Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-3621 State: PUBLISHED Published: 2024-04-11T03:31:04.506Z Last Updated: 2024-08-01T20:19:59.867Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: SourceCodester Products: Kortex Lite Advocate Office Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. It has been classified as critical. This affects an unknown part of the file /control/register_case.php. The manipulation of the argument title/case_no/client_name/court/case_type/case_stage/legel_acts/description/filling_date/hearing_date/opposite_lawyer/total_fees/unpaid leads to sql injection. It is possible to initiate
scription/filling_date/hearing_date/opposite_lawyer/total_fees/unpaid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-260277 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.260277 - https://vuldb.com/?ctiid.260277 - https://vuldb.com/?submit.312832 - https://github.com/zyairelai/CVE-submissions/blob/main/kortex-register_case-sqli.md
CVE ID: CVE-2024-3622 State: PUBLISHED Published: 2024-04-25T17:46:29.152Z Last Updated: 2025-11-20T07:13:29.991Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: mirror registry for Red Hat OpenShift Problem Types: CWE-256 Description: A flaw was found when using mirror-registry to install Quay. It uses a default secret, which is stored in plain-text format in one of the configuration template files. This issue may lead to all instances of Quay deployed using mirror-registry to have the same secret key. This flaw allows a malicious actor to craft session cookies and as a consequence, it may lead to gaining access to the affected Quay instance
licious actor to craft session cookies and as a consequence, it may lead to gaining access to the affected Quay instance. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2024-3622 - https://bugzilla.redhat.com/show_bug.cgi?id=2274400
CVE ID: CVE-2024-3623 State: PUBLISHED Published: 2024-04-25T17:46:47.141Z Last Updated: 2025-11-20T07:13:31.137Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: Red Hat Products: mirror registry for Red Hat OpenShift Problem Types: CWE-256 Description: A flaw was found when using mirror-registry to install Quay. It uses a default database secret key, which is stored in plain-text format in one of the configuration template files. This issue may lead to all instances of Quay deployed using mirror-registry to have the same database secret key. This flaw allows a malicious actor to access sensitive information from Quay's database. Additional Analyst Notes: - CI
This flaw allows a malicious actor to access sensitive information from Quay's database. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2024-3623 - https://bugzilla.redhat.com/show_bug.cgi?id=2274404
CVE ID: CVE-2024-3624 State: PUBLISHED Published: 2024-04-25T17:46:52.447Z Last Updated: 2025-11-20T18:38:18.854Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: Red Hat Products: mirror registry for Red Hat OpenShift Problem Types: CWE-256 Description: A flaw was found in how Quay's database is stored in plain-text in mirror-registry on the jinja's config.yaml file. This flaw allows a malicious actor with access to this file to gain access to Quay's database. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2024-3624 - https://bugzilla.redhat.com/show_bug.cgi?id=2274407
CVE ID: CVE-2024-3625 State: PUBLISHED Published: 2024-04-25T17:46:52.179Z Last Updated: 2025-11-20T18:38:39.088Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: Red Hat Products: mirror registry for Red Hat OpenShift Problem Types: CWE-256 Description: A flaw was found in Quay, where Quay's database is stored in plain text in mirror-registry on Jinja's config.yaml file. This issue leaves the possibility of a malicious actor with access to this file to gain access to Quay's Redis instance. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2024-3625 - https://bugzilla.redhat.com/
CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2024-3625 - https://bugzilla.redhat.com/show_bug.cgi?id=2274408
CVE ID: CVE-2024-3626 State: PUBLISHED Published: 2024-05-23T05:32:14.816Z Last Updated: 2024-08-01T20:19:58.905Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: icegram Products: Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce Problem Types: CWE-862 Missing Authorization Description: The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the get_template_content function in all versions up to, and including, 5.7.17. This makes it possible fo
ility check on the get_template_content function in all versions up to, and including, 5.7.17. This makes it possible for authenticated attackers, with subscriber access and above, to obtain the contents of private and password-protected posts. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/5a56e621-2508-4500-b865-4d5e4463b91a?source=cve - https://plugins.trac.wordpress.org/browser/email-subscribers/trunk/lite/includes/class-email-subscribers.php#L1063 - https://plugins.trac.wordpress.org/browser/email-subscribers/trunk/lite/admin/class-email-subscribers-admin.php#L849 - https://plugins.trac.
.wordpress.org/browser/email-subscribers/trunk/lite/admin/class-email-subscribers-admin.php#L849 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3072302%40email-subscribers%2Ftrunk&old=3069441%40email-subscribers%2Ftrunk&sfp_email=&sfph_mail=
CVE ID: CVE-2024-3627 State: PUBLISHED Published: 2024-06-20T02:08:19.919Z Last Updated: 2024-08-01T20:20:01.043Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: kraftplugins Products: Wheel of Life: Coaching and Assessment Tool for Life Coach Problem Types: CWE-862 Missing Authorization Description: The Wheel of Life: Coaching and Assessment Tool for Life Coach plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on several functions in the AjaxFunctions.php file in all versions up to, and including, 1.1.7. This makes it possible for authenticated attackers, with subscriber-level access and above
up to, and including, 1.1.7. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete arbitrary posts and modify settings. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0615d1be-f9fa-45b3-9d5b-3ad1f36be8e1?source=cve - https://plugins.trac.wordpress.org/browser/wheel-of-life/trunk/includes/functions/AjaxFunctions.php
CVE ID: CVE-2024-3628 State: PUBLISHED Published: 2024-05-07T06:00:01.626Z Last Updated: 2025-03-13T18:07:57.374Z Vendors: Unknown Products: EasyEvent Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The EasyEvent WordPress plugin through 1.0.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/171af8eb-ceeb-403a-abc2-969d9535a4c9/
CVE ID: CVE-2024-3629 State: PUBLISHED Published: 2024-05-15T06:00:03.634Z Last Updated: 2024-11-20T17:40:20.822Z Vendors: Unknown Products: HL Twitter Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The HL Twitter WordPress plugin through 2014.1.18 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/c1f6ed2c-0f84-4b13-b39e-5cb91443c2b1/
CVE ID: CVE-2024-3630 State: PUBLISHED Published: 2024-05-15T06:00:03.836Z Last Updated: 2024-11-07T15:28:28.657Z Vendors: Unknown Products: HL Twitter Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The HL Twitter WordPress plugin through 2014.1.18 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/cbab7639-fdb2-4ee5-b5ca-9e30701a63b7/
CVE ID: CVE-2024-3631 State: PUBLISHED Published: 2024-05-15T06:00:04.054Z Last Updated: 2025-03-25T18:19:50.948Z Vendors: Unknown Products: HL Twitter Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The HL Twitter WordPress plugin through 2014.1.18 does not have CSRF check when unlinking twitter accounts, which could allow attackers to make logged in admins perform such actions via a CSRF attack Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/c59a8b49-6f3e-452b-ba9b-50b80c522ee9/
CVE ID: CVE-2024-3632 State: PUBLISHED Published: 2024-07-13T06:00:04.124Z Last Updated: 2024-08-01T20:20:00.487Z Vendors: Unknown Products: Smart Image Gallery Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Smart Image Gallery WordPress plugin before 1.0.19 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/9b11682d-4705-4595-943f-0fa093d0b644/
CVE ID: CVE-2024-3633 State: PUBLISHED Published: 2024-06-26T06:00:02.176Z Last Updated: 2024-08-01T20:19:59.847Z Vendors: Unknown Products: WebP & SVG Support Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WebP & SVG Support WordPress plugin through 1.4.0 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/2e0baffb-7ab8-4c17-aa2a-7f28a0be1a41/
CVE ID: CVE-2024-3634 State: PUBLISHED Published: 2024-05-15T06:00:04.246Z Last Updated: 2024-11-01T13:44:59.917Z Vendors: Unknown Products: month name translation benaceur Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The month name translation benaceur WordPress plugin before 2.3.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/76e000e0-314f-4e39-8871-68bf8cc95b22/
CVE ID: CVE-2024-3635 State: PUBLISHED Published: 2024-09-30T06:00:05.591Z Last Updated: 2024-09-30T20:22:55.127Z Vendors: Unknown Products: The Post Grid Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Post Grid WordPress plugin before 7.5.0 does not sanitise and escape some of its Grid settings, which could allow high privilege users such as Editor and above to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/63cbe5f4-fe0f-499f-a964-cf4fbedcfa25/
CVE ID: CVE-2024-3636 State: PUBLISHED Published: 2024-08-05T06:00:01.893Z Last Updated: 2024-08-07T15:58:37.007Z Vendors: Unknown Products: Pinpoint Booking System Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Pinpoint Booking System WordPress plugin before 2.9.9.4.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/bab46c28-71aa-4610-9683-361e7b008d37/
CVE ID: CVE-2024-3637 State: PUBLISHED Published: 2024-05-03T06:00:02.151Z Last Updated: 2025-03-20T13:29:13.546Z Vendors: Unknown Products: Responsive Contact Form Builder & Lead Generation Plugin Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Responsive Contact Form Builder & Lead Generation Plugin WordPress plugin through 1.8.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/
ite setup) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/33f6fea6-c784-40ae-a548-55d41618752d/
CVE ID: CVE-2024-3638 State: PUBLISHED Published: 2024-07-04T03:32:23.393Z Last Updated: 2024-08-01T20:20:00.333Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: livemesh Products: Elementor Addons by Livemesh Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Elementor Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Marquee Text Widget, Testimonials Widget, and Testimonial Slider widgets in all versions up to, and including, 8.3.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it p
including, 8.3.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/58dfd766-7156-4aec-b8db-76908b775ba0?source=cve - https://plugins.trac.wordpress.org/browser/addons-for-elementor/trunk/templates/addons/marquee-text/content.php#L24 - https://plugins.trac.wordpress.org/browser/addons-for-elementor/trunk/templates/addo
dons/marquee-text/content.php#L24 - https://plugins.trac.wordpress.org/browser/addons-for-elementor/trunk/templates/addons/marquee-text/content.php#L28
CVE ID: CVE-2024-3639 State: PUBLISHED Published: 2024-07-04T03:32:24.553Z Last Updated: 2024-08-01T20:19:59.635Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: livemesh Products: Elementor Addons by Livemesh Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Elementor Addons by Livemesh plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Posts Grid widget in all versions up to, and including, 8.3.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-l
and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9729ccc9-e3f1-4096-8430-22998b386cec?source=cve - https://wordpress.org/plugins/addons-for-elementor/
CVE ID: CVE-2024-3640 State: PUBLISHED Published: 2024-05-16T15:25:28.558Z Last Updated: 2024-08-01T20:20:00.578Z Vendors: Rockwell Automation Products: FactoryTalk® Remote Access™ Problem Types: CWE-428 Description: An unquoted executable path exists in the Rockwell Automation FactoryTalk® Remote Access™ possibly resulting in remote code execution if exploited. While running the FTRA installer package, the executable path is not properly quoted, which could allow a threat actor to enter a malicious executable and run it as a System user. A threat actor needs admin privileges to exploit this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References
es to exploit this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.rockwellautomation.com/en-us/support/advisory.SD1671.html
CVE ID: CVE-2024-3641 State: PUBLISHED Published: 2024-05-16T06:00:01.973Z Last Updated: 2025-03-13T13:00:44.670Z Vendors: Unknown Products: Newsletter Popup Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Newsletter Popup WordPress plugin through 1.2 does not sanitise and escape some parameters, which could allow unauthenticated visitors to perform Cross-Site Scripting attacks against admins Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/f4047f1e-d5ea-425f-8def-76dd5e6a497e/
CVE ID: CVE-2024-3642 State: PUBLISHED Published: 2024-05-16T06:00:02.572Z Last Updated: 2025-03-27T15:24:05.049Z Vendors: Unknown Products: Newsletter Popup Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Newsletter Popup WordPress plugin through 1.2 does not have CSRF check when deleting subscriber, which could allow attackers to make logged in admins perform such action via a CSRF attack Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/dc44d85f-afe8-4824-95b0-11b9abfb04d8/
CVE ID: CVE-2024-3643 State: PUBLISHED Published: 2024-05-16T06:00:02.799Z Last Updated: 2024-08-12T18:24:48.972Z Vendors: Unknown Products: Newsletter Popup Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Newsletter Popup WordPress plugin through 1.2 does not have CSRF check when deleting list, which could allow attackers to make logged in admins perform such action via a CSRF attack Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/698277e6-56f9-4688-9a84-c2fa3ea9f7dc/
CVE ID: CVE-2024-3644 State: PUBLISHED Published: 2024-05-16T06:00:03.032Z Last Updated: 2024-11-20T17:41:01.371Z Vendors: Unknown Products: Newsletter Popup Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Newsletter Popup WordPress plugin through 1.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/10eb712a-d9c3-46c9-be6a-02811396fae8/
CVE ID: CVE-2024-3645 State: PUBLISHED Published: 2024-04-22T13:51:46.929Z Last Updated: 2024-08-01T20:19:59.861Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: Essential Addons Products: Essential Addons for Elementor Pro Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Essential Addons for Elementor Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Counter widget in all versions up to, and including, 5.8.11 due to insufficient input sanitization and output escaping on user supplied attributes such as 'title_html_tag'. This makes it possible for
input sanitization and output escaping on user supplied attributes such as 'title_html_tag'. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/7fdad62e-d43a-4eb8-a637-0a257f3f18d4?source=cve - https://essential-addons.com/changelog/
CVE ID: CVE-2024-3646 State: PUBLISHED Published: 2024-04-19T14:21:47.779Z Last Updated: 2024-08-01T20:20:00.135Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: GitHub Products: Enterprise Server Problem Types: CWE-20 Description: A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the instance when configuring the chat integration. Exploitation of this vulnerability required access to the GitHub Enterprise Server instance and access to the Management Console with the editor role. This vulnerability affected all versions of GitHub Enterpri
e and access to the Management Console with the editor role. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.12 and was fixed in versions 3.12.2, 3.11.8, 3.10.10, and 3.9.13. This vulnerability was reported via the GitHub Bug Bounty program. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.github.com/en/enterprise-server@3.9/admin/release-notes#3.9.13 - https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.10 - https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.8 - https://docs.github.com/en/enterprise-server@3.12/admin/release-notes#3.12.2
CVE ID: CVE-2024-3647 State: PUBLISHED Published: 2024-05-02T16:52:02.975Z Last Updated: 2024-08-01T20:20:00.375Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: leap13 Products: Premium Addons for Elementor Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's post ticker widget in all versions up to, and including, 4.10.28 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-
n and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This requires the premium version of the plugin to be installed and activated in order to be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/48fdece5-2996-426f-b77c-ae0b35bcd0ce?source=cve - https://plugins.trac.wordpress.org/changeset/3075668/premium-addons-for-elementor/trunk/widgets/premium-post-ticker.php