Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298818 - https://vuldb.com/?ctiid.298818 - https://vuldb.com/?submit.514722 - https://github.com/akjedfha/cve/issues/1
CVE ID: CVE-2025-2063 State: PUBLISHED Published: 2025-03-07T03:31:05.557Z Last Updated: 2025-03-07T18:59:06.980Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: projectworlds Products: Life Insurance Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in projectworlds Life Insurance Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /deleteNominee.php. The manipulation of the argument nominee_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
xploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298819 - https://vuldb.com/?ctiid.298819 - https://vuldb.com/?submit.514749 - https://github.com/ubfbuz3/cve/issues/5
CVE ID: CVE-2025-2064 State: PUBLISHED Published: 2025-03-07T04:00:09.372Z Last Updated: 2025-03-07T17:52:29.898Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: projectworlds Products: Life Insurance Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in projectworlds Life Insurance Management System 1.0. Affected by this issue is some unknown functionality of the file /deletePayment.php. The manipulation of the argument recipt_no leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Re
ely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298820 - https://vuldb.com/?ctiid.298820 - https://vuldb.com/?submit.514751 - https://github.com/ubfbuz3/cve/issues/6
CVE ID: CVE-2025-2065 State: PUBLISHED Published: 2025-03-07T04:00:11.779Z Last Updated: 2025-03-07T17:44:55.614Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: projectworlds Products: Life Insurance Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in projectworlds Life Insurance Management System 1.0. This affects an unknown part of the file /editAgent.php. The manipulation of the argument agent_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vul
en disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298821 - https://vuldb.com/?ctiid.298821 - https://vuldb.com/?submit.514758 - https://github.com/ubfbuz3/cve/issues/7
CVE ID: CVE-2025-2066 State: PUBLISHED Published: 2025-03-07T04:31:04.267Z Last Updated: 2025-03-07T16:29:21.393Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: projectworlds Products: Life Insurance Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in projectworlds Life Insurance Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /updateAgent.php. The manipulation of the argument agent_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vul
en disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298822 - https://vuldb.com/?ctiid.298822 - https://vuldb.com/?submit.514759 - https://github.com/ubfbuz3/cve/issues/8
CVE ID: CVE-2025-2067 State: PUBLISHED Published: 2025-03-07T04:31:05.867Z Last Updated: 2025-03-07T16:26:14.806Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: projectworlds Products: Life Insurance Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in projectworlds Life Insurance Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /search.php. The manipulation of the argument key leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.2
to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298823 - https://vuldb.com/?ctiid.298823 - https://vuldb.com/?submit.514762 - https://github.com/ubfbuz3/cve/issues/9
CVE ID: CVE-2025-2068 State: PUBLISHED Published: 2025-04-25T15:26:34.159Z Last Updated: 2025-04-25T16:48:08.800Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: FileZ Products: Client Problem Types: CWE-601 Description: An open redirect vulnerability was reported in the FileZ client that could allow information disclosure if a crafted url is visited by a local user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.filez.com/securityPolicy/2.html?1744703100
CVE ID: CVE-2025-2069 State: PUBLISHED Published: 2025-04-25T15:26:55.806Z Last Updated: 2025-04-25T16:47:20.616Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: FileZ Products: Client Problem Types: CWE-79 Description: A cross-site scripting vulnerability was reported in the FileZ client that could allow execution of code if a crafted url is visited by a local user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.filez.com/securityPolicy/2.html?1744703100
CVE ID: CVE-2025-2070 State: PUBLISHED Published: 2025-04-25T15:27:19.989Z Last Updated: 2025-04-25T16:46:25.734Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: FileZ Products: Client Problem Types: CWE-611 Description: An improper XML parsing vulnerability was reported in the FileZ client that could allow arbitrary file reads on the system if a crafted url is visited by a local user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.filez.com/securityPolicy/2.html?1744703100
CVE ID: CVE-2025-2071 State: PUBLISHED Published: 2025-03-31T08:33:53.271Z Last Updated: 2025-03-31T16:26:54.053Z Vendors: FAST LTA Products: FAST LTA Silent Brick WebUI Problem Types: CWE-78 Description: A critical OS Command Injection vulnerability has been identified in the FAST LTA Silent Brick WebUI, allowing remote attackers to execute arbitrary operating system commands via specially crafted input. This vulnerability arises due to improper handling of untrusted input, which is passed directly to system-level commands without adequate sanitization or validation. Successful exploitation could allow attackers to execute arbitrary commands on the affected system, potentially resulting in
ssful exploitation could allow attackers to execute arbitrary commands on the affected system, potentially resulting in unauthorized access, data leakage, or full system compromise. Affected WebUI parameters are "hd" and "pi". Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.fast-lta.de/de/fast/silent-bricks-software-2-63
CVE ID: CVE-2025-2072 State: PUBLISHED Published: 2025-03-31T08:34:14.205Z Last Updated: 2025-03-31T16:18:32.084Z Vendors: FAST LTA Products: FAST LTA Silent Brick WebUI Problem Types: CWE-79 Description: A Reflected Cross-Site Scripting (XSS) vulnerability has been discovered in FAST LTA Silent Brick WebUI, allowing attackers to inject malicious JavaScript code into web pages viewed by users. This issue arises when user-supplied input is improperly handled and reflected directly in the output of a web page without proper sanitization or encoding. Exploiting this vulnerability, an attacker can execute arbitrary JavaScript in the context of the victim's browser, potentially leading to session
ity, an attacker can execute arbitrary JavaScript in the context of the victim's browser, potentially leading to session hijacking, data theft, and other malicious actions. Affected WebUI parameters are "h", "hd", "p", "pi", "s", "t", "x", "y". Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.fast-lta.de/de/fast/silent-bricks-software-2-63
CVE ID: CVE-2025-2073 State: PUBLISHED Published: 2025-04-16T23:06:28.608Z Last Updated: 2025-05-08T19:15:06.866Z Vendors: Google Products: ChromeOS Problem Types: Out-of-Bounds Read Description: Out-of-Bounds Read in netfilter/ipset in Linux Kernel ChromeOS [6.1, 5.15, 5.10, 5.4, 4.19] allows a local attacker with low privileges to trigger an out-of-bounds read, potentially leading to information disclosure Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://issuetracker.google.com/issues/380043638 - https://issues.chromium.org/issues/b/380043638
CVE ID: CVE-2025-2074 State: PUBLISHED Published: 2025-03-28T07:33:05.076Z Last Updated: 2025-03-28T14:33:03.929Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: webfactory Products: Advanced Google reCAPTCHA Problem Types: CWE-89 Description: The Advanced Google reCAPTCHA plugin for WordPress is vulnerable to generic SQL Injection via the ‘sSearch’ parameter in all versions up to, and including, 1.29 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already e
ble for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries, particularly when the plugin’s settings page hasn’t been visited and its welcome message has not been dismissed. This issue can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/963a9b30-9194-4abc-aa69-eb333cbddef3?source=cve - https://plugins.trac.wordpress.org/browser/advanced-google-recaptcha/trunk/libs/ajax.php?rev=3248228#L20 - https://plugins.trac.wordpress.org/browser/advanced-google-recaptcha/trunk/libs/ajax.php?rev=32
ax.php?rev=3248228#L20 - https://plugins.trac.wordpress.org/browser/advanced-google-recaptcha/trunk/libs/ajax.php?rev=3248228#L277 - https://plugins.trac.wordpress.org/browser/advanced-google-recaptcha/trunk/libs/ajax.php?rev=3248228#L401 - https://plugins.trac.wordpress.org/browser/advanced-google-recaptcha/trunk/libs/admin.php?rev=3248228#L106 - https://plugins.trac.wordpress.org/browser/advanced-google-recaptcha/trunk/libs/setup.php?rev=3248228#L636 - https://wordpress.org/plugins/advanced-google-recaptcha/#developers - https://plugins.trac.wordpress.org/changeset/3262396/
CVE ID: CVE-2025-2075 State: PUBLISHED Published: 2025-04-04T04:21:22.091Z Last Updated: 2025-04-04T20:20:37.221Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: uncannyowl Products: Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin Problem Types: CWE-862 Description: The Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3.0.2. This is due to add_role() and user_role() functions missing proper capability checks performed through the validate_rest_call() function. This makes it possible for unauthentic
ing proper capability checks performed through the validate_rest_call() function. This makes it possible for unauthenticated attackers to set the role of arbitrary users to administrator granting full access to the site, though privilege escalation requires an active account on the site so this is considered an authenticated privilege escalation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/86b4b0d6-bda2-47f3-a0b5-9733cb7a11f6?source=cve - https://plugins.trac.wordpress.org/changeset/3257300/uncanny-automator/trunk/src/core/classes/class-background-actions.php - https://plugins.trac.wordpress.org/changeset/3265280/
ny-automator/trunk/src/core/classes/class-background-actions.php - https://plugins.trac.wordpress.org/changeset/3265280/uncanny-automator/trunk/src/core/classes/class-background-actions.php
CVE ID: CVE-2025-2076 State: PUBLISHED Published: 2025-03-12T03:21:27.287Z Last Updated: 2025-03-12T13:32:28.679Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: gnarf Products: binlayerpress Problem Types: CWE-79 Description: The binlayerpress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site ins
trary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4af920a9-15fb-44c9-be31-7c9ed5bc2031?source=cve - https://wordpress.org/plugins/binlayerpress/
CVE ID: CVE-2025-2077 State: PUBLISHED Published: 2025-03-12T03:21:28.668Z Last Updated: 2025-03-12T13:24:13.588Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: duogeek Products: Simple Amazon Affiliate Problem Types: CWE-79 Description: The Simple Amazon Affiliate plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'msg' parameter in all versions up to, and including, 1.0.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Add
ts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ecd48e2c-343f-4bae-9d9e-260d003ef87c?source=cve - https://wordpress.org/plugins/simple-amazon-affiliate/
CVE ID: CVE-2025-2078 State: PUBLISHED Published: 2025-03-12T03:21:28.175Z Last Updated: 2025-03-12T13:26:14.638Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: gpenverne Products: BlogBuzzTime for WP Problem Types: CWE-79 Description: The BlogBuzzTime for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affect
, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/746e47f2-3fe3-439c-bd54-a9bba9c86271?source=cve - https://wordpress.org/plugins/blogbuzztime-for-wp/
CVE ID: CVE-2025-2079 State: PUBLISHED Published: 2025-03-13T16:55:27.567Z Last Updated: 2025-03-13T18:49:46.725Z Vendors: Optigo Networks Products: Visual BACnet Capture Tool, Optigo Visual Networks Capture Tool Problem Types: CWE-547 Description: Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain a hard coded secret key. This could allow an attacker to generate valid JWT (JSON Web Token) sessions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-070-02
CVE ID: CVE-2025-2080 State: PUBLISHED Published: 2025-03-13T16:57:30.147Z Last Updated: 2025-03-13T18:46:42.625Z Vendors: Optigo Networks Products: Visual BACnet Capture Tool, Optigo Visual Networks Capture Tool Problem Types: CWE-288 Description: Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain an exposed web management service that could allow an attacker to bypass authentication measures and gain controls over utilities within the products. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-070-02
CVE ID: CVE-2025-2081 State: PUBLISHED Published: 2025-03-13T17:00:03.146Z Last Updated: 2025-03-13T18:42:58.126Z Vendors: Optigo Networks Products: Visual BACnet Capture Tool, Optigo Visual Networks Capture Tool Problem Types: CWE-547 Description: Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 are vulnerable to an attacker impersonating the web application service and mislead victim clients. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-070-02
CVE ID: CVE-2025-2082 State: PUBLISHED Published: 2025-04-30T20:00:44.550Z Last Updated: 2025-04-30T20:17:55.675Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Tesla Products: Model 3 Problem Types: CWE-190 Description: Tesla Model 3 VCSEC Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Tesla Model 3 vehicles. Authentication is not required to exploit this vulnerability. The specific flaw exists within the VCSEC module. By manipulating the certificate response sent from the Tire Pressure Monitoring System (TPMS), an attacker can trigger an integer overflow before
ficate response sent from the Tire Pressure Monitoring System (TPMS), an attacker can trigger an integer overflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the VCSEC module and send arbitrary messages to the vehicle CAN bus. Was ZDI-CAN-23800. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-25-265/
CVE ID: CVE-2025-2083 State: PUBLISHED Published: 2025-04-15T09:22:16.754Z Last Updated: 2025-04-15T13:08:10.652Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: binsaifullah Products: Logo Carousel Gutenberg Block Problem Types: CWE-79 Description: The Logo Carousel Gutenberg Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘sliderId’ parameter in all versions up to, and including, 2.1.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an inj
butor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/604123f4-9247-489a-8fc8-478bfc697c7f?source=cve - https://plugins.trac.wordpress.org/browser/awesome-logo-carousel-block/tags/2.1.3/inc/classes/style.php#L86 - https://wordpress.org/plugins/awesome-logo-carousel-block/#developers - https://plugins.trac.wordpress.org/changeset/3271660/
CVE ID: CVE-2025-2084 State: PUBLISHED Published: 2025-03-07T12:00:08.430Z Last Updated: 2025-03-07T14:07:41.636Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: PHPGurukul Products: Human Metapneumovirus Testing Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file /search-report.php of the component Search Report Page. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: -
to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298896 - https://vuldb.com/?ctiid.298896 - https://vuldb.com/?submit.514804 - https://github.com/sorcha-l/cve/blob/main/Human%20Metapneumovirus%20(HMPV)%20%E2%80%93%20Testing%20Management%20System%20%20XSS%20in%20search-report.php.md - https://phpgurukul.com/
CVE ID: CVE-2025-2085 State: PUBLISHED Published: 2025-03-07T12:00:10.493Z Last Updated: 2025-03-07T13:25:39.472Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: StarSea99 Products: starsea-mall Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic has been found in StarSea99 starsea-mall 1.0. This affects an unknown part of the file /admin/carousels/save. The manipulation of the argument redirectUrl leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298899 - https://vuldb.com
used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298899 - https://vuldb.com/?ctiid.298899 - https://vuldb.com/?submit.514958 - https://github.com/ExecX/security/blob/main/111.md
CVE ID: CVE-2025-2086 State: PUBLISHED Published: 2025-03-07T14:00:09.599Z Last Updated: 2025-03-07T14:56:42.508Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: StarSea99 Products: starsea-mall Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic was found in StarSea99 starsea-mall 1.0. This vulnerability affects unknown code of the file /admin/indexConfigs/update. The manipulation of the argument redirectUrl leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298900 - https://vuldb.co
e used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298900 - https://vuldb.com/?ctiid.298900 - https://vuldb.com/?submit.514959 - https://github.com/ExecX/security/blob/main/222.md
CVE ID: CVE-2025-2087 State: PUBLISHED Published: 2025-03-07T14:00:11.730Z Last Updated: 2025-03-07T14:35:17.923Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: StarSea99 Products: starsea-mall Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, has been found in StarSea99 starsea-mall 1.0. This issue affects some unknown processing of the file /admin/goods/update. The manipulation of the argument goodsName leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298901 - https
c and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298901 - https://vuldb.com/?ctiid.298901 - https://vuldb.com/?submit.514960 - https://github.com/ExecX/security/blob/main/333.md