Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-30143 State: PUBLISHED Published: 2025-03-13T17:34:50.161Z Last Updated: 2025-03-13T18:08:01.419Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: HCL Software Products: HCL AppScan Traffic Recorder Problem Types: CWE-22 Description: HCL AppScan Traffic Recorder fails to adequately neutralize special characters within the filename, potentially allowing it to resolve to a location beyond the restricted directory. Potential exploits can completely disrupt or takeover the application or the computer where the application is running. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_articl
ning. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0117697 - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119824
CVE ID: CVE-2024-30145 State: PUBLISHED Published: 2025-04-30T21:15:23.377Z Last Updated: 2025-05-01T15:34:19.195Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: HCL Software Products: HCL Domino Leap Problem Types: CWE-79 Description: Multiple vectors in HCL Domino Volt and Domino Leap allow client-side script injection in the authoring environment and deployed applications. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120722
CVE ID: CVE-2024-30146 State: PUBLISHED Published: 2025-04-30T21:16:31.949Z Last Updated: 2025-05-01T15:34:11.144Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: HCL Software Products: HCL Domino Leap Problem Types: CWE-284 Description: Improper access control of endpoint in HCL Domino Leap allows certain admin users to import applications from the server's filesystem. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120722
CVE ID: CVE-2024-30147 State: PUBLISHED Published: 2025-04-24T16:21:24.719Z Last Updated: 2025-04-24T18:11:51.948Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: HCL Software Products: HCL Leap Problem Types: CWE-79 Description: Multiple vectors in HCL Leap allow client-side script injection in the authoring environment and deployed applications. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119900
CVE ID: CVE-2024-30148 State: PUBLISHED Published: 2025-04-24T16:10:00.714Z Last Updated: 2025-04-24T17:41:59.455Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: HCL Software Products: HCL Leap Problem Types: CWE-284 Description: Improper access control of endpoint in HCL Leap allows certain admin users to import applications from the server's filesystem. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119900
CVE ID: CVE-2024-30149 State: PUBLISHED Published: 2024-10-31T08:25:14.693Z Last Updated: 2024-10-31T13:53:58.166Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: HCL Software Products: AppScan Source Problem Types: CWE-295 Description: HCL AppScan Source <= 10.6.0 does not properly validate a TLS/SSL certificate for an executable. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0116990
CVE ID: CVE-2024-30150 State: PUBLISHED Published: 2025-02-25T22:21:28.699Z Last Updated: 2025-02-26T15:32:44.264Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: HCL Software Products: MyCloud Problem Types: CWE-269 Description: HCL MyCloud is affected by Improper Access Control - an unauthenticated privilege escalation vulnerability which may lead to information disclosure and potential for Server-Side Request Forgery (SSRF) and Denial of Service(DOS) attacks from unauthenticated users. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119368
CVE ID: CVE-2024-30152 State: PUBLISHED Published: 2025-04-25T17:55:53.888Z Last Updated: 2025-04-25T18:23:52.243Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: HCL Software Products: HCL SX Problem Types: CWE-327 Description: HCL SX v21 is affected by usage of a weak cryptographic algorithm. An attacker could exploit this weakness to gain access to sensitive information, modify data, or other impacts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120735
CVE ID: CVE-2024-30154 State: PUBLISHED Published: 2025-03-03T18:10:53.787Z Last Updated: 2025-03-04T16:43:39.879Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: HCL Software Products: HCL SX Description: HCL SX is vulnerable to cross-site request forgery vulnerability which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119437
CVE ID: CVE-2024-30155 State: PUBLISHED Published: 2025-03-26T07:59:52.442Z Last Updated: 2025-03-26T14:29:40.392Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: HCL Software Products: HCL SX Problem Types: CWE-1275 Description: HCL SX does not set the secure attribute on authorization tokens or session cookies. Attackers may potentially be able to obtain access to the cookie values via a Cross-Site-Forgery-Request (CSRF). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120110
CVE ID: CVE-2024-30156 State: PUBLISHED Published: 2024-03-24T00:00:00 Last Updated: 2024-11-21T19:12:19.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Varnish Cache before 7.3.2 and 7.4.x before 7.4.3 (and before 6.0.13 LTS), and Varnish Enterprise 6 before 6.0.12r6, allows credits exhaustion for an HTTP/2 connection control flow window, aka a Broke Window Attack. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://varnish-cache.org/security/VSV00014.html - https://varnish-cache.org/docs/7.5/whats-new/changes-7.5.html#security
CVE ID: CVE-2024-30157 State: PUBLISHED Published: 2024-10-21T00:00:00 Last Updated: 2024-10-22T13:38:41.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in the Suite Applications Services component of Mitel MiCollab through 9.7.1.110 could allow an authenticated attacker with administrative privileges to conduct a SQL Injection attack due to insufficient validation of user input. A successful exploit could allow an attacker to execute arbitrary database and management operations. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0004
CVE ID: CVE-2024-30158 State: PUBLISHED Published: 2024-10-21T00:00:00 Last Updated: 2024-10-22T13:34:57.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in the web conferencing component of Mitel MiCollab through 9.7.1.110 could allow an authenticated attacker with administrative privileges to conduct a SQL Injection attack due to insufficient validation of user input. A successful exploit could allow an attacker to execute arbitrary database and management operations. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0004
CVE ID: CVE-2024-30159 State: PUBLISHED Published: 2024-10-21T00:00:00.000Z Last Updated: 2025-03-22T14:45:55.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in the web conferencing component of Mitel MiCollab through 9.7.1.110 could allow an authenticated attacker with administrative privileges to conduct a Stored Cross-Site Scripting (XSS) attack due to insufficient validation of user input. A successful exploit could allow an attacker to execute arbitrary scripts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0005
CVE ID: CVE-2024-30160 State: PUBLISHED Published: 2024-10-21T00:00:00.000Z Last Updated: 2025-03-22T14:21:05.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in the Suite Applications Services component of Mitel MiCollab through 9.7.1.110 could allow an authenticated attacker with administrative privileges to conduct a Stored Cross-Site Scripting (XSS) attack due to insufficient validation of user input. A successful exploit could allow an attacker to execute arbitrary scripts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0005
CVE ID: CVE-2024-30161 State: PUBLISHED Published: 2024-03-24T00:00:00.000Z Last Updated: 2025-03-14T00:58:52.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Qt 6.5.4, 6.5.5, and 6.6.2, QNetworkReply header data might be accessed via a dangling pointer in Qt for WebAssembly (wasm). (Earlier and later versions are unaffected.) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://codereview.qt-project.org/c/qt/qtbase/+/544314
CVE ID: CVE-2024-30162 State: PUBLISHED Published: 2024-06-07T00:00:00 Last Updated: 2024-08-02T01:25:03.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: Invision Community through 4.7.16 allows remote code execution via the applications/core/modules/admin/editor/toolbar.php IPS\core\modules\admin\editor\_toolbar::addPlugin() method. This method handles uploaded ZIP files that are extracted into the applications/core/interface/ckeditor/ckeditor/plugins/ directory without properly verifying their content. This can be exploited by admin users (with the toolbar_manage permission) to write arbitrary PHP files into that directory, leading to execution of arbitrary PHP code in the c
manage permission) to write arbitrary PHP files into that directory, leading to execution of arbitrary PHP code in the context of the web server user. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://invisioncommunity.com - http://seclists.org/fulldisclosure/2024/Apr/21
CVE ID: CVE-2024-30163 State: PUBLISHED Published: 2024-06-07T00:00:00.000Z Last Updated: 2025-03-19T16:09:56.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Invision Community before 4.7.16 allow SQL injection via the applications/nexus/modules/front/store/store.php IPS\nexus\modules\front\store\_store::_categoryView() method, where user input passed through the filter request parameter is not properly sanitized before being used to execute SQL queries. This can be exploited by unauthenticated attackers to carry out Blind SQL Injection attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://invisioncommunity.com/release-note
nalyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://invisioncommunity.com/release-notes/4716-r128/ - http://seclists.org/fulldisclosure/2024/Apr/20
CVE ID: CVE-2024-30164 State: PUBLISHED Published: 2024-05-28T16:44:57.378Z Last Updated: 2025-02-13T15:47:48.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Amazon AWS Client VPN has a buffer overflow that could potentially allow a local actor to execute arbitrary commands with elevated permissions. This is resolved in 3.11.1 on Windows, 3.9.1 on macOS, and 3.12.1 on Linux. NOTE: although the macOS resolution is the same as for CVE-2024-30165, this vulnerability on macOS is not the same as CVE-2024-30165. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.aws.amazon.com/vpn/latest/clientvpn-user/client-vpn-connect-linux.htm
CVE Program Container: References: - https://docs.aws.amazon.com/vpn/latest/clientvpn-user/client-vpn-connect-linux.html - https://docs.aws.amazon.com/vpn/latest/clientvpn-user/client-vpn-connect-macos.html - https://docs.aws.amazon.com/vpn/latest/clientvpn-user/client-vpn-connect-windows.html
CVE ID: CVE-2024-30165 State: PUBLISHED Published: 2024-05-28T16:45:33.465Z Last Updated: 2025-02-13T15:47:49.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: Amazon AWS Client VPN before 3.9.1 on macOS has a buffer overflow that could potentially allow a local actor to execute arbitrary commands with elevated permissions, a different vulnerability than CVE-2024-30164. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.aws.amazon.com/vpn/latest/clientvpn-user/client-vpn-connect-macos.html
CVE ID: CVE-2024-30166 State: PUBLISHED Published: 2024-04-03T00:00:00 Last Updated: 2024-08-02T01:25:03.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Mbed TLS 3.3.0 through 3.5.2 before 3.6.0, a malicious client can cause information disclosure or a denial of service because of a stack buffer over-read (of less than 256 bytes) in a TLS 1.3 server via a TLS 3.1 ClientHello. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://mbed-tls.readthedocs.io/en/latest/tech-updates/security-advisories/ - https://github.com/Mbed-TLS/mbedtls/releases/tag/v3.6.0
CVE ID: CVE-2024-30170 State: PUBLISHED Published: 2024-08-06T00:00:00 Last Updated: 2024-08-06T15:34:17.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: PrivX before 34.0 allows data exfiltration and denial of service via the REST API. This is fixed in minor versions 33.1, 32.3, 31.3, and later, and in major version 34.0 and later, Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://privx.docs.ssh.com/docs/security - https://info.ssh.com/improper-input-validation-faq
CVE ID: CVE-2024-30171 State: PUBLISHED Published: 2024-05-09T00:00:00 Last Updated: 2024-08-19T17:18:20.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Bouncy Castle Java TLS API and JSSE Provider before 1.78. Timing-based leakage may occur in RSA based handshakes because of exception processing. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.bouncycastle.org/latest_releases.html - https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9030171 - https://github.com/bcgit/bc-csharp/wiki/CVE%E2%80%902024%E2%80%9030171 - https://security.netapp.com/advisory/ntap-20240614-0008/
CVE ID: CVE-2024-30172 State: PUBLISHED Published: 2024-05-09T00:00:00 Last Updated: 2024-11-05T17:15:29.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Bouncy Castle Java Cryptography APIs before 1.78. An Ed25519 verification code infinite loop can occur via a crafted signature and public key. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.bouncycastle.org/latest_releases.html - https://security.netapp.com/advisory/ntap-20240614-0007/
CVE ID: CVE-2024-30176 State: PUBLISHED Published: 2024-05-01T00:00:00 Last Updated: 2024-10-29T19:16:20.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Logpoint before 7.4.0, an attacker can enumerate a valid list of usernames by using publicly exposed URLs of shared widgets. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://logpoint.com - https://servicedesk.logpoint.com/hc/en-us/articles/18435146614301-Username-Enumeration-on-Shared-Widgets
CVE ID: CVE-2024-30177 State: PUBLISHED Published: 2024-03-27T10:21:52.380Z Last Updated: 2024-08-02T18:28:19.968Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Exclusive Addons Products: Exclusive Addons Elementor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Exclusive Addons Exclusive Addons Elementor allows Stored XSS.This issue affects Exclusive Addons Elementor: from n/a through 2.6.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/exclusive-addons-for-elementor/wordpress-ex
DP Vulnrichment: References: - https://patchstack.com/database/vulnerability/exclusive-addons-for-elementor/wordpress-exclusive-addons-for-elementor-plugin-2-6-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-30178 State: PUBLISHED Published: 2024-03-27T10:25:29.714Z Last Updated: 2024-08-02T15:28:35.048Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Patrick Posner Products: Simply Static Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Patrick Posner Simply Static allows Stored XSS.This issue affects Simply Static: from n/a through 3.1.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/simply-static/wordpress-simply-static-plugin-3-1-3-cross-site-scripting-xss-vulnerabil
hstack.com/database/vulnerability/simply-static/wordpress-simply-static-plugin-3-1-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-30179 State: PUBLISHED Published: 2024-03-27T11:25:24.532Z Last Updated: 2024-08-06T16:36:04.915Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: BoldThemes Products: Bold Page Builder Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BoldThemes Bold Page Builder allows Stored XSS.This issue affects Bold Page Builder: from n/a through 4.7.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/bold-page-builder/wordpress-bold-page-builder-plugin-4-7-6-cross-site-scripting-xs
patchstack.com/database/vulnerability/bold-page-builder/wordpress-bold-page-builder-plugin-4-7-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-30180 State: PUBLISHED Published: 2024-03-27T11:26:37.970Z Last Updated: 2024-08-08T19:21:54.546Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Easy Social Feed Products: Easy Social Feed Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Easy Social Feed allows Stored XSS.This issue affects Easy Social Feed: from n/a through 6.5.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/easy-facebook-likebox/wordpress-easy-social-feed-plugin-6-5-3-cross-site-scripting-xss-vul
ck.com/database/vulnerability/easy-facebook-likebox/wordpress-easy-social-feed-plugin-6-5-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-30181 State: PUBLISHED Published: 2024-03-27T11:39:22.535Z Last Updated: 2024-08-02T14:28:36.841Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Plainware Products: Locatoraid Store Locator Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Plainware Locatoraid Store Locator allows Stored XSS.This issue affects Locatoraid Store Locator: from n/a through 3.9.30. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/locatoraid/wordpress-locatoraid-store-locator-plugin-3-9-30-cr
ferences: - https://patchstack.com/database/vulnerability/locatoraid/wordpress-locatoraid-store-locator-plugin-3-9-30-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-30182 State: PUBLISHED Published: 2024-03-27T11:46:10.227Z Last Updated: 2024-08-02T14:41:19.390Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: HasThemes Products: HT Mega Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HasThemes HT Mega allows Stored XSS.This issue affects HT Mega: from n/a through 2.4.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/ht-mega-for-elementor/wordpress-ht-mega-absolute-addons-for-elementor-plugin-2-4-3-cross-site-scripting-xss-vulner
ility/ht-mega-for-elementor/wordpress-ht-mega-absolute-addons-for-elementor-plugin-2-4-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-30183 State: PUBLISHED Published: 2024-03-27T11:47:23.318Z Last Updated: 2024-08-05T16:51:06.516Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Livemesh Products: Livemesh Addons for WPBakery Page Builder Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Livemesh Livemesh Addons for WPBakery Page Builder allows Stored XSS.This issue affects Livemesh Addons for WPBakery Page Builder: from n/a through 3.7. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/addons-for-visua
Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/addons-for-visual-composer/wordpress-wpbakery-page-builder-addons-by-livemesh-plugin-3-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-30184 State: PUBLISHED Published: 2024-03-27T11:48:57.247Z Last Updated: 2024-08-02T18:17:58.920Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Looking Forward Software Incorporated. Products: Popup Builder Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Looking Forward Software Incorporated. Popup Builder allows Stored XSS.This issue affects Popup Builder: from n/a through 4.2.6. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/popup-builder/wordpress-popup-builder-
ISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/popup-builder/wordpress-popup-builder-plugin-4-2-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-30185 State: PUBLISHED Published: 2024-03-27T11:50:07.811Z Last Updated: 2024-08-02T15:27:32.497Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: BdThemes Products: Element Pack Elementor Addons Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Element Pack Elementor Addons allows Stored XSS.This issue affects Element Pack Elementor Addons: from n/a through 5.5.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/bdthemes-element-pack-lite/wordpress-element-pack-
richment: References: - https://patchstack.com/database/vulnerability/bdthemes-element-pack-lite/wordpress-element-pack-elementor-addons-plugin-5-5-3-cross-site-scripting-xss-vulnerability?_s_id=cve