Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
tack remotely. The exploit has been disclosed to the public and may be used. VDB-263130 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263130 - https://vuldb.com/?ctiid.263130 - https://vuldb.com/?submit.329773 - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2014.pdf
CVE ID: CVE-2024-4528 State: PUBLISHED Published: 2024-05-06T06:31:04.328Z Last Updated: 2024-08-01T20:40:47.433Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: SourceCodester Products: Prison Management System Problem Types: CWE-79 Description: A vulnerability was found in SourceCodester Prison Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /Admin/user-record.php. The manipulation of the argument txtfullname leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-2631
he exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-263131. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263131 - https://vuldb.com/?ctiid.263131 - https://vuldb.com/?submit.329780 - https://github.com/yylmm/CVE/blob/main/Prison%20Management%20System/xss2.md
CVE ID: CVE-2024-4529 State: PUBLISHED Published: 2024-05-27T06:00:01.518Z Last Updated: 2024-08-01T20:40:47.475Z Vendors: Unknown Products: Business Card Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Business Card WordPress plugin through 1.0.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions such as deleting card categories via CSRF attacks Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/082ff0b8-2ecd-4292-832d-0a79e1ba8cb3/
CVE ID: CVE-2024-4530 State: PUBLISHED Published: 2024-05-27T06:00:01.831Z Last Updated: 2024-10-31T15:09:53.420Z Vendors: Unknown Products: Business Card Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Business Card WordPress plugin through 1.0.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions such as editing card categories via CSRF attacks Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/952f6b5c-7728-4c87-8826-6b493f51a979/
CVE ID: CVE-2024-4531 State: PUBLISHED Published: 2024-05-27T06:00:02.099Z Last Updated: 2024-08-01T20:40:47.443Z Vendors: Unknown Products: Business Card Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Business Card WordPress plugin through 1.0.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions such as editing cards via CSRF attacks Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/18c1b3bb-9998-416f-a972-c4a51643579c/
CVE ID: CVE-2024-4532 State: PUBLISHED Published: 2024-05-27T06:00:02.290Z Last Updated: 2024-11-14T16:56:54.278Z Vendors: Unknown Products: Business Card Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Business Card WordPress plugin through 1.0.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions such as deleting cards via CSRF attacks Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/64cf5f95-bbf0-4c5f-867b-62f1b7f6a42e/
CVE ID: CVE-2024-4533 State: PUBLISHED Published: 2024-05-27T06:00:02.573Z Last Updated: 2025-03-25T18:39:38.191Z Vendors: Unknown Products: KKProgressbar2 Free Problem Types: CWE-89 SQL Injection Description: The KKProgressbar2 Free WordPress plugin through 1.1.4.2 does not sanitize and escape a parameter before using it in a SQL statement, allowing admin users to perform SQL injection attacks Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/c3406236-aaee-480a-8931-79c867252f11/
CVE ID: CVE-2024-4534 State: PUBLISHED Published: 2024-05-27T06:00:02.758Z Last Updated: 2024-08-09T18:59:11.672Z Vendors: Unknown Products: KKProgressbar2 Free Problem Types: CWE-352 Cross-Site Request Forgery (CSRF), CWE-79 Cross-Site Scripting (XSS) Description: The KKProgressbar2 Free WordPress plugin through 1.1.4.2 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/7b0046d4-cf95-4307-95a5-9b823f2daaaa/
CVE ID: CVE-2024-4535 State: PUBLISHED Published: 2024-05-27T06:00:02.939Z Last Updated: 2025-03-25T14:21:30.651Z Vendors: Unknown Products: KKProgressbar2 Free Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The KKProgressbar2 Free WordPress plugin through 1.1.4.2 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/d4980886-da10-4bbc-a84a-fe071ab3b755/
CVE ID: CVE-2024-4536 State: PUBLISHED Published: 2024-05-07T13:11:45.310Z Last Updated: 2024-08-01T20:40:47.492Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:L) Vendors: Eclipse Foundation Products: EDC Problem Types: CWE-201, CWE-522 Description: In Eclipse Dataspace Components from version 0.2.1 to 0.6.2, in the EDC Connector component ( https://github.com/eclipse-edc/Connector ), an attacker might obtain OAuth2 client secrets from the vault. In Eclipse Dataspace Components from version 0.2.1 to 0.6.2, we have identified a security vulnerability in the EDC Connector component ( https://github.com/eclipse-edc/Connector ) regarding the OAuth2-protected data sink fea
in the EDC Connector component ( https://github.com/eclipse-edc/Connector ) regarding the OAuth2-protected data sink feature. When using a custom, OAuth2-protected data sink, the OAuth2-specific data address properties are resolved by the provider data plane. Problematically, the consumer-provided clientSecretKey, which indicates the OAuth2 client secret to retrieve from a secrets vault, is resolved in the context of the provider's vault, not the consumer. This secret's value is then sent to the tokenUrl, also consumer-controlled, as part of an OAuth2 client credentials grant. The returned access token is then sent as a bearer token to the data sink URL. This feature is now disabled entirely
nt. The returned access token is then sent as a bearer token to the data sink URL. This feature is now disabled entirely, because not all code paths necessary for a successful realization were fully implemented. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/eclipse-edc/Connector/commit/a4e6018d2c0457fba6f672fafa6c590513c45d1b - https://github.com/eclipse-edc/Connector/releases/tag/v0.6.3 - https://gitlab.eclipse.org/security/cve-assignement/-/issues/22 - https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/198
CVE ID: CVE-2024-4537 State: PUBLISHED Published: 2024-05-07T11:35:25.418Z Last Updated: 2024-08-01T20:40:47.530Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Impronta Products: Janto Ticketing Software Problem Types: CWE-639 Description: IDOR vulnerability in Janto Ticketing Software affecting version 4.3r10. This vulnerability could allow a remote user to obtain the download URL of another user to obtain the purchased ticket. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-janto-ticketing-software
CVE ID: CVE-2024-4538 State: PUBLISHED Published: 2024-05-07T11:35:47.621Z Last Updated: 2024-08-01T20:40:47.514Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Impronta Products: Janto Ticketing Software Problem Types: CWE-639 Description: IDOR vulnerability in Janto Ticketing Software affecting version 4.3r10. This vulnerability could allow a remote user to obtain a user's event ticket by creating a specific request with the ticket reference ID, leading to the exposure of sensitive user data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-j
nt: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-janto-ticketing-software
CVE ID: CVE-2024-4539 State: PUBLISHED Published: 2024-05-09T01:38:21.737Z Last Updated: 2024-10-03T06:23:19.371Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: GitLab Products: GitLab Problem Types: CWE-770 Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2 where abusing the API to filter branch and tags could lead to Denial of Service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/454815
CVE ID: CVE-2024-4540 State: PUBLISHED Published: 2024-06-03T15:33:18.191Z Last Updated: 2025-11-21T07:25:37.834Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Red Hat Products: Red Hat Build of Keycloak, Red Hat build of Keycloak 22, Red Hat build of Keycloak 24, Red Hat Single Sign-On 7, Red Hat Single Sign-On 7.6 for RHEL 7, Red Hat Single Sign-On 7.6 for RHEL 8, Red Hat Single Sign-On 7.6 for RHEL 9, RHEL-8 based Middleware Containers Problem Types: CWE-200 Description: A flaw was found in Keycloak in OAuth 2.0 Pushed Authorization Requests (PAR). Client-provided parameters were found to be included in plain text in the KC_RESTART cookie returned by the
ests (PAR). Client-provided parameters were found to be included in plain text in the KC_RESTART cookie returned by the authorization server's HTTP response to a `request_uri` authorization request, possibly leading to an information disclosure vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2024:3566 - https://access.redhat.com/errata/RHSA-2024:3567 - https://access.redhat.com/errata/RHSA-2024:3568 - https://access.redhat.com/errata/RHSA-2024:3570 - https://access.redhat.com/errata/RHSA-2024:3572 - https://access.redhat.com/errata/RHSA-2024:3573 - https://access.redhat.com/errata/RHSA-2024:3574 -
ta/RHSA-2024:3572 - https://access.redhat.com/errata/RHSA-2024:3573 - https://access.redhat.com/errata/RHSA-2024:3574 - https://access.redhat.com/errata/RHSA-2024:3575 - https://access.redhat.com/errata/RHSA-2024:3576 - https://access.redhat.com/security/cve/CVE-2024-4540 - https://bugzilla.redhat.com/show_bug.cgi?id=2279303
CVE ID: CVE-2024-4541 State: PUBLISHED Published: 2024-06-19T03:12:29.630Z Last Updated: 2024-08-01T20:40:47.520Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: viitorcloudvc Products: Custom Product List Table Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Custom Product List Table plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.0. This is due to missing or incorrect nonce validation when modifying products. This makes it possible for unauthenticated attackers to add, delete, bulk edit, approve or cancel products via a forged request granted they can trick a site administ
ackers to add, delete, bulk edit, approve or cancel products via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4c046e0c-32d2-47d1-9890-d05d69217161?source=cve - https://wordpress.org/plugins/custom-product-list-table/#description
CVE ID: CVE-2024-4542 State: REJECTED Published: 2024-05-09T20:03:31.506Z Last Updated: 2024-05-16T13:23:54.857Z Description: No description available.
CVE ID: CVE-2024-4543 State: PUBLISHED Published: 2024-07-03T04:31:32.014Z Last Updated: 2024-08-01T20:47:40.052Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: aliakro Products: Snippet Shortcodes Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Snippet Shortcodes plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.1.4. This is due to missing or incorrect nonce validation when adding or editing shortcodes. This makes it possible for unauthenticated attackers to modify shortcodes via a forged request granted they can trick a site administrator into performing an action such as cli
modify shortcodes via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/127b20c4-cd7c-4d04-b32f-bcc26beb2c35?source=cve - https://plugins.trac.wordpress.org/changeset/3110951?contextall=1
CVE ID: CVE-2024-4544 State: PUBLISHED Published: 2024-05-24T03:30:34.564Z Last Updated: 2024-08-15T14:59:35.886Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Genetech Solutions Products: Pie Register - Social Sites Login (Add on) Problem Types: CWE-288 Authentication Bypass Using an Alternate Path or Channel Description: The Pie Register - Social Sites Login (Add on) plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.7.7. This is due to insufficient verification on the user being supplied during a social login through the plugin. This makes it possible for unauthenticated attackers to log in as any existing
uring a social login through the plugin. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the email. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b98179c3-8b32-4d75-9f3f-2367215a740b?source=cve - https://plugins.trac.wordpress.org/browser/pie-register/tags/3.8.3.3/pie-register.php#L2959
CVE ID: CVE-2024-4545 State: PUBLISHED Published: 2024-05-09T18:12:18.399Z Last Updated: 2024-08-01T20:47:40.854Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: EnterpriseDB Products: EDB Postgres Advanced Server Problem Types: CWE-269 Description: All versions of EnterpriseDB Postgres Advanced Server (EPAS) from 15.0 prior to 15.7.0 and from 16.0 prior to 16.3.0 may allow users using edbldr to bypass role permissions from pg_read_server_files. This could allow low privilege users to read files to which they would not otherwise have access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.enterprisedb.com/d
Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.enterprisedb.com/docs/epas/15/epas_rel_notes/ - https://www.enterprisedb.com/docs/epas/latest/epas_rel_notes/ - https://www.enterprisedb.com/docs/security/advisories/cve20244545/
CVE ID: CVE-2024-4546 State: PUBLISHED Published: 2024-05-16T07:32:43.000Z Last Updated: 2024-08-01T20:47:41.133Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: avimegladon Products: Custom Post Type Attachment Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Custom Post Type Attachment plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'pdf_attachment' shortcode in all versions up to, and including, 3.4.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with con
nitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f6ba2907-36f4-4c4d-9e25-d13d32e28690?source=cve - https://plugins.trac.wordpress.org/changeset/3087121/
CVE ID: CVE-2024-4547 State: PUBLISHED Published: 2024-05-06T13:48:08.737Z Last Updated: 2024-08-01T20:47:40.554Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: DIAEnergie Problem Types: CWE-20 Description: A SQLi vulnerability exists in Delta Electronics DIAEnergie v1.10.1.8610 and prior when CEBC.exe processes a 'RecalculateScript' message, which is splitted into 4 fields using the '~' character as the separator. An unauthenticated remote attacker can perform SQLi via the fourth field Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2024-13
CVE ID: CVE-2024-4548 State: PUBLISHED Published: 2024-05-06T13:51:07.049Z Last Updated: 2024-08-01T20:47:40.056Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: DIAEnergie Problem Types: CWE-20 Description: An SQLi vulnerability exists in Delta Electronics DIAEnergie v1.10.1.8610 and prior when CEBC.exe processes a 'RecalculateHDMWYC' message, which is split into 4 fields using the '~' character as the separator. An unauthenticated remote attacker can perform SQLi via the fourth field. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2024-13
CVE ID: CVE-2024-4549 State: PUBLISHED Published: 2024-05-06T13:54:32.808Z Last Updated: 2024-08-01T20:47:41.185Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Delta Electronics Products: DIAEnergie Description: A denial of service vulnerability exists in Delta Electronics DIAEnergie v1.10.1.8610 and prior. When processing an 'ICS Restart!' message, CEBC.exe restarts the system. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2024-13
CVE ID: CVE-2024-4550 State: PUBLISHED Published: 2024-09-13T17:26:46.819Z Last Updated: 2024-09-16T17:59:31.539Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: P360 Workstation (ThinkStation) BIOS, ST50 (ThinkSystem) BIOS, ST50 V2 (ThinkSystem) BIOS, ST58 (ThinkSystem) BIOS, ST58 V2 (ThinkSystem) BIOS Problem Types: CWE-121 Description: A potential buffer overflow vulnerability was reported in some Lenovo ThinkSystem and ThinkStation products that could allow a local attacker with elevated privileges to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.lenovo.com/us/en/product_security
code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.lenovo.com/us/en/product_security/LEN-165524
CVE ID: CVE-2024-4551 State: PUBLISHED Published: 2024-06-15T08:42:17.622Z Last Updated: 2024-08-01T20:47:40.519Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: yotuwp Products: Video Gallery – YouTube Playlist, Channel Gallery by YotuWP Problem Types: CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') Description: The Video Gallery – YouTube Playlist, Channel Gallery by YotuWP plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.13 via the display function. This makes it possible for authenticated attackers, with contributor access and higher, to inc
via the display function. This makes it possible for authenticated attackers, with contributor access and higher, to include and execute arbitrary php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a4c7c932-5955-4fce-a64d-3b5c5de95356?source=cve - https://plugins.trac.wordpress.org/browser/yotuwp-easy-youtube-embed/trunk/inc/views.php#L828 - https:
5356?source=cve - https://plugins.trac.wordpress.org/browser/yotuwp-easy-youtube-embed/trunk/inc/views.php#L828 - https://swisskyrepo.github.io/PayloadsAllTheThings/File%20Inclusion/#lfi-to-rce-via-php-pearcmd
CVE ID: CVE-2024-4552 State: PUBLISHED Published: 2024-06-04T02:00:56.379Z Last Updated: 2024-08-01T20:47:40.047Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: phoeniixx Products: Social Login Lite For WooCommerce Problem Types: CWE-288 Authentication Bypass Using an Alternate Path or Channel Description: The Social Login Lite For WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.6.0. This is due to insufficient verification on the user being supplied during the social login through the plugin. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as
ugh the plugin. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the email. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f91d6ad6-82fc-4507-90e2-aedfff26bac5?source=cve - https://plugins.trac.wordpress.org/browser/social-login-lite-for-woocommerce/tags/1.6.0/woocommerce_social_login.php#L499
CVE ID: CVE-2024-4553 State: PUBLISHED Published: 2024-05-21T09:31:50.781Z Last Updated: 2024-08-01T20:47:40.648Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: gn_themes Products: WP Shortcodes Plugin — Shortcodes Ultimate Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'su_members' shortcode in all versions up to, and including, 7.1.5 due to insufficient input sanitization and output escaping on user supplied 'color' attribute. This makes it possible for au
to insufficient input sanitization and output escaping on user supplied 'color' attribute. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d8db8ed5-ebeb-4102-928f-fe417e429ad2?source=cve - https://plugins.trac.wordpress.org/browser/shortcodes-ultimate/tags/7.1.4/includes/shortcodes/members.php#L83 - https://plugins.trac.wordpress.org/changeset/3084162/#file524