Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-4597 State: PUBLISHED Published: 2024-05-09T01:38:11.850Z Last Updated: 2024-08-29T15:04:58.230Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-352 Description: An issue has been discovered in GitLab EE affecting all versions from 16.7 before 16.9.7, all versions starting from 16.10 before 16.10.5, all versions starting from 16.11 before 16.11.2. An attacker could force a user with an active SAML session to approve an MR via CSRF. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/438686
CVE ID: CVE-2024-4598 State: PUBLISHED Published: 2025-09-23T10:39:16.195Z Last Updated: 2025-09-23T19:35:33.987Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: WSO2 Products: WSO2 API Manager, WSO2 Micro Integrator Description: An information disclosure vulnerability exists in multiple WSO2 products due to improper implementation of the enrich mediator. Authenticated users may be able to view unintended business data from other mediation contexts because the internal state is not properly isolated or cleared between executions. This vulnerability does not impact user credentials or access tokens but may lead to leakage of sensitive business information han
rability does not impact user credentials or access tokens but may lead to leakage of sensitive business information handled during message flows. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2025/WSO2-2024-3355/
CVE ID: CVE-2024-4599 State: PUBLISHED Published: 2024-05-07T10:48:39.295Z Last Updated: 2024-08-01T20:47:41.238Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: LAN Messenger Products: LAN Messenger Problem Types: CWE-400 Description: Remote denial of service vulnerability in LAN Messenger affecting version 3.4.0. This vulnerability allows an attacker to crash the LAN Messenger service by sending a long string directly and continuously over the UDP protocol. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/denial-service-vulnerability-lan-messenger
CVE ID: CVE-2024-4600 State: PUBLISHED Published: 2024-05-07T11:30:09.045Z Last Updated: 2024-08-01T20:47:41.220Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: Socomec Products: Net vision Problem Types: CWE-352 Description: Cross-Site Request Forgery vulnerability in Socomec Net Vision, version 7.20. This vulnerability could allow an attacker to trick registered users into performing critical actions, such as adding and updating accounts, due to lack of proper sanitisation of the ‘set_param.cgi’ file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vuln
ulnrichment: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-socomec-net-vision
CVE ID: CVE-2024-4601 State: PUBLISHED Published: 2024-05-07T11:31:41.772Z Last Updated: 2024-08-01T20:47:41.395Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Socomec Products: Net vision Problem Types: CWE-287 Description: An incorrect authentication vulnerability has been found in Socomec Net Vision affecting version 7.20. This vulnerability allows an attacker to perform a brute force attack on the application and recover a valid session, because the application uses a five-digit integer value. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnera
richment: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-socomec-net-vision
CVE ID: CVE-2024-4602 State: PUBLISHED Published: 2024-07-13T06:00:06.435Z Last Updated: 2024-08-01T20:47:41.440Z Vendors: Unknown Products: Embed Peertube Playlist Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Embed Peertube Playlist WordPress plugin before 1.10 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/bc15bac7-8241-472a-a7c1-58070714501d/
CVE ID: CVE-2024-4603 State: PUBLISHED Published: 2024-05-16T15:21:20.050Z Last Updated: 2024-10-14T14:56:01.784Z Vendors: OpenSSL Products: OpenSSL Problem Types: CWE-606 Description: Issue summary: Checking excessively long DSA keys or parameters may be very slow. Impact summary: Applications that use the functions EVP_PKEY_param_check() or EVP_PKEY_public_check() to check a DSA public key or DSA parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an untrusted source this may lead to a Denial of Service. The functions EVP_PKEY_param_check() or EVP_PKEY_public_check() perform various checks on DSA parameters. Some of those comput
nctions EVP_PKEY_param_check() or EVP_PKEY_public_check() perform various checks on DSA parameters. Some of those computations take a long time if the modulus (`p` parameter) is too large. Trying to use a very large modulus is slow and OpenSSL will not allow using public keys with a modulus which is over 10,000 bits in length for signature verification. However the key and parameter check functions do not limit the modulus size when performing the checks. An application that calls EVP_PKEY_param_check() or EVP_PKEY_public_check() and supplies a key or parameters obtained from an untrusted source could be vulnerable to a Denial of Service attack. These functions are not called by OpenSSL itse
om an untrusted source could be vulnerable to a Denial of Service attack. These functions are not called by OpenSSL itself on untrusted DSA keys so only applications that directly call these functions may be vulnerable. Also vulnerable are the OpenSSL pkey and pkeyparam command line applications when using the `-check` option. The OpenSSL SSL/TLS implementation is not affected by this issue. The OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.openssl.org/news/secadv/20240516.txt - https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397 - https://gith
/secadv/20240516.txt - https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397 - https://github.com/openssl/openssl/commit/9c39b3858091c152f52513c066ff2c5a47969f0d - https://github.com/openssl/openssl/commit/da343d0605c826ef197aceedc67e8e04f065f740 - https://github.com/openssl/openssl/commit/53ea06486d296b890d565fb971b2764fcd826e7e
CVE ID: CVE-2024-4604 State: PUBLISHED Published: 2024-06-26T15:09:22.655Z Last Updated: 2024-08-01T20:47:41.263Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Magarsus Consultancy Products: SSO (Single Sign On) Problem Types: CWE-601 Description: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Magarsus Consultancy SSO (Single Sign On) allows Manipulating Hidden Fields.This issue affects SSO (Single Sign On): from 1.0 before 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.usom.gov.tr/bildirim/tr-24-0800
CVE ID: CVE-2024-4605 State: PUBLISHED Published: 2024-05-09T20:03:18.458Z Last Updated: 2024-08-01T20:47:41.321Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Breakdance Products: Breakdance Problem Types: CWE-94 Improper Control of Generation of Code ('Code Injection') Description: The Breakdance plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.7.1 via post meta data. This is due to the plugin storing custom data in metadata without an underscore prefix. This makes it possible for lower privileged users, such as contributors, to edit this data via UI. As a result they can escalate their privileges or execu
rivileged users, such as contributors, to edit this data via UI. As a result they can escalate their privileges or execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/095b23b7-71ab-41eb-b666-73df2e1a7eb4?source=cve - https://breakdance.com/breakdance-1-7-2-now-available-security-update/
CVE ID: CVE-2024-4606 State: PUBLISHED Published: 2024-05-09T11:59:18.569Z Last Updated: 2024-08-28T08:03:03.931Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: BdThemes Products: Ultimate Store Kit Elementor Addons Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in BdThemes Ultimate Store Kit Elementor Addons.This issue affects Ultimate Store Kit Elementor Addons: from n/a through 2.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/ultimate-store-kit/wordpress-ultimate-store-kit-elementor-addons-woocommerce-builder-edd-builder-plug
base/vulnerability/ultimate-store-kit/wordpress-ultimate-store-kit-elementor-addons-woocommerce-builder-edd-builder-plugin-1-6-2-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-4607 State: PUBLISHED Published: 2024-08-05T11:33:31.766Z Last Updated: 2024-09-30T16:09:42.249Z Vendors: Arm Ltd Products: Bifrost GPU Kernel Driver, Valhall GPU Kernel Driver, Arm 5th Gen GPU Architecture Kernel Driver Problem Types: CWE-416 Description: Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.This issue affects Bifrost GPU Kernel Driver: from r41p0 through r49p0; Valhall GPU Kernel Driver: from r41p0 through r49p0; Arm 5th Gen GPU Architec
CVE ID: CVE-2024-4608 State: PUBLISHED Published: 2024-06-06T03:32:53.251Z Last Updated: 2024-08-01T20:47:41.776Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: artbees Products: SellKit – Funnel builder and checkout optimizer for WooCommerce to sell more, faster Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The SellKit – Funnel builder and checkout optimizer for WooCommerce to sell more, faster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter in all versions up to, and including, 1.9.8 due to insufficient input sanitization and output escaping.
e 'id' parameter in all versions up to, and including, 1.9.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9fbb31a5-9ed2-445a-b309-a9835128eb44?source=cve - https://plugins.trac.wordpress.org/browser/sellkit/trunk/includes/elementor/modules/optin/fields/acceptance.php#L31 - https://plugins.trac.wordpress.org/browser/sellkit/trunk/includes/el
elementor/modules/optin/fields/acceptance.php#L31 - https://plugins.trac.wordpress.org/browser/sellkit/trunk/includes/elementor/modules/optin/fields/field-base.php#L304 - https://plugins.trac.wordpress.org/browser/sellkit/trunk/includes/elementor/modules/optin/widgets/optin.php#L48
CVE ID: CVE-2024-4609 State: PUBLISHED Published: 2024-05-16T15:13:45.048Z Last Updated: 2024-08-01T20:47:41.128Z Vendors: Rockwell Automation Products: FactoryTalk® View SE Problem Types: CWE-20 Description: A vulnerability exists in the Rockwell Automation FactoryTalk® View SE Datalog function that could allow a threat actor to inject a malicious SQL statement if the SQL database has no authentication in place or if legitimate credentials were stolen. If exploited, the attack could result in information exposure, revealing sensitive information. Additionally, a threat actor could potentially modify and delete the data in a remote database. An attack would only affect the HMI design time, n
or could potentially modify and delete the data in a remote database. An attack would only affect the HMI design time, not runtime. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.rockwellautomation.com/en-us/support/advisory.SD1670.html
CVE ID: CVE-2024-4610 State: PUBLISHED Published: 2024-06-07T11:25:08.378Z Last Updated: 2025-10-21T23:05:16.326Z Vendors: Arm Ltd Products: Bifrost GPU Kernel Driver, Valhall GPU Kernel Driver Problem Types: CWE-416 Description: Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.This issue affects Bifrost GPU Kernel Driver: from r34p0 through r40p0; Valhall GPU Kernel Driver: from r34p0 through r40p0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://developer.arm.com/Arm%
Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities
CVE ID: CVE-2024-4611 State: PUBLISHED Published: 2024-05-29T04:30:14.177Z Last Updated: 2024-08-01T20:47:41.366Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: scottopolis Products: AppPresser – Mobile App Framework Problem Types: CWE-703 Improper Check or Handling of Exceptional Conditions Description: The AppPresser plugin for WordPress is vulnerable to improper missing encryption exception handling on the 'decrypt_value' and on the 'doCookieAuth' functions in all versions up to, and including, 4.3.2. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they previously used the login
cated attackers to log in as any existing user on the site, such as an administrator, if they previously used the login via the plugin API. This can only be exploited if the 'openssl' php extension is not loaded on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d1498fdf-9d5e-4277-92be-469d6646864b?source=cve - https://plugins.trac.wordpress.org/browser/apppresser/trunk/inc/AppPresser_User.php?rev=2789173#L40 - https://plugins.trac.wordpress.org/browser/apppresser/trunk/inc/AppPresser_Theme_Switcher.php?rev=2456516#L167 - https://plugins.trac.wordpress.org/browser/apppresser/trunk/
/trunk/inc/AppPresser_Theme_Switcher.php?rev=2456516#L167 - https://plugins.trac.wordpress.org/browser/apppresser/trunk/inc/AppPresser_Theme_Switcher.php?rev=2456516#L133 - https://plugins.trac.wordpress.org/changeset/3093975/apppresser
CVE ID: CVE-2024-4612 State: PUBLISHED Published: 2024-09-12T16:57:08.255Z Last Updated: 2024-09-13T14:17:34.021Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-601 Description: An issue has been discovered in GitLab EE affecting all versions starting from 12.9 before 17.1.7, 17.2 before 17.2.5, and 17.3 before 17.3.2. Under certain conditions an open redirect vulnerability could allow for an account takeover by breaking the OAuth flow. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/460707 - https://hackerone.com/reports/247985
ram Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/460707 - https://hackerone.com/reports/2479857
CVE ID: CVE-2024-4614 State: REJECTED Published: N/A Last Updated: 2024-05-09T18:15:24.427Z Description: No description available.
CVE ID: CVE-2024-4615 State: PUBLISHED Published: 2024-06-13T07:31:52.796Z Last Updated: 2024-08-01T20:47:41.208Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: elespare Products: Elespare – News, Magazine and Blog Elements & Blog Addons for Elementor with Header Footer Builder. One Click Import: No Coding Required! Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Elespare – Blog, Magazine and Newspaper Addons for Elementor with Templates, Widgets, Kits, and Header/Footer Builder. One Click Import: No Coding Required! plugin for WordPress is vulnerable to Stored Cross-Site Scripting
Footer Builder. One Click Import: No Coding Required! plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Horizontal Nav Menu' widget in all versions up to, and including, 3.1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/97a1ab2f-b531-46a7-ad51-a652fc078212?source=cve - https://plugins.tr
//www.wordfence.com/threat-intel/vulnerabilities/id/97a1ab2f-b531-46a7-ad51-a652fc078212?source=cve - https://plugins.trac.wordpress.org/browser/elespare/trunk/src/widgets/nav-menu-horizontal/widget.php#L856
CVE ID: CVE-2024-4616 State: PUBLISHED Published: 2024-06-21T06:00:05.195Z Last Updated: 2024-08-09T18:46:12.718Z Vendors: Unknown Products: Widget Bundle Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Widget Bundle WordPress plugin through 2.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against only unauthenticated users Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/d203bf3b-aee9-4755-b429-d6bbdd940890/
CVE ID: CVE-2024-4617 State: PUBLISHED Published: 2024-05-16T11:05:27.664Z Last Updated: 2024-08-01T20:47:41.233Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: rankmath Products: Rank Math SEO with AI Best SEO Tools Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Rank Math SEO with AI Best SEO Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in versions up to, and including, 1.0.218 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level permissions and above
on and output escaping. This makes it possible for authenticated attackers, with contributor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/474fdbcb-fe3c-4a79-a847-363f81b300c2?source=cve - https://plugins.trac.wordpress.org/browser/seo-by-rank-math/trunk/includes/modules/schema/blocks/class-block-faq.php#L183 - https://plugins.trac.wordpress.org/changeset/3084351/
CVE ID: CVE-2024-4618 State: PUBLISHED Published: 2024-05-15T01:56:53.841Z Last Updated: 2024-08-01T20:47:41.212Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: timstrifler Products: Exclusive Addons for Elementor Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Team Member widget in all versions up to, and including, 2.6.9.6 due to insufficient input sanitization and output escaping on user supplied 'url' attribute. This makes it possible for authenticated attackers, with contrib
n and output escaping on user supplied 'url' attribute. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/2e82478c-e476-4cdf-ab72-f578331058e2?source=cve - https://plugins.trac.wordpress.org/browser/exclusive-addons-for-elementor/tags/2.6.9.6/elements/team-member/team-member.php#L1696 - https://plugins.trac.wordpress.org/changeset/3083582/#file4 - https://wordpress.org/plugins/exclusive-addons-for-elemen
https://plugins.trac.wordpress.org/changeset/3083582/#file4 - https://wordpress.org/plugins/exclusive-addons-for-elementor/#developers
CVE ID: CVE-2024-4619 State: PUBLISHED Published: 2024-05-21T11:02:29.486Z Last Updated: 2024-08-01T20:47:41.239Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: elemntor Products: Elementor Website Builder – More than Just a Page Builder Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Elementor Website Builder – More than Just a Page Builder plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the ‘hover_animation’ parameter in versions up to, and including, 3.21.4 due to insufficient input sanitization and output escaping. This makes it possible for authe
p to, and including, 3.21.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c7e1028e-e04b-46c4-b574-889d9fc1069d?source=cve - https://plugins.trac.wordpress.org/browser/elementor/trunk/includes/widgets/image-box.php#L696 - https://plugins.trac.wordpress.org/changeset/3089420
CVE ID: CVE-2024-4620 State: PUBLISHED Published: 2024-06-07T06:00:02.468Z Last Updated: 2024-08-01T20:47:41.237Z Vendors: Unknown Products: ARForms - Premium WordPress Form Builder Plugin Problem Types: CWE-94 Improper Control of Generation of Code ('Code Injection') Description: The ARForms - Premium WordPress Form Builder Plugin WordPress plugin before 6.6 allows unauthenticated users to modify uploaded files in such a way that PHP code can be uploaded when an upload file input is included on a form Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/dc34dc2d-d5a1-4e28-8507-33f659ead647/
CVE ID: CVE-2024-4621 State: PUBLISHED Published: 2024-06-07T06:00:02.652Z Last Updated: 2024-08-01T20:47:41.215Z Vendors: Unknown Products: ARForms - Premium WordPress Form Builder Plugin Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The ARForms - Premium WordPress Form Builder Plugin WordPress plugin before 6.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/33a366d