Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-3280 State: PUBLISHED Published: 2024-05-02T07:34:30.261Z Last Updated: 2024-08-01T20:05:08.376Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: wpsitenet Products: Follow Us Badges Problem Types: CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Description: The Follow Us Badges plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpsite_follow_us_badges shortcode in all versions up to, and including, 3.1.10 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access a
scaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ef1ccef8-9066-4f5c-b5c5-9fa6e54f0e87?source=cve - https://plugins.trac.wordpress.org/changeset/3078718/wpsite-follow-us-badges
CVE ID: CVE-2024-3281 State: PUBLISHED Published: 2024-04-09T15:27:11.563Z Last Updated: 2025-02-13T17:52:18.289Z Vendors: HP Inc. Products: Poly CCX devices Description: A vulnerability was discovered in the firmware builds after 8.0.2.3267 and prior to 8.1.3.1301 in CCX devices. A flaw in the firmware build process did not properly restrict access to a resource from an unauthorized actor. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hp.com/us-en/document/ish_10388650-10388701-16/hpsbpy03929 - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-003.txt
CVE ID: CVE-2024-3282 State: PUBLISHED Published: 2024-08-23T06:00:02.699Z Last Updated: 2024-08-23T14:14:30.597Z Vendors: Unknown Products: WP Table Builder Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WP Table Builder WordPress plugin through 1.5.0 does not sanitise and escape some of its Table data, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/12bf5e8e-24c9-48b9-b94c-c14ed60d7c15/
CVE ID: CVE-2024-3283 State: PUBLISHED Published: 2024-04-10T17:07:59.902Z Last Updated: 2024-08-12T18:31:18.785Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: mintplex-labs Products: mintplex-labs/anything-llm Problem Types: CWE-915 Description: A vulnerability in mintplex-labs/anything-llm allows users with manager roles to escalate their privileges to admin roles through a mass assignment issue. The '/admin/system-preferences' API endpoint improperly authorizes manager-level users to modify the 'multi_user_mode' system variable, enabling them to access the '/api/system/enable-multi-user' endpoint and create a new admin user. This issue results from the en
them to access the '/api/system/enable-multi-user' endpoint and create a new admin user. This issue results from the endpoint accepting a full JSON object in the request body without proper validation of modifiable fields, leading to unauthorized modification of system settings and subsequent privilege escalation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/a8000cce-0ecb-4820-9cfb-57ba6f4d58a2 - https://github.com/mintplex-labs/anything-llm/commit/52fac844221a9b951d08ceb93c4c014e9397b1f2
CVE ID: CVE-2024-3285 State: PUBLISHED Published: 2024-04-11T07:31:35.659Z Last Updated: 2024-08-01T20:05:08.437Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: metaslider Products: Slider, Gallery, and Carousel by MetaSlider – Responsive WordPress Slideshows Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Slider, Gallery, and Carousel by MetaSlider – Responsive WordPress Slideshows plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'metaslider' shortcode in all versions up to, and including, 3.70.0 due to insufficient input sanitization and output es
'metaslider' shortcode in all versions up to, and including, 3.70.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/1cbd95bb-6f13-48c9-a51e-5f7bf7a296df?source=cve - https://plugins.trac.wordpress.org/changeset/3067751/ml-slider
CVE ID: CVE-2024-3286 State: PUBLISHED Published: 2024-05-16T17:21:21.869Z Last Updated: 2024-09-06T22:55:43.149Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Lenovo Products: Printers Problem Types: CWE-121 Description: A buffer overflow vulnerability was identified in some Lenovo printers that could allow an unauthenticated user to trigger a device restart by sending a specially crafted web request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://iknow.lenovo.com.cn/detail/421500 - https://www.lenovoimage.com/psirt/notice/158605.html
CVE ID: CVE-2024-3287 State: PUBLISHED Published: 2024-05-02T16:52:26.946Z Last Updated: 2024-08-12T20:44:09.446Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: wpmudev Products: SmartCrawl WordPress SEO checker, SEO analyzer, SEO optimizer Problem Types: CWE-862 Missing Authorization Description: The SmartCrawl WordPress SEO checker, SEO analyzer, SEO optimizer plugin for WordPress is vulnerable to unauthorized ld+json description injection due to a missing capability check on the save_settings function in all versions up to, and including, 3.10.2. This makes it possible for unauthenticated attackers to save schema types. Additional Analyst Notes: - CVE Pr
g, 3.10.2. This makes it possible for unauthenticated attackers to save schema types. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9a77672b-340e-4f10-abe7-461c2db537b8?source=cve - https://plugins.trac.wordpress.org/changeset/3073136/smartcrawl-seo/trunk/includes/core/schema/class-types.php?old=2943058&old_path=smartcrawl-seo%2Ftrunk%2Fincludes%2Fcore%2Fschema%2Fclass-types.php
CVE ID: CVE-2024-3288 State: PUBLISHED Published: 2024-06-07T06:00:02.259Z Last Updated: 2024-11-06T23:14:21.788Z Vendors: Unknown Products: Logo Slider Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Logo Slider WordPress plugin before 4.0.0 does not validate and escape some of its Slider Settings before outputting them back in attributes, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/4ef99f54-68df-4353-8fc0-9b09ac0df7ba/
CVE ID: CVE-2024-3289 State: PUBLISHED Published: 2024-05-17T16:50:48.745Z Last Updated: 2024-08-01T20:05:08.242Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Tenable Products: Nessus Problem Types: CWE-281 Description: When installing Nessus to a directory outside of the default location on a Windows host, Nessus versions prior to 10.7.3 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the non-default installation location. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.tenable.com/security/tns-2024-08
CVE ID: CVE-2024-3290 State: PUBLISHED Published: 2024-05-17T16:54:55.570Z Last Updated: 2024-08-01T20:05:08.393Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: Tenable Products: Nessus Problem Types: CWE-367 Description: A race condition vulnerability exists where an authenticated, local attacker on a Windows Nessus host could modify installation parameters at installation time, which could lead to the execution of arbitrary code on the Nessus host Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.tenable.com/security/tns-2024-08
CVE ID: CVE-2024-3291 State: PUBLISHED Published: 2024-05-17T16:59:56.144Z Last Updated: 2024-08-01T20:05:08.354Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Tenable Products: Nessus Agent Problem Types: CWE-281 Description: When installing Nessus Agent to a directory outside of the default location on a Windows host, Nessus Agent versions prior to 10.6.4 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the non-default installation location. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.tenable.com/secur
Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.tenable.com/security/tns-2024-09
CVE ID: CVE-2024-3292 State: PUBLISHED Published: 2024-05-17T17:17:14.470Z Last Updated: 2024-08-01T20:05:08.226Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: Tenable Products: Nessus Agent Problem Types: CWE-367 Description: A race condition vulnerability exists where an authenticated, local attacker on a Windows Nessus Agent host could modify installation parameters at installation time, which could lead to the execution of arbitrary code on the Nessus host. - CVE-2024-3292 Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.tenable.com/security/tns-2024-09
CVE ID: CVE-2024-3293 State: PUBLISHED Published: 2024-04-23T01:58:06.837Z Last Updated: 2024-08-01T20:05:08.335Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: rtcamp Products: rtMedia for WordPress, BuddyPress and bbPress Problem Types: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Description: The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to blind SQL Injection via the rtmedia_gallery shortcode in all versions up to, and including, 4.6.18 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it
ent escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/32b6938a-0566-46c8-8761-0403b3a0e3e9?source=cve - https://plugins.trac.wordpress.org/changeset/3071359/buddypress-media
CVE ID: CVE-2024-3295 State: PUBLISHED Published: 2024-05-02T16:52:21.344Z Last Updated: 2024-08-01T20:05:08.400Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: wpeverest Products: User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin Problem Types: CWE-862 Missing Authorization Description: The User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the profile_pic_remove function in versions up to, and including, 3.1.5. This makes it possible for unauthenticated attackers to delete a
emove function in versions up to, and including, 3.1.5. This makes it possible for unauthenticated attackers to delete any media file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/864a3444-0479-4b9f-beca-584a4a9b8682?source=cve - https://plugins.trac.wordpress.org/browser/user-registration/tags/3.1.5/includes/class-ur-ajax.php#L1111 - https://plugins.trac.wordpress.org/browser/user-registration/trunk/includes/class-ur-ajax.php?rev=3070439#L1115 - https://plugins.trac.wordpress.org/changeset/3070439/
CVE ID: CVE-2024-3296 State: PUBLISHED Published: 2024-04-04T13:47:24.183Z Last Updated: 2025-11-20T19:02:21.359Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Red Hat Products: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 Problem Types: CWE-203 Description: A timing-based side-channel flaw exists in the rust-openssl package, which could be sufficient to recover a plaintext across a network in a Bleichenbacher-style attack. To achieve successful decryption, an attacker would have to be able to send a large number of trial messages for decryption. The vulnerability affects the legacy PKCS#1v1.5 RSA encryption padding mode. Additional Analyst Notes
es for decryption. The vulnerability affects the legacy PKCS#1v1.5 RSA encryption padding mode. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2024-3296 - https://bugzilla.redhat.com/show_bug.cgi?id=2269723
CVE ID: CVE-2024-3297 State: PUBLISHED Published: 2024-07-24T08:02:52.777Z Last Updated: 2024-08-01T20:05:08.480Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Connectivity Standards Alliance Products: Matter Problem Types: CWE-400 Description: An issue in the Certificate Authenticated Session Establishment (CASE) protocol for establishing secure sessions between two devices, as implemented in the Matter protocol versions before Matter 1.1 allows an attacker to replay manipulated CASE Sigma1 messages to make the device unresponsive until the device is power-cycled. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - ht
the device is power-cycled. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.bitdefender.com/support/security-advisories/session-establishment-lock-up-during-replay-of-case-sigma1-messages/
CVE ID: CVE-2024-3298 State: PUBLISHED Published: 2024-04-04T15:11:24.865Z Last Updated: 2024-08-01T20:05:08.234Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Dassault Systèmes Products: eDrawings Problem Types: CWE-787, CWE-843 Description: Out-Of-Bounds Write and Type Confusion vulnerabilities exist in the file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024. These vulnerabilities could allow an attacker to execute arbitrary code while opening a specially crafted DWG or DXF. NOTE: this vulnerability was SPLIT from CVE-2024-1847. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Referenc
ility was SPLIT from CVE-2024-1847. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.3ds.com/vulnerability/advisories
CVE ID: CVE-2024-3299 State: PUBLISHED Published: 2024-04-04T15:13:06.661Z Last Updated: 2024-08-01T20:05:08.412Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Dassault Systèmes Products: eDrawings Problem Types: CWE-416, CWE-787, CWE-908 Description: Out-Of-Bounds Write, Use of Uninitialized Resource and Use-After-Free vulnerabilities exist in the file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024. These vulnerabilities could allow an attacker to execute arbitrary code while opening a specially crafted SLDDRW or SLDPRT file. NOTE: this vulnerability was SPLIT from CVE-2024-1847. Additional Analyst Notes: - CISA
crafted SLDDRW or SLDPRT file. NOTE: this vulnerability was SPLIT from CVE-2024-1847. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.3ds.com/vulnerability/advisories
CVE ID: CVE-2024-3300 State: PUBLISHED Published: 2024-05-30T15:19:10.068Z Last Updated: 2024-08-01T20:05:08.403Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Dassault Systèmes Products: DELMIA Apriso Problem Types: CWE-502 Description: An unsafe .NET object deserialization vulnerability in DELMIA Apriso Release 2019 through Release 2024 could lead to pre-authentication remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.3ds.com/vulnerability/advisories
CVE ID: CVE-2024-3301 State: PUBLISHED Published: 2024-05-30T15:18:14.217Z Last Updated: 2024-09-03T15:31:28.769Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Dassault Systèmes Products: DELMIA Apriso Problem Types: CWE-502 Description: An unsafe .NET object deserialization vulnerability in DELMIA Apriso Release 2019 through Release 2024 could lead to post-authentication remote code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.3ds.com/vulnerability/advisories
CVE ID: CVE-2024-3302 State: PUBLISHED Published: 2024-04-16T15:14:09.243Z Last Updated: 2025-03-28T23:33:26.516Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Problem Types: Denial of Service using HTTP/2 CONTINUATION frames Description: There was no limit to the number of HTTP/2 CONTINUATION frames that would be processed. A server could abuse this to create an Out of Memory condition in the browser. This vulnerability affects Firefox < 125, Firefox ESR < 115.10, and Thunderbird < 115.10. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1881183 - https://kb.cert.org/vuls/id/421644 - https:/
ainer: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1881183 - https://kb.cert.org/vuls/id/421644 - https://lists.debian.org/debian-lts-announce/2024/04/msg00012.html - https://lists.debian.org/debian-lts-announce/2024/04/msg00013.html - https://www.mozilla.org/security/advisories/mfsa2024-18/ - https://www.mozilla.org/security/advisories/mfsa2024-19/ - https://www.mozilla.org/security/advisories/mfsa2024-20/
CVE ID: CVE-2024-3303 State: PUBLISHED Published: 2025-02-13T08:31:11.062Z Last Updated: 2025-02-13T14:36:00.382Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-1427 Description: An issue was discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.6.5, starting from 17.7 prior to 17.7.4, and starting from 17.8 prior to 17.8.2, which allows an attacker to exfiltrate contents of a private issue using prompt injection. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/454460 - https://hackerone.com/reports/2418620
CVE ID: CVE-2024-3305 State: PUBLISHED Published: 2024-09-12T13:03:13.863Z Last Updated: 2025-10-14T12:42:00.898Z Vendors: Utarit Information Products: SoliClub Problem Types: CWE-639, CWE-862 Description: Authorization Bypass Through User-Controlled Key, Missing Authorization vulnerability in Utarit Information SoliClub allows Retrieve Embedded Sensitive Data. This issue affects SoliClub: before 4.4.0 for iOS, before 5.2.1 for Android. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-24-1457
CVE ID: CVE-2024-3306 State: PUBLISHED Published: 2024-09-12T13:06:12.188Z Last Updated: 2024-09-12T19:10:03.125Z Vendors: Utarit Information Products: SoliClub Problem Types: CWE-639 Description: Authorization Bypass Through User-Controlled Key vulnerability in Utarit Information SoliClub allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SoliClub: before 4.4.0 for iOS, before 5.2.1 for Android. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-24-1457
CVE ID: CVE-2024-3307 State: PUBLISHED Published: 2024-05-02T16:52:37.182Z Last Updated: 2024-08-01T20:05:08.369Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: devitemsllc Products: HT Mega – Absolute Addons For Elementor Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown widget's attributes in all versions up to, and including, 2.4.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor a
ufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor access or above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c8452e54-7a81-4921-b531-8cb3b0953dab?source=cve - https://plugins.trac.wordpress.org/browser/ht-mega-for-elementor/trunk/includes/widgets/htmega_countdown.php#L1251 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3071480%40ht-mega-for-elementor%2Ftrunk&old=3063395%40ht-mega-for-
ess.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3071480%40ht-mega-for-elementor%2Ftrunk&old=3063395%40ht-mega-for-elementor%2Ftrunk&sfp_email=&sfph_mail=
CVE ID: CVE-2024-3308 State: PUBLISHED Published: 2024-05-02T16:51:57.833Z Last Updated: 2024-08-01T20:05:08.436Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: devitemsllc Products: HT Mega – Absolute Addons For Elementor Problem Types: CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Description: The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Grid widget's attributes in all versions up to, and including, 2.4.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor access
ent input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor access or higher, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/33b5e231-1b53-4646-ae9c-48babf1ebbd7?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3071480%40ht-mega-for-elementor%2Ftrunk&old=3063395%40ht-mega-for-elementor%2Ftrunk&sfp_email=&sfph_mail=
CVE ID: CVE-2024-3309 State: PUBLISHED Published: 2024-04-27T09:37:56.084Z Last Updated: 2024-08-01T20:05:08.333Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: qodeinteractive Products: Qi Addons For Elementor Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Qi Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown Widget's attributes in all versions up to, and including, 1.7.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor access and above, to inject a