them before outputting in attributes, resulting in Stored Cross-Site Scripting issues. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/3f8e170c-6579-4b1a-a1ac-7d93da17b669 - http://packetstormsecurity.com/files/164974/WordPress-WPSchoolPress-2.1.16-Cross-Site-Scripting.html
CVE ID: CVE-2021-24665 State: PUBLISHED Published: 2021-08-30T14:11:26 Last Updated: 2024-08-03T19:42:16.082Z Vendors: Unknown Products: WP Video Lightbox Problem Types: CWE-79 Description: The WP Video Lightbox WordPress plugin before 1.9.3 does not escape the attributes of its shortcodes, allowing users with a role as low as contributor to perform Cross-Site Scripting attacks Additional Analyst Notes: - CVE Program Container: References: - https://www.fortiguard.com/zeroday/FG-VD-21-059 - https://wpscan.com/vulnerability/42a8947f-2ae5-4f12-bd3d-ab3716501df5
CVE ID: CVE-2021-24666 State: PUBLISHED Published: 2021-09-27T15:25:36 Last Updated: 2024-08-03T19:42:15.993Z Vendors: Unknown Products: Podlove Podcast Publisher Problem Types: CWE-89 Description: The Podlove Podcast Publisher WordPress plugin before 3.5.6 contains a 'Social & Donations' module (not activated by default), which adds the rest route '/services/contributor/(?P<id>[\d]+), takes an 'id' and 'category' parameters as arguments. Both parameters can be used for the SQLi. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/fb4d7988-60ff-4862-96a1-80b1866336fe - https://github.com/podlove/podlove-publisher/commit/aa8a343a2e2333b34a422f801a
ty/fb4d7988-60ff-4862-96a1-80b1866336fe - https://github.com/podlove/podlove-publisher/commit/aa8a343a2e2333b34a422f801adee09b020c6d76
CVE ID: CVE-2021-24667 State: PUBLISHED Published: 2021-08-30T14:11:27 Last Updated: 2024-08-03T19:42:16.073Z Vendors: Unknown Products: Gallery Blocks with Lightbox. Image Gallery, (HTML5 video , YouTube, Vimeo) Video Gallery and Lightbox for native gallery Problem Types: CWE-79 Description: A stored cross-site scripting vulnerability has been discovered in : Simply Gallery Blocks with Lightbox (Version – 2.2.0 & below). The vulnerability exists in the Lightbox functionality where a user with low privileges is allowed to execute arbitrary script code within the context of the application. This vulnerability is due to insufficient validation of image parameters in meta data. Additional Analy
the application. This vulnerability is due to insufficient validation of image parameters in meta data. Additional Analyst Notes: - CVE Program Container: References: - https://www.fortiguard.com/zeroday/FG-VD-21-060 - https://wpscan.com/vulnerability/5925b263-6d6f-4a03-a98a-620150dff8f7
CVE ID: CVE-2021-24668 State: PUBLISHED Published: 2021-11-23T19:16:05 Last Updated: 2024-08-03T19:42:16.152Z Vendors: Unknown Products: MAZ Loader – Preloader Builder for WordPress Problem Types: CWE-352 Description: The MAZ Loader WordPress plugin before 1.4.1 does not enforce nonce checks, which allows attackers to make administrators delete arbitrary loaders via a CSRF attack Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/519205ff-2ff6-41e4-9e95-475ab2ce35b9
CVE ID: CVE-2021-24669 State: PUBLISHED Published: 2021-11-08T17:34:59 Last Updated: 2024-08-03T19:42:16.136Z Vendors: Unknown Products: MAZ Loader – Preloader Builder for WordPress Problem Types: CWE-89 Description: The MAZ Loader – Preloader Builder for WordPress plugin before 1.3.3 does not validate or escape the loader_id parameter of the mzldr shortcode, which allows users with a role as low as Contributor to perform SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/b97afbe8-c9ae-40a2-81e5-b1d7a6b31831
CVE ID: CVE-2021-24670 State: PUBLISHED Published: 2021-09-27T15:25:38 Last Updated: 2024-08-03T19:42:15.982Z Vendors: Unknown Products: CoolClock – a Javascript Analog Clock Problem Types: CWE-79 Description: The CoolClock WordPress plugin before 4.3.5 does not escape some shortcode attributes, allowing users with a role as low as Contributor toperform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/a092548f-1ad5-44d3-9901-cdf4ebcee40a
CVE ID: CVE-2021-24671 State: PUBLISHED Published: 2021-09-27T15:25:39 Last Updated: 2024-08-03T19:42:16.127Z Vendors: Unknown Products: MX Time Zone Clocks Problem Types: CWE-79 Description: The MX Time Zone Clocks WordPress plugin before 3.4.1 does not escape the time_zone attribute of the mxmtzc_time_zone_clocks shortcode, allowing users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/4e51dffa-027d-4f3d-a190-dcc5269f6435
CVE ID: CVE-2021-24672 State: PUBLISHED Published: 2021-10-18T13:45:53 Last Updated: 2024-08-03T19:42:15.980Z Vendors: Unknown Products: One User Avatar | User Profile Picture Problem Types: CWE-79 Description: The One User Avatar WordPress plugin before 2.3.7 does not escape the link and target attributes of its shortcode, allowing users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/762c506a-f57d-450f-99c0-32d750306ddc
CVE ID: CVE-2021-24673 State: PUBLISHED Published: 2021-10-04T11:20:18 Last Updated: 2024-08-03T19:42:16.089Z Vendors: Unknown Products: Appointment Hour Booking – WordPress Booking Plugin Problem Types: CWE-79 Description: The Appointment Hour Booking WordPress plugin before 1.3.16 does not escape some of the Calendar Form settings, allowing high privilege users to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/75a67932-d831-4dfb-a70d-a07650eaa755
CVE ID: CVE-2021-24674 State: PUBLISHED Published: 2021-11-08T17:35:00 Last Updated: 2024-08-03T19:42:16.064Z Vendors: Unknown Products: Genie WP Favicon Problem Types: CWE-352 Description: The Genie WP Favicon WordPress plugin through 0.5.2 does not have CSRF in place when updating the favicon, which could allow attackers to make a logged in admin change it via a CSRF attack Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/26965878-c4c9-4f43-9e9a-6e58d6b46ef2
CVE ID: CVE-2021-24675 State: PUBLISHED Published: 2021-10-18T13:45:55 Last Updated: 2024-08-03T19:42:16.224Z Vendors: Unknown Products: One User Avatar | User Profile Picture Problem Types: CWE-352 Description: The One User Avatar WordPress plugin before 2.3.7 does not check for CSRF when updating the Avatar in page where the [avatar_upload] shortcode is embed. As a result, attackers could make logged in user change their avatar via a CSRF attack Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/9b9a55d5-c121-4b5b-80df-f9f419c0dc55
CVE ID: CVE-2021-24676 State: PUBLISHED Published: 2021-10-04T11:20:20 Last Updated: 2024-08-03T19:42:16.023Z Vendors: Unknown Products: Better Find and Replace Problem Types: CWE-79 Description: The Better Find and Replace WordPress plugin before 1.2.9 does not escape the 's' GET parameter before outputting back in the All Masking Rules page, leading to a Reflected Cross-Site Scripting issue Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/59589e74-f901-4f4d-81de-26ad19d1b7fd
CVE ID: CVE-2021-24677 State: PUBLISHED Published: 2021-10-18T13:45:57 Last Updated: 2024-08-03T19:42:16.066Z Vendors: Unknown Products: Find My Blocks Problem Types: CWE-862 Description: The Find My Blocks WordPress plugin before 3.4.0 does not have authorisation checks in its REST API, which could allow unauthenticated users to enumerate private posts' titles. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/40c7e424-9a97-41ab-a312-2a06b607609a
CVE ID: CVE-2021-24678 State: PUBLISHED Published: 2021-10-04T11:20:21 Last Updated: 2024-08-03T19:42:15.975Z Vendors: Unknown Products: CM Tooltip Glossary – Better SEO and UEX for your WP site Problem Types: CWE-79 Description: The CM Tooltip Glossary WordPress plugin before 3.9.21 does not escape some glossary_tooltip shortcode attributes, which could allow users a role as low as Contributor to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/b83880f7-8614-4409-9305-d059b5df15dd
CVE ID: CVE-2021-24679 State: PUBLISHED Published: 2021-10-04T11:20:23 Last Updated: 2024-08-03T19:42:16.163Z Vendors: Unknown Products: Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop Problem Types: CWE-79 Description: The Bitcoin / AltCoin Payment Gateway for WooCommerce WordPress plugin before 1.6.1 does not escape the 's' GET parameter before outputting back in the All Masking Rules page, leading to a Reflected Cross-Site Scripting issue Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/7c6c0aac-1733-4abc-8e95-05416636a127
CVE ID: CVE-2021-24680 State: PUBLISHED Published: 2022-01-03T12:49:02 Last Updated: 2024-08-03T19:42:16.108Z Vendors: Unknown Products: WP Travel Engine – Travel and Tour Booking Plugin Problem Types: CWE-79 Description: The WP Travel Engine WordPress plugin before 5.3.1 does not escape the Description field in the Trip Destination/Activities/Trip Type and Pricing Category pages, allowing users with a role as low as editor to perform Stored Cross-Site Scripting attacks, even when the unfiltered_html capability is disallowed Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/30f2a0d5-7959-436c-9860-2535020e82d3
CVE ID: CVE-2021-24681 State: PUBLISHED Published: 2021-10-11T10:45:37 Last Updated: 2024-08-03T19:42:16.052Z Vendors: Unknown Products: Duplicate Page Problem Types: CWE-79 Description: The Duplicate Page WordPress plugin through 4.4.2 does not sanitise or escape the Duplicate Post Suffix settings before outputting it, which could allow high privilege users to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/9ebdd1df-1d6f-4399-8b0f-77a79f841464
CVE ID: CVE-2021-24682 State: PUBLISHED Published: 2021-11-01T08:46:04 Last Updated: 2024-08-03T19:42:15.980Z Vendors: Unknown Products: Cool Tag Cloud Problem Types: CWE-79 Description: The Cool Tag Cloud WordPress plugin before 2.26 does not escape the style attribute of the cool_tag_cloud shortcode, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/7dfdd50d-77f9-4f0a-8673-8f033c0b0e05
CVE ID: CVE-2021-24683 State: PUBLISHED Published: 2021-10-11T10:45:39 Last Updated: 2024-08-03T19:42:16.085Z Vendors: Unknown Products: Weather Effect – Christmas Santa Snow Falling Problem Types: CWE-352, CWE-79 Description: The Weather Effect WordPress plugin before 1.3.4 does not have any CSRF checks in place when saving its settings, and do not validate or escape them, which could lead to Stored Cross-Site Scripting issue. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/54f95b51-5804-4bee-9e4a-f73b8ef9bbd5
CVE ID: CVE-2021-24684 State: PUBLISHED Published: 2021-10-18T13:45:58 Last Updated: 2024-08-03T19:42:16.127Z Vendors: Unknown Products: WordPress PDF Light Viewer Plugin Problem Types: CWE-78 Description: The WordPress PDF Light Viewer Plugin WordPress plugin before 1.4.12 allows users with Author roles to execute arbitrary OS command on the server via OS Command Injection when invoking Ghostscript. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/b5295bf9-8cf6-416e-b215-074742a5fc63
CVE ID: CVE-2021-24685 State: PUBLISHED Published: 2021-11-01T08:46:06 Last Updated: 2024-08-03T19:42:15.987Z Vendors: Unknown Products: Flat Preloader Problem Types: CWE-352, CWE-79 Description: The Flat Preloader WordPress plugin before 1.5.4 does not enforce nonce checks when saving its settings, as well as does not sanitise and escape them, which could allow attackers to a make logged in admin change them with a Cross-Site Scripting payload (triggered either in the frontend or backend depending on the payload) Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/972ecde8-3d44-4dd9-81e3-643d8737434f
CVE ID: CVE-2021-24686 State: PUBLISHED Published: 2022-02-01T12:21:19 Last Updated: 2024-08-03T19:42:16.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SVG Support WordPress plugin before 2.3.20 does not escape the "CSS Class to target" setting before outputting it in an attribute, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/38018695-901d-48d9-b39a-7c00df7f0a4b - https://plugins.trac.wordpress.org/changeset/2651929
CVE ID: CVE-2021-24687 State: PUBLISHED Published: 2021-10-04T11:20:24 Last Updated: 2024-08-03T19:42:16.150Z Vendors: Unknown Products: Modern Events Calendar Lite Problem Types: CWE-79 Description: The Modern Events Calendar Lite WordPress plugin before 5.22.2 does not escape some of its settings before outputting them in attributes, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/300ba418-63ed-4c03-9031-263742ed522e
CVE ID: CVE-2021-24688 State: PUBLISHED Published: 2022-02-28T09:06:02 Last Updated: 2024-08-03T19:42:16.089Z Vendors: Unknown Products: Orange Form Problem Types: CWE-284 Description: The Orange Form WordPress plugin through 1.0.1 does not have any authorisation and CSRF checks in all of its AJAX calls, for example the or_delete_filed one which is available to both unauthenticated and authenticated users could allow attackers to delete arbitrary posts.The AJAX calls performing actions on posts also do not ensure that the post belong to them (or that they are allowed to perform such action on it) Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerabilit
form such action on it) Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/78bc7cf1-7563-4ada-aec9-af4c943e3e2c