Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-9178 State: PUBLISHED Published: 2024-11-05T11:00:48.767Z Last Updated: 2024-11-05T13:29:39.166Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: xplodedthemes Products: XT Floating Cart for WooCommerce Problem Types: CWE-79 Description: The XT Floating Cart for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.8.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file
level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/921be7ff-3d38-4b69-8a1f-a64d5aabd2dd?source=cve - https://wordpress.org/plugins/woo-floating-cart-lite/#developers - https://plugins.trac.wordpress.org/browser/woo-floating-cart-lite/trunk/xt-framework/includes/customizer/class-customizer.php#L1012 - https://plugins.trac.wordpress.org/changeset/3181762/
CVE ID: CVE-2024-9180 State: PUBLISHED Published: 2024-10-10T20:54:57.084Z Last Updated: 2024-11-08T22:27:31.042Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: HashiCorp Products: Vault, Vault Enterprise Problem Types: CWE-266 Description: A privileged Vault operator with write permissions to the root namespace’s identity endpoint could escalate their own or another user’s privileges to Vault’s root policy. Fixed in Vault Community Edition 1.18.0 and Vault Enterprise 1.18.0, 1.17.7, 1.16.11, and 1.15.16. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://discuss.hashicorp.com/t/hcsec-2024-21-vault-operators-in-root-namespace-may-elevate
Vulnrichment: References: - https://discuss.hashicorp.com/t/hcsec-2024-21-vault-operators-in-root-namespace-may-elevate-their-privileges/70565
CVE ID: CVE-2024-9181 State: REJECTED Published: N/A Last Updated: 2025-02-11T01:05:31.072Z Description: No description available.
CVE ID: CVE-2024-9182 State: PUBLISHED Published: 2025-05-15T20:07:19.552Z Last Updated: 2025-05-17T03:02:33.711Z Vendors: Unknown Products: Maspik Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Maspik WordPress plugin before 2.1.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/40007323-d684-430d-a882-8b4dfb76172b/
CVE ID: CVE-2024-9184 State: PUBLISHED Published: 2024-10-17T09:32:17.786Z Last Updated: 2024-10-17T18:12:40.722Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: sendpulse Products: SendPulse Free Web Push Problem Types: CWE-79 Description: The SendPulse Free Web Push plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.3.6 due to incorrect use of the wp_kses_allowed_html function. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ww
e whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/74831bf8-0a30-4758-bfe6-5a5b4ee7ec24?source=cve - https://wordpress.org/plugins/sendpulse-web-push/#developers - https://plugins.trac.wordpress.org/browser/sendpulse-web-push/trunk/settings.php#L10 - https://plugins.trac.wordpress.org/changeset/3169899/
CVE ID: CVE-2024-9185 State: REJECTED Published: N/A Last Updated: 2025-02-11T01:05:30.269Z Description: No description available.
CVE ID: CVE-2024-9186 State: PUBLISHED Published: 2024-11-14T06:00:11.027Z Last Updated: 2024-11-15T19:27:37.434Z Vendors: Unknown Products: Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit Problem Types: CWE-89 SQL Injection Description: The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit WordPress plugin before 3.3.0 does not sanitize and escape the bwfan-track-id parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/fab29b59-7e87-4289
cks Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/fab29b59-7e87-4289-88dd-ed5520260c26/
CVE ID: CVE-2024-9187 State: PUBLISHED Published: 2024-10-12T05:39:39.961Z Last Updated: 2024-10-15T13:23:18.501Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: adamskaat Products: Read more By Adam Problem Types: CWE-862 Description: The Read more By Adam plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the deleteRm() function in all versions up to, and including, 1.1.8. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete read more buttons. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabiliti
s. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4ebc8d0d-04b6-49a0-96c1-7c6d930009d8?source=cve - https://plugins.trac.wordpress.org/browser/read-more/trunk/files/RadMoreAjax.php#L9
CVE ID: CVE-2024-9188 State: PUBLISHED Published: 2025-01-10T22:05:26.349Z Last Updated: 2025-01-13T20:07:56.835Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Arista Networks Products: Arista Edge Threat Management Problem Types: cwe-287 Description: Specially constructed queries cause cross platform scripting leaking administrator tokens Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.arista.com/en/support/advisories-notices/security-advisory/20454-security-advisory-0105
CVE ID: CVE-2024-9189 State: PUBLISHED Published: 2024-09-28T02:04:29.505Z Last Updated: 2024-09-30T15:45:18.049Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: omardabbas Products: EU/UK VAT Manager for WooCommerce Problem Types: CWE-862 Description: The EU/UK VAT Manager for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the alg_wc_eu_vat_exempt_vat_from_admin() function in all versions up to, and including, 2.12.12. This makes it possible for unauthenticated attackers to update the VAT status for any order. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ww
kers to update the VAT status for any order. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c6db680e-1fd4-420c-98f4-2b6dc5cf6781?source=cve - https://plugins.trac.wordpress.org/browser/eu-vat-for-woocommerce/tags/2.12.12/includes/class-alg-wc-eu-vat-ajax.php#L285 - https://plugins.trac.wordpress.org/changeset/3158296/
CVE ID: CVE-2024-9191 State: PUBLISHED Published: 2024-11-01T21:21:11.040Z Last Updated: 2024-11-05T15:23:21.631Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: Okta Products: Okta Verify for Windows Problem Types: CWE-276 Description: The Okta Device Access features, provided by the Okta Verify agent for Windows, provides access to the OktaDeviceAccessPipe, which enables attackers in a compromised device to retrieve passwords associated with Desktop MFA passwordless logins. The vulnerability was discovered via routine penetration testing. Note: A precondition of this vulnerability is that the user must be using the Okta Device Access passwordless feature. Ok
ote: A precondition of this vulnerability is that the user must be using the Okta Device Access passwordless feature. Okta Device Access users not using passwordless are not affected, and customers only using Okta Verify on platforms other than Windows, or only using FastPass are not affected. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://trust.okta.com/security-advisories/ - https://help.okta.com/oie/en-us/content/topics/releasenotes/oie-ov-release-notes.htm#panel4
CVE ID: CVE-2024-9192 State: PUBLISHED Published: 2024-11-16T03:20:44.515Z Last Updated: 2024-11-19T15:14:56.599Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: pressaholic Products: WordPress Video Robot - The Ultimate Video Importer Problem Types: CWE-269 Description: The WordPress Video Robot - The Ultimate Video Importer plugin for WordPress is vulnerable to privilege escalation due to insufficient validation on user meta that can be updated in the wpvr_rate_request_result() function in all versions up to, and including, 1.20.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to update their user meta on a WordP
es it possible for authenticated attackers, with subscriber-level access and above, to update their user meta on a WordPress site. This can be leveraged to update their capabilities to that of an administrator. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/2da019d3-4aca-485a-aa0c-73728dc1e7c1?source=cve - https://codecanyon.net/item/wordpress-video-robot-plugin/8619739
CVE ID: CVE-2024-9193 State: PUBLISHED Published: 2025-02-28T08:23:16.275Z Last Updated: 2025-02-28T13:27:05.710Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: creativeon Products: WHMpress - WHMCS WordPress Integration Plugin Problem Types: CWE-98 Description: The WHMpress - WHMCS WordPress Integration Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 6.3-revision-0 via the whmpress_domain_search_ajax_extended_results() function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be
to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included. This makes it possible for unauthenticated attackers to update arbitrary options on the WordPress site. Utilizing the /admin/services.php file, this can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/
access to a vulnerable site. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/5f3b0e75-d2f0-48b7-ba33-75c4e998030e?source=cve - https://whmpress.com/docs/change-log/
CVE ID: CVE-2024-9194 State: PUBLISHED Published: 2024-09-30T22:18:20.914Z Last Updated: 2024-11-21T16:57:14.437Z Vendors: Linux and Microsoft Windows Products: Octopus Server Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Linux and Microsoft Windows Octopus Server on Windows, Linux allows SQL Injection.This issue affects Octopus Server: from 2024.1.0 before 2024.1.13038, from 2024.2.0 before 2024.2.9482, from 2024.3.0 before 2024.3.12766. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://advisories.octopus.com/post/2024/sa2024-09/
CVE ID: CVE-2024-9195 State: PUBLISHED Published: 2025-02-28T08:23:18.568Z Last Updated: 2025-02-28T14:47:37.307Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: creativeon Products: WHMCS Client Area for WordPress by WHMpress Problem Types: CWE-862 Description: The WHMPress - WHMCS Client Area plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the update_settings case in the /admin/ajax.php file in all versions up to, and including, 4.3-revision-3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary option
. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c8af0c5c-3d7b-416d-9d10-6867fcf909a5?source=cve - https://codecanyon.net/item/whmcs-client-area-whmpress-addon/11218646
CVE ID: CVE-2024-9196 State: REJECTED Published: N/A Last Updated: 2025-02-11T01:05:19.700Z Description: No description available.
CVE ID: CVE-2024-9197 State: PUBLISHED Published: 2024-12-03T01:24:36.983Z Last Updated: 2024-12-03T16:48:00.520Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: Zyxel Products: VMG3625-T50B firmware Problem Types: CWE-120 Description: A post-authentication buffer overflow vulnerability in the parameter "action" of the CGI program in Zyxel VMG3625-T50B firmware versions through V5.50(ABPM.9.2)C0 could allow an authenticated attacker with administrator privileges to cause a temporary denial of service (DoS) condition against the web management interface by sending a crafted HTTP GET request to a vulnerable device if the function ZyEE is enabled. Additional An
nt interface by sending a crafted HTTP GET request to a vulnerable device if the function ZyEE is enabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-buffer-overflow-and-post-authentication-command-injection-vulnerabilities-in-some-4g-lte-5g-nr-cpe-dsl-ethernet-cpe-fiber-onts-and-wifi-extenders-12-03-2024
CVE ID: CVE-2024-9198 State: PUBLISHED Published: 2024-09-26T09:49:35.882Z Last Updated: 2024-09-26T13:25:23.927Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N) Vendors: Clibo Manager Products: Clibo Manager Problem Types: CWE-79 Description: Vulnerability in Clibo Manager v1.1.9.1 that could allow an attacker to execute an stored Cross-Site Scripting (stored XSS ) by uploading a malicious .svg image in the section: Profile > Profile picture. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-clibo-manager
CVE ID: CVE-2024-9199 State: PUBLISHED Published: 2024-09-26T09:50:58.163Z Last Updated: 2024-09-26T13:23:56.422Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N) Vendors: Clibo Manager Products: Clibo Manager Problem Types: CWE-799 Description: Rate limit vulnerability in Clibo Manager v1.1.9.2 that could allow an attacker to send a large number of emails to the victim in a short time, affecting availability and leading to a denial of service (DoS). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-clibo-manager
CVE ID: CVE-2024-9200 State: PUBLISHED Published: 2024-12-03T01:33:47.398Z Last Updated: 2024-12-06T04:55:23.779Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Zyxel Products: VMG4005-B50A firmware Problem Types: CWE-78 Description: A post-authentication command injection vulnerability in the "host" parameter of the diagnostic function in Zyxel VMG4005-B50A firmware versions through V5.15(ABQA.2.2)C0 could allow an authenticated attacker with administrator privileges to execute operating system (OS) commands on a vulnerable device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zyxel.com/global/en/support/security-advisories/zyx
al Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-buffer-overflow-and-post-authentication-command-injection-vulnerabilities-in-some-4g-lte-5g-nr-cpe-dsl-ethernet-cpe-fiber-onts-and-wifi-extenders-12-03-2024
CVE ID: CVE-2024-9201 State: PUBLISHED Published: 2024-10-10T10:25:50.915Z Last Updated: 2024-10-10T13:52:51.793Z Severity: CRITICAL (CVSS 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L) Vendors: SEUR Products: SEUR plugin Problem Types: CWE-89 Description: The SEUR plugin, in its versions prior to 2.5.11, is vulnerable to time-based SQL injection through the use of the ‘id_order’ parameter of the ‘/modules/seur/ajax/saveCodFee.php’ endpoint. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/sql-injection-vulnerability-seur-plugin
CVE ID: CVE-2024-9202 State: PUBLISHED Published: 2024-09-27T09:35:58.506Z Last Updated: 2024-09-27T16:09:20.761Z Vendors: Eclipse Foundation Products: Eclipse Dataspace Components Problem Types: CWE-862 Description: In Eclipse Dataspace Components versions 0.1.3 to 0.9.0, the Connector component filters which datasets (= data offers) another party can see in a requested catalog, to ensure that only authorized parties are able to view restricted offers. However, there is the possibility to request a single dataset, which should be subject to the same filtering process, but currently is missing the correct filtering. This enables parties to potentially see datasets they should not have access
currently is missing the correct filtering. This enables parties to potentially see datasets they should not have access to, thereby exposing sensitive information. Exploiting this vulnerability requires knowing the ID of a restricted dataset, but some IDs may be guessed by trying out many IDs in an automated way. Affected code: DatasetResolverImpl, L76-79 https://github.com/eclipse-edc/Connector/blob/v0.9.0/core/control-plane/control-plane-catalog/src/main/java/org/eclipse/edc/connector/controlplane/catalog/DatasetResolverImpl.java Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/eclipse-edc/Connector/pull/4490 - https://github.com/eclipse-edc/Connector/pu
richment: References: - https://github.com/eclipse-edc/Connector/pull/4490 - https://github.com/eclipse-edc/Connector/pull/4491 - https://gitlab.eclipse.org/security/cve-assignement/-/issues/35
CVE ID: CVE-2024-9203 State: PUBLISHED Published: 2024-09-26T17:00:07.180Z Last Updated: 2024-09-26T18:23:44.666Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Enpass Products: Password Manager Problem Types: CWE-316 Description: A vulnerability, which was classified as problematic, has been found in Enpass Password Manager up to 6.9.5 on Windows. This issue affects some unknown processing. The manipulation leads to cleartext storage of sensitive information in memory. An attack has to be approached locally. The complexity of an attack is rather high. The exploitation is known to be difficult. Upgrading to version 6.10.1 is able to address this issue. It is r
ther high. The exploitation is known to be difficult. Upgrading to version 6.10.1 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.278561 - https://vuldb.com/?ctiid.278561 - https://vuldb.com/?submit.411207 - https://www.enpass.io/release-notes/windows-10-desktop/
CVE ID: CVE-2024-9204 State: PUBLISHED Published: 2024-10-04T02:04:55.212Z Last Updated: 2024-10-04T13:59:32.418Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: nerdpressteam Products: Smart Custom 404 Error Page Problem Types: CWE-79 Description: The Smart Custom 404 Error Page plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via $_SERVER['REQUEST_URI'] in all versions up to, and including, 11.4.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clic
arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/93928123-c90d-4bbb-b51d-33e809867b79?source=cve - https://plugins.trac.wordpress.org/browser/404page/tags/11.4.7/inc/class-404page.php#L1227 - https://plugins.trac.wordpress.org/browser/404page/tags/11.4.7/functions.php#L112 - https://plugins.trac.wordpress.org/changeset/3161639/#file2
CVE ID: CVE-2024-9205 State: PUBLISHED Published: 2024-10-10T02:06:04.134Z Last Updated: 2024-10-10T13:13:33.378Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: algoritmika Products: Maximum Products per User for WooCommerce Problem Types: CWE-79 Description: The Maximum Products per User for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 4.2.8. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action su
to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/140c0d22-dc26-4100-a5c0-a2f8a6f98d97?source=cve - https://plugins.trac.wordpress.org/browser/maximum-products-per-user-for-woocommerce/tags/4.2.8/includes/class-alg-wc-mppu-users.php#L836 - https://plugins.trac.wordpress.org/changeset/3164534/maximum-products-per-user-for-woocommerce/tags/4.2.9/includes/class-alg-wc-mppu-users.php
CVE ID: CVE-2024-9206 State: PUBLISHED Published: 2024-10-18T06:51:26.281Z Last Updated: 2024-10-18T16:31:12.215Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: madrasthemes Products: MAS Companies For WP Job Manager Problem Types: CWE-79 Description: The MAS Companies For WP Job Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.0.13. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking o
ary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/dc277e7c-86ec-448f-a91e-e4d12a4b4177?source=cve - https://plugins.trac.wordpress.org/browser/mas-wp-job-manager-company/tags/1.0.13/templates/company-dashboard.php#L99 - https://plugins.trac.wordpress.org/changeset/3170459/