Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-53730 State: PUBLISHED Published: 2024-12-02T13:43:30.246Z Last Updated: 2024-12-02T15:40:23.898Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Aaron Hodge Silver Products: April's Call Posts Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Aaron Hodge Silver April's Call Posts allows Stored XSS. This issue affects April's Call Posts: from n/a through 2.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/aprils-call-posts/vulnerability/wordpress-april-s-call-posts-plugin-2-1-1-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53731 State: PUBLISHED Published: 2024-11-28T11:23:25.817Z Last Updated: 2024-11-28T12:15:15.576Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Fintelligence Products: Fintelligence Calculator Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fintelligence Fintelligence Calculator allows Stored XSS.This issue affects Fintelligence Calculator: from n/a through 1.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/fintelligence-calculator/vulnerability/wordpress-fintelligence-calculator-plu
//patchstack.com/database/wordpress/plugin/fintelligence-calculator/vulnerability/wordpress-fintelligence-calculator-plugin-1-0-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53732 State: PUBLISHED Published: 2024-11-28T11:03:43.562Z Last Updated: 2024-11-28T12:15:16.090Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: WP WOX Products: Footer Flyout Widget Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in WP WOX Footer Flyout Widget allows Stored XSS.This issue affects Footer Flyout Widget: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/footer-flyout-widget/vulnerability/wordpress-footer-flyout-widget-plugin-1-1-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53733 State: PUBLISHED Published: 2024-11-28T11:02:39.334Z Last Updated: 2024-11-28T12:15:15.980Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Rohit Harsh Products: Fence URL Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rohit Harsh Fence URL allows Stored XSS.This issue affects Fence URL: from n/a through 2.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/fence-url/vulnerability/wordpress-fence-url-plugin-2-0-0-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53734 State: PUBLISHED Published: 2024-11-28T11:01:57.632Z Last Updated: 2024-11-28T12:15:15.854Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Idealien Studios Products: Idealien Category Enhancements Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Idealien Studios Idealien Category Enhancements allows Stored XSS.This issue affects Idealien Category Enhancements: from n/a through 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/idealien-category-enhancements/vulnerability/wordpress-idealien-category-enhancements-plugin-1-2-csrf-to-st
press/plugin/idealien-category-enhancements/vulnerability/wordpress-idealien-category-enhancements-plugin-1-2-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53736 State: PUBLISHED Published: 2024-11-28T11:01:14.280Z Last Updated: 2024-11-28T12:15:15.723Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Jason Grim Products: Custom Shortcode Sidebars Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Jason Grim Custom Shortcode Sidebars allows Stored XSS.This issue affects Custom Shortcode Sidebars: from n/a through 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/custom-shortcode-sidebars/vulnerability/wordpress-custom-shortcode-sidebars-plugin-1-2-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53737 State: PUBLISHED Published: 2024-11-28T10:55:04.938Z Last Updated: 2024-11-28T12:15:16.366Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: WP Mailster Products: WP Mailster Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Mailster allows Stored XSS.This issue affects WP Mailster: from n/a through 1.8.16.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-mailster/vulnerability/wordpress-wp-mailster-plugin-1-8-16-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53738 State: PUBLISHED Published: 2024-11-30T20:48:32.700Z Last Updated: 2024-12-01T23:07:56.519Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: Gabe Livan Products: Asset CleanUp: Page Speed Booster Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in Gabe Livan Asset CleanUp: Page Speed Booster allows Server Side Request Forgery.This issue affects Asset CleanUp: Page Speed Booster: from n/a through 1.3.9.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-asset-clean-up/vulnerability/wordpress-asset-cleanup-page-speed-booster-plugin-1-3-
ack.com/database/wordpress/plugin/wp-asset-clean-up/vulnerability/wordpress-asset-cleanup-page-speed-booster-plugin-1-3-9-8-server-side-request-forgery-ssrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-53739 State: PUBLISHED Published: 2024-11-30T20:55:57.306Z Last Updated: 2024-12-02T15:52:43.355Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Cool Plugins Products: Cryptocurrency Widgets For Elementor Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Cool Plugins Cryptocurrency Widgets For Elementor allows PHP Local File Inclusion.This issue affects Cryptocurrency Widgets For Elementor: from n/a through 1.6.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/cryptocurren
onal Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/cryptocurrency-widgets-for-elementor/vulnerability/wordpress-cryptocurrency-widgets-for-elementor-plugin-1-6-4-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2024-53740 State: PUBLISHED Published: 2024-12-02T13:42:04.362Z Last Updated: 2024-12-02T15:40:27.161Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: WooCommerce Ultimate Gift Card - Create, Sell and Manage Gift Cards with Customized Email Templates Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WooCommerce Ultimate Gift Card - Create, Sell and Manage Gift Cards with Customized Email Templates allows Reflected XSS.This issue affects WooCommerce Ultimate Gift Card - Create, Sell and Manage Gift Cards with Customized Email Templates:
.This issue affects WooCommerce Ultimate Gift Card - Create, Sell and Manage Gift Cards with Customized Email Templates: from n/a through n/a. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/woocommerce-ultimate-gift-card/vulnerability/wordpress-woocommerce-ultimate-gift-card-plugin-2-9-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53741 State: PUBLISHED Published: 2024-12-02T13:48:37.360Z Last Updated: 2024-12-02T15:40:23.777Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Garrett Grimm Products: Simple Popup Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Garrett Grimm Simple Popup allows DOM-Based XSS.This issue affects Simple Popup: from n/a through 4.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/simple-popup-plugin/vulnerability/wordpress-simple-popup-plugin-4-6-cross-site-scripting-xss-vulnerability?_s_id
/plugin/simple-popup-plugin/vulnerability/wordpress-simple-popup-plugin-4-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53742 State: PUBLISHED Published: 2024-12-01T21:30:36.603Z Last Updated: 2024-12-01T23:07:52.762Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Prism I.T. Systems Products: Multilevel Referral Affiliate Plugin for WooCommerce Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Prism I.T. Systems Multilevel Referral Affiliate Plugin for WooCommerce allows Reflected XSS.This issue affects Multilevel Referral Affiliate Plugin for WooCommerce: from n/a through 2.27. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/
from n/a through 2.27. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/multilevel-referral-plugin-for-woocommerce/vulnerability/wordpress-multilevel-referral-affiliate-plugin-for-woocommerce-plugin-2-27-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53743 State: PUBLISHED Published: 2024-12-01T21:29:44.054Z Last Updated: 2024-12-01T23:07:52.648Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: FlickDevs Products: Countdown Timer for Elementor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FlickDevs Countdown Timer for Elementor allows Stored XSS.This issue affects Countdown Timer for Elementor: from n/a through 1.3.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/countdown-timer-for-elementor/vulnerability/wordpress-countdown-timer-
https://patchstack.com/database/wordpress/plugin/countdown-timer-for-elementor/vulnerability/wordpress-countdown-timer-for-elementor-plugin-1-3-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53744 State: PUBLISHED Published: 2024-12-01T21:29:00.261Z Last Updated: 2024-12-01T23:07:52.533Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Skybootstrap Products: Elementor Image Gallery Plugin Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Skybootstrap Elementor Image Gallery Plugin allows Stored XSS.This issue affects Elementor Image Gallery Plugin: from n/a through 1.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/skyboot-portfolio-gallery/vulnerability/wordpress-elementor-i
rences: - https://patchstack.com/database/wordpress/plugin/skyboot-portfolio-gallery/vulnerability/wordpress-elementor-image-gallery-plugin-1-0-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53745 State: PUBLISHED Published: 2024-12-01T21:28:13.503Z Last Updated: 2024-12-01T23:07:52.421Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: 코스모스팜 – Cosmosfarm Products: 소셜 공유 버튼 By 코스모스팜 Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 코스모스팜 – Cosmosfarm 소셜 공유 버튼 By 코스모스팜 allows Stored XSS.This issue affects 소셜 공유 버튼 By 코스모스팜: from n/a through 1.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/cosmosfarm-share-buttons/vulnerability/wordpress-social-sharing-buttons-by-cosmos-farm-plu
com/database/wordpress/plugin/cosmosfarm-share-buttons/vulnerability/wordpress-social-sharing-buttons-by-cosmos-farm-plugin-1-9-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53746 State: PUBLISHED Published: 2024-12-01T21:24:44.046Z Last Updated: 2024-12-01T23:07:52.278Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: FlickDevs Products: Elementor Button Plus Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FlickDevs Elementor Button Plus allows Stored XSS.This issue affects Elementor Button Plus: from n/a through 1.3.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/fd-elementor-button-plus/vulnerability/wordpress-elementor-button-plus-plugin-1-3-3-cross-site
database/wordpress/plugin/fd-elementor-button-plus/vulnerability/wordpress-elementor-button-plus-plugin-1-3-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53747 State: PUBLISHED Published: 2024-12-01T21:23:55.940Z Last Updated: 2024-12-01T23:07:53.485Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: NuttTaro Products: Video Player for WPBakery Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NuttTaro Video Player for WPBakery allows Stored XSS.This issue affects Video Player for WPBakery: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/video-player-for-wpbakery/vulnerability/wordpress-video-player-for-wpbakery-plugin-1
stack.com/database/wordpress/plugin/video-player-for-wpbakery/vulnerability/wordpress-video-player-for-wpbakery-plugin-1-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53748 State: PUBLISHED Published: 2024-12-01T21:23:15.474Z Last Updated: 2024-12-01T23:07:53.358Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Terry Lin Products: WP Mermaid Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Terry Lin WP Mermaid allows Stored XSS.This issue affects WP Mermaid: from n/a through 1.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-mermaid/vulnerability/wordpress-wp-mermaid-plugin-1-0-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53749 State: PUBLISHED Published: 2024-12-01T21:21:51.004Z Last Updated: 2024-12-01T23:07:53.246Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Plugin Devs Products: Post Carousel Slider for Elementor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Plugin Devs Post Carousel Slider for Elementor allows Stored XSS.This issue affects Post Carousel Slider for Elementor: from n/a through 1.4.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/post-carousel-slider-for-elementor/vulnerability/wo
ment: References: - https://patchstack.com/database/wordpress/plugin/post-carousel-slider-for-elementor/vulnerability/wordpress-post-carousel-slider-for-elementor-plugin-1-4-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53750 State: PUBLISHED Published: 2024-12-01T21:21:04.087Z Last Updated: 2024-12-01T23:07:53.076Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Maeve Lander Products: PayPal Responder Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Maeve Lander PayPal Responder allows Stored XSS.This issue affects PayPal Responder: from n/a through 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/paypal-responder/vulnerability/wordpress-paypal-responder-plugin-1-2-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53751 State: PUBLISHED Published: 2024-12-02T13:48:36.763Z Last Updated: 2024-12-02T15:40:23.656Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Abdul Hakeem Products: Build App Online Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Abdul Hakeem Build App Online allows Cross Site Request Forgery.This issue affects Build App Online: from n/a through 1.0.22. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/build-app-online/vulnerability/wordpress-build-app-online-plugin-1-0-22-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-53752 State: PUBLISHED Published: 2024-12-01T21:20:02.471Z Last Updated: 2024-12-01T23:07:52.907Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Berg Informatik Products: Stripe Donation Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Berg Informatik Stripe Donation allows Stored XSS.This issue affects Stripe Donation: from n/a through 1.2.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/bin-stripe-donation/vulnerability/wordpress-stripe-donation-plugin-1-2-5-cross-site-scripting-xss-vu
se/wordpress/plugin/bin-stripe-donation/vulnerability/wordpress-stripe-donation-plugin-1-2-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53753 State: PUBLISHED Published: 2024-12-02T13:48:36.190Z Last Updated: 2024-12-02T15:40:23.540Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: CultBooking Products: CultBooking Hotel Booking Engine Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in CultBooking CultBooking Hotel Booking Engine allows Stored XSS.This issue affects CultBooking Hotel Booking Engine: from n/a through 2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/cultbooking-booking-engine/vulnerability/wordpress-cultbooking-hotel-booking-engine-plugin-2-1-csrf-to-stored-x
s/plugin/cultbooking-booking-engine/vulnerability/wordpress-cultbooking-hotel-booking-engine-plugin-2-1-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53754 State: PUBLISHED Published: 2024-12-02T13:48:35.631Z Last Updated: 2024-12-02T15:40:23.398Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Arrow Design Products: Out Of Stock Badge Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Arrow Design Out Of Stock Badge allows Cross Site Request Forgery.This issue affects Out Of Stock Badge: from n/a through 1.3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/out-of-stock-badge/vulnerability/wordpress-out-of-stock-badge-plugin-1-3-1-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53755 State: PUBLISHED Published: 2024-12-02T13:48:35.053Z Last Updated: 2024-12-02T15:40:23.266Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Andrea Pernici Products: Third Party Cookie Eraser Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Andrea Pernici Third Party Cookie Eraser allows Stored XSS.This issue affects Third Party Cookie Eraser: from n/a through 1.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/third-party-cookie-eraser/vulnerability/wordpress-third-party-cookie-eraser-plugin-1-0-2-csrf-to-cross-site-scripting-xss-vu
d-party-cookie-eraser/vulnerability/wordpress-third-party-cookie-eraser-plugin-1-0-2-csrf-to-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53756 State: PUBLISHED Published: 2024-11-30T21:57:59.369Z Last Updated: 2024-12-01T23:07:53.612Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Aftab Husain Products: Vertical Carousel Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aftab Husain Vertical Carousel allows Stored XSS.This issue affects Vertical Carousel: from n/a through 1.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/vertical-carousel-slider/vulnerability/wordpress-vertical-carousel-plugin-1-0-2-cross-site-scripting
se/wordpress/plugin/vertical-carousel-slider/vulnerability/wordpress-vertical-carousel-plugin-1-0-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53757 State: PUBLISHED Published: 2024-11-30T21:53:59.479Z Last Updated: 2024-12-01T23:07:54.074Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: SocialEvolution Products: WP Find Your Nearest Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SocialEvolution WP Find Your Nearest allows Stored XSS.This issue affects WP Find Your Nearest: from n/a through 0.3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-find-your-nearest/vulnerability/wordpress-wp-find-your-nearest-plugin-0-3-1-cross-
tack.com/database/wordpress/plugin/wp-find-your-nearest/vulnerability/wordpress-wp-find-your-nearest-plugin-0-3-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53758 State: PUBLISHED Published: 2024-11-30T21:52:34.682Z Last Updated: 2024-12-01T23:07:53.965Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Terry Lin Products: WP MathJax Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Terry Lin WP MathJax allows Stored XSS.This issue affects WP MathJax: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-mathjax-plus/vulnerability/wordpress-wp-mathjax-plugin-1-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-53759 State: PUBLISHED Published: 2024-12-02T13:48:34.490Z Last Updated: 2024-12-02T15:40:23.129Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Planet Studio team Products: ArCa Payment Gateway Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Planet Studio team ArCa Payment Gateway allows Stored XSS.This issue affects ArCa Payment Gateway: from n/a through 1.3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/arca-payment-gateway/vulnerability/wordpress-arca-payment-gateway-plugin-1-3-1-cs
tchstack.com/database/wordpress/plugin/arca-payment-gateway/vulnerability/wordpress-arca-payment-gateway-plugin-1-3-1-csrf-to-stored-cross-site-scripting-xss-vulnerability?_s_id=cve