Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-9418 State: PUBLISHED Published: 2025-03-20T10:09:21.583Z Last Updated: 2025-10-15T12:50:46.781Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: transformeroptimus Products: transformeroptimus/superagi Problem Types: CWE-256 Description: In version 0.0.14 of transformeroptimus/superagi, the API endpoint `/api/users/get/{id}` returns the user's password in plaintext. This vulnerability allows an attacker to retrieve the password of another user, leading to potential account takeover. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/9a8118a2-ea32-41f5-b501-fef4f31d8213
CVE ID: CVE-2024-9419 State: PUBLISHED Published: 2024-10-30T17:25:43.444Z Last Updated: 2024-10-30T18:25:11.685Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: HP, Inc. Products: HP Smart Universal Printing Driver Problem Types: CWE-787 Description: Client / Server PCs with the HP Smart Universal Printing Driver installed are potentially vulnerable to Remote Code Execution and/or Elevation of Privilege. A client using the HP Smart Universal Printing Driver that sends a print job comprised of a malicious XPS file could potentially lead to Remote Code Execution and/or Elevation of Privilege on the PC. Additional Analyst Notes: - CISA ADP Vulnrichment: Referenc
mote Code Execution and/or Elevation of Privilege on the PC. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_11505949-11505972-16
CVE ID: CVE-2024-9420 State: PUBLISHED Published: 2024-11-12T15:57:24.947Z Last Updated: 2025-03-13T15:31:10.970Z Vendors: Ivanti Products: Connect Secure, Policy Secure Problem Types: CWE-416 Description: A use-after-free in Ivanti Connect Secure before version 22.7R2.3 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker to achieve remote code execution Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-ICS-Ivanti-Policy-Secure-IPS-Ivanti-Secure-Access-Client-ISAC-Multiple-CVEs
CVE ID: CVE-2024-9421 State: PUBLISHED Published: 2024-10-04T02:04:54.511Z Last Updated: 2024-10-04T13:59:47.766Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: prontotools Products: Login Logout Shortcode Problem Types: CWE-79 Description: The Login Logout Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'class' parameter in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additi
and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/8f7ce513-45ba-427b-8ee0-1007e404c1a9?source=cve - https://plugins.trac.wordpress.org/browser/login-logout-shortcode/trunk/login-logout-shortcode.php#L39 - https://wordpress.org/plugins/login-logout-shortcode/#developers
CVE ID: CVE-2024-9422 State: PUBLISHED Published: 2024-11-22T06:00:04.194Z Last Updated: 2024-11-22T17:52:16.250Z Vendors: Unknown Products: GEO my WP, gmw-premium-settings Problem Types: CWE-434 Unrestricted Upload of File with Dangerous Type Description: The GEO my WP WordPress plugin before 4.5, gmw-premium-settings WordPress plugin before 3.1 does not sufficiently validate files to be uploaded, which could allow attackers to upload arbitrary files such as PHP on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/81320923-767c-43f0-a8eb-b398c306c16f/
CVE ID: CVE-2024-9423 State: PUBLISHED Published: 2024-10-02T15:21:27.570Z Last Updated: 2024-10-02T16:50:37.935Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: HP Inc. Products: Certain HP LaserJet Printers Problem Types: CWE-241 Description: Certain HP LaserJet printers may potentially experience a denial of service when a user sends a raw JPEG file to the printer. The printer displays a “JPEG Unsupported” message which may not clear, potentially blocking queued print jobs. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_11266441-11266463-16/hpsbpi03976
CVE ID: CVE-2024-9425 State: PUBLISHED Published: 2024-10-18T09:32:18.321Z Last Updated: 2024-10-18T14:35:04.758Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: sajjad67 Products: Advanced Category and Custom Taxonomy Image Problem Types: CWE-79 Description: The Advanced Category and Custom Taxonomy Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ad_tax_image shortcode in all versions up to, and including, 1.0.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scr
This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f37fb598-72a2-48d3-b2e6-63d6654b1474?source=cve - https://plugins.trac.wordpress.org/browser/advanced-category-and-custom-taxonomy-image/trunk/wp-advanced-taxonomy-image.php#L495 - https://wordpress.org/plugins/advanced-category-and-custom-taxonomy-image/#developers - https://plugins.trac.wordpress.org/changeset/3170877/
CVE ID: CVE-2024-9426 State: PUBLISHED Published: 2024-11-13T02:02:37.778Z Last Updated: 2024-11-13T14:40:42.694Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: thinkaquamarine Products: Aqua SVG Sprite Problem Types: CWE-79 Description: The Aqua SVG Sprite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 3.0.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Additional Analyst Notes: - C
ct arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/fc4c1809-d79f-4505-8f0a-9ec534c8fea2?source=cve - https://wordpress.org/plugins/aqua-svg-sprite/#developers
CVE ID: CVE-2024-9427 State: PUBLISHED Published: 2024-12-24T03:25:27.815Z Last Updated: 2025-08-30T21:00:59.012Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Problem Types: CWE-116 Description: A vulnerability in Koji was found. An unsanitized input allows for an XSS attack. Javascript code from a malicious link could be reflected in the resulting web page. It is not expected to be able to submit an action or make a change in Koji due to existing XSS protections in the code Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2024-9427 - https://bugzilla.redhat.com/show_bug.cgi?id=2316047
CVE ID: CVE-2024-9428 State: PUBLISHED Published: 2024-12-12T06:00:18.844Z Last Updated: 2024-12-12T17:22:46.068Z Vendors: Unknown Products: Popup Builder Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Popup Builder WordPress plugin before 4.3.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/6e246547-e509-48db-88ae-b2f943398377/
CVE ID: CVE-2024-9429 State: PUBLISHED Published: 2024-10-02T12:31:04.673Z Last Updated: 2024-10-02T13:27:40.304Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Restaurant Reservation System Problem Types: CWE-89 Description: A vulnerability has been found in code-projects Restaurant Reservation System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /filter2.php. The manipulation of the argument from/to leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory only mentions the parameter "from" to be affe
n disclosed to the public and may be used. The initial researcher advisory only mentions the parameter "from" to be affected. But it must be assumed that parameter "to" is affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.279049 - https://vuldb.com/?ctiid.279049 - https://vuldb.com/?submit.416904 - https://github.com/ppp-src/a/issues/23 - https://code-projects.org/
CVE ID: CVE-2024-9430 State: PUBLISHED Published: 2024-10-31T06:48:54.820Z Last Updated: 2024-10-31T14:18:40.791Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: wpcloudtechnologies Products: Get Quote For Woocommerce – Request A Quote For Woocommerce Problem Types: CWE-306 Description: The Get Quote For Woocommerce – Request A Quote For Woocommerce plugin for WordPress is vulnerable to unauthorized access of Quote data due to a missing capability check on the ct_tepfw_wp_loaded function in all versions up to, and including, 1.0.0. This makes it possible for unauthenticated attackers to download Quote PDF and CSV documents. Additional Analyst Notes: - CISA A
es it possible for unauthenticated attackers to download Quote PDF and CSV documents. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4d0a0aa7-7bd9-4883-85b6-b7abf338aa75?source=cve - https://plugins.trac.wordpress.org/browser/get-a-quote-for-woocommerce/trunk/includes/admin/class-ct-rfq-admin.php
CVE ID: CVE-2024-9431 State: PUBLISHED Published: 2025-03-20T10:09:46.141Z Last Updated: 2025-10-15T12:50:03.221Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: transformeroptimus Products: transformeroptimus/superagi Problem Types: CWE-620 Description: In version v0.0.14 of transformeroptimus/superagi, there is an improper privilege management vulnerability. After logging into the system, users can change the passwords of other users, leading to potential account takeover. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/9b33d7c1-ed0a-4f5b-a378-694570fd990b
CVE ID: CVE-2024-9434 State: PUBLISHED Published: 2024-10-31T06:48:56.306Z Last Updated: 2024-10-31T14:11:14.841Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: alexgff Products: WPGlobus Translate Options Problem Types: CWE-352 Description: The WPGlobus Translate Options plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.0. This is due to missing or incorrect nonce validation on the on__translate_options_page() function. This makes it possible for unauthenticated attackers to inject malicious web scripts and update plugin settings via a forged request granted they can trick a site administrator into p
malicious web scripts and update plugin settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ddca65fa-0744-4b2a-808c-a913586edc60?source=cve - https://plugins.trac.wordpress.org/browser/wpglobus-translate-options/trunk/includes/class-wpglobus-translate-options.php#L442
CVE ID: CVE-2024-9435 State: PUBLISHED Published: 2024-10-04T06:48:41.806Z Last Updated: 2024-10-04T13:42:10.876Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: plainware Products: ShiftController Employee Shift Scheduling Problem Types: CWE-79 Description: The ShiftController Employee Shift Scheduling plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL keys in all versions up to, and including, 4.9.66 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action suc
o inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/dd3a198c-7c24-45b1-95a7-eb16472a51e2?source=cve - https://plugins.trac.wordpress.org/tags/4.9.66/shiftcontroller/trunk/hc3/post.php#L61 - https://plugins.trac.wordpress.org/changeset/3161880/
CVE ID: CVE-2024-9436 State: PUBLISHED Published: 2024-10-11T06:50:18.179Z Last Updated: 2024-10-11T15:43:11.294Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: kevinb Products: PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes Problem Types: CWE-79 Description: The PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 3.5.14. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in p
up to, and including, 3.5.14. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/982bc924-1dcd-47b5-b15a-4ff0ad123ad1?source=cve - https://plugins.trac.wordpress.org/browser/revisionary/tags/3.5.14/admin/class-list-table_rvy.php#L717 - https://plugins.trac.wordpress.org/changeset/3165210/ - https://plugins.trac.wordpress.org/browser/revisionary/tags/3.5.14/admin/class-list-table-archive.php#L780
CVE ID: CVE-2024-9437 State: PUBLISHED Published: 2025-03-20T10:10:40.871Z Last Updated: 2025-10-15T12:50:03.294Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: transformeroptimus Products: transformeroptimus/superagi Problem Types: CWE-770 Description: SuperAGI version v0.0.14 is vulnerable to an unauthenticated Denial of Service (DoS) attack. The vulnerability exists in the resource upload request, where appending characters, such as dashes (-), to the end of a multipart boundary in an HTTP request causes the server to continuously process each character. This leads to excessive resource consumption and renders the service unavailable. The issue is unauthen
each character. This leads to excessive resource consumption and renders the service unavailable. The issue is unauthenticated and does not require any user interaction, impacting all users of the service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/27404e9c-eb3d-4626-a9d9-8dc1b3295ce0
CVE ID: CVE-2024-9438 State: PUBLISHED Published: 2024-10-29T08:31:17.520Z Last Updated: 2024-10-29T14:53:06.024Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: seuroficial Products: SEUR Oficial Problem Types: CWE-80 Description: The SEUR Oficial plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'change_service' parameter in all versions up to, and including, 2.2.11 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additiona
pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/88edf229-2be2-49d0-b500-e8ff7708f806?source=cve - https://plugins.trac.wordpress.org/browser/seur/trunk/core/pages/seur-get-labels.php#L60 - https://plugins.trac.wordpress.org/changeset/3176965/seur/trunk/core/pages/seur-get-labels.php
CVE ID: CVE-2024-9439 State: PUBLISHED Published: 2025-03-20T10:10:34.836Z Last Updated: 2025-03-20T18:19:47.040Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: transformeroptimus Products: transformeroptimus/superagi Problem Types: CWE-94 Description: SuperAGI is vulnerable to remote code execution in the latest version. The `agent template update` API allows attackers to control certain parameters, which are then fed to the eval function without any sanitization or checks in place. This vulnerability can lead to full system compromise. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/d710884f-b5ab-4b31-a2e6-e4b3848
itional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/d710884f-b5ab-4b31-a2e6-e4b38488def1
CVE ID: CVE-2024-9440 State: PUBLISHED Published: 2024-10-02T18:40:05.254Z Last Updated: 2024-10-02T19:13:30.506Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Problem Types: CWE-79 Description: Slim Select 2.0 versions through 2.9.0 are affected by a potential cross-site scripting vulnerability. In select.ts:createOption(), the text variable from the user-provided Options object is assigned to an innerHTML without sanitation. Software that depends on this library to dynamically generate lists using unsanitized user-provided input may be vulnerable to cross-site scripting, resulting in attacker executed JavaScript. At this time, no patch is available. Additional An
e to cross-site scripting, resulting in attacker executed JavaScript. At this time, no patch is available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vulncheck.com/advisories/slim-select-xss - https://github.com/brianvoe/slim-select/issues/564 - https://github.com/brianvoe/slim-select/blob/e7e37e2ff90e125f846bd98d6b8f278524ead79e/src/slim-select/select.ts#L377
CVE ID: CVE-2024-9441 State: PUBLISHED Published: 2024-10-02T18:50:10.938Z Last Updated: 2024-10-02T19:08:03.687Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Linear Products: eMerge e3-Series Problem Types: CWE-78 Description: The Linear eMerge e3-Series through version 1.00-07 is vulnerable to an OS command injection vulnerability. A remote and unauthenticated attacker can execute arbitrary OS commands via the login_id parameter when invoking the forgot_password functionality over HTTP. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ssd-disclosure.com/ssd-advisory-nortek-linear-emerge-e3-pre-auth-rce/ - https://vulncheck.com/
nt: References: - https://ssd-disclosure.com/ssd-advisory-nortek-linear-emerge-e3-pre-auth-rce/ - https://vulncheck.com/advisories/linear-emerge-forgot-password
CVE ID: CVE-2024-9442 State: PUBLISHED Published: 2024-11-21T02:06:42.994Z Last Updated: 2024-11-21T11:40:09.934Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: faktorvier Products: F4 Improvements Problem Types: CWE-79 Description: The F4 Improvements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.9.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Additional Analyst Notes: - CISA AD
itrary web scripts in pages that will execute whenever a user accesses the SVG file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b97a555a-1eeb-4fc4-9338-bad8b9a0585d?source=cve - https://wordpress.org/plugins/element-ready-lite/#developers
CVE ID: CVE-2024-9443 State: PUBLISHED Published: 2024-11-05T08:31:35.947Z Last Updated: 2024-11-05T13:30:35.907Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: basticom Products: Basticom Framework Problem Types: CWE-79 Description: The Basticom Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.5.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Additional Analyst Notes: - CIS
arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3dd3dc4b-e936-46a4-8d65-5f4bf05b2374?source=cve - https://wordpress.org/plugins/basticom-framework/#developers - https://plugins.trac.wordpress.org/changeset/3178823/
CVE ID: CVE-2024-9444 State: PUBLISHED Published: 2024-10-16T09:32:20.325Z Last Updated: 2024-10-16T12:57:36.633Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: quomodosoft Products: ElementsReady Addons for Elementor Problem Types: CWE-79 Description: The ElementsReady Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 6.4.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG fi
r-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/bea7a4d0-d589-420b-a4ff-eaccf12e623b?source=cve - https://wordpress.org/plugins/element-ready-lite/#developers - https://plugins.trac.wordpress.org/browser/element-ready-lite/trunk/inc/helper_functions.php#L1559 - https://plugins.trac.wordpress.org/changeset/3167864/
CVE ID: CVE-2024-9445 State: PUBLISHED Published: 2024-10-04T02:04:56.929Z Last Updated: 2024-10-04T13:59:00.531Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: acekyd Products: Display Medium Posts Problem Types: CWE-79 Description: The Display Medium Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's display_medium_posts shortcode in all versions up to, and including, 5.0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever
attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/be1e0216-d9de-45e9-837c-0cccb78729a6?source=cve - https://plugins.trac.wordpress.org/browser/display-medium-posts/trunk/display-medium-posts.php#L200 - https://wordpress.org/plugins/display-medium-posts/