Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-10154 State: PUBLISHED Published: 2024-10-19T18:31:05.394Z Last Updated: 2024-10-21T13:51:58.477Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Boat Booking System Problem Types: CWE-89 Description: A vulnerability was found in PHPGurukul Boat Booking System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file status.php of the component Check Booking Status Page. The manipulation of the argument emailid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:/
s been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.280940 - https://vuldb.com/?ctiid.280940 - https://vuldb.com/?submit.425385 - https://github.com/jadu101/CVE/blob/main/phpgurukul_boat_booking_system_status_sqli.md - https://phpgurukul.com/
CVE ID: CVE-2024-10155 State: PUBLISHED Published: 2024-10-19T20:31:05.591Z Last Updated: 2024-10-21T13:50:50.542Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: PHPGurukul Products: Boat Booking System Problem Types: CWE-79 Description: A vulnerability was found in PHPGurukul Boat Booking System 1.0. It has been classified as problematic. This affects an unknown part of the file book-boat.php?bid=1 of the component Book a Boat Page. The manipulation of the argument phone_number leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
xploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.280941 - https://vuldb.com/?ctiid.280941 - https://vuldb.com/?submit.425397 - https://github.com/jadu101/CVE/blob/main/phpgurukul_boat_booking_system_book_boat_xss.md - https://phpgurukul.com/
CVE ID: CVE-2024-10156 State: PUBLISHED Published: 2024-10-19T21:00:08.643Z Last Updated: 2024-10-21T15:35:26.016Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Boat Booking System Problem Types: CWE-89 Description: A vulnerability was found in PHPGurukul Boat Booking System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/index.php of the component Sign In Page. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/
losed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.280942 - https://vuldb.com/?ctiid.280942 - https://vuldb.com/?submit.425398 - https://github.com/jadu101/CVE/blob/main/phpgurukul_boat_booking_system_admin_index_sqli.md - https://phpgurukul.com/
CVE ID: CVE-2024-10157 State: PUBLISHED Published: 2024-10-19T22:31:05.359Z Last Updated: 2025-04-03T06:46:01.796Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Boat Booking System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Boat Booking System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/password-recovery.php of the component Reset Your Password Page. The manipulation of the argument username/mobileno leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnr
iated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.280943 - https://vuldb.com/?ctiid.280943 - https://vuldb.com/?submit.425399 - https://github.com/jadu101/CVE/blob/main/phpgurukul_boat_booking_system_admin_password_recovery_sqli.md - https://phpgurukul.com/
CVE ID: CVE-2024-10158 State: PUBLISHED Published: 2024-10-19T23:00:07.132Z Last Updated: 2024-10-22T14:30:09.156Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: PHPGurukul Products: Boat Booking System Problem Types: CWE-384 Description: A vulnerability classified as problematic has been found in PHPGurukul Boat Booking System 1.0. Affected is the function session_start. The manipulation leads to session fixiation. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.280944 - https://vuldb.com/?ctiid.280944 - https://vuldb.com/?submit.4254
nrichment: References: - https://vuldb.com/?id.280944 - https://vuldb.com/?ctiid.280944 - https://vuldb.com/?submit.425414 - https://github.com/jadu101/CVE/blob/main/phpgurukul_boat_booking_system_session_fixation.md - https://phpgurukul.com/
CVE ID: CVE-2024-10159 State: PUBLISHED Published: 2024-10-19T23:31:04.926Z Last Updated: 2024-10-22T14:28:32.751Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Boat Booking System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in PHPGurukul Boat Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/profile.php of the component My Profile Page. The manipulation of the argument sadminusername/fullname/emailid/mobilenumber leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory onl
be launched remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory only mentions the parameter "mobilenumber" to be affected. But it must be assumed that other parameters are affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.280945 - https://vuldb.com/?ctiid.280945 - https://vuldb.com/?submit.425434 - https://github.com/jadu101/CVE/blob/main/phpgurukul_boat_booking_system_profile_sqli.md - https://phpgurukul.com/
CVE ID: CVE-2024-10160 State: PUBLISHED Published: 2024-10-20T00:00:08.224Z Last Updated: 2024-10-22T14:27:19.251Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Boat Booking System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in PHPGurukul Boat Booking System 1.0. Affected by this issue is some unknown functionality of the file /admin/bwdates-report-details.php of the component BW Dates Report Page. The manipulation of the argument fdate/tdate leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory only
e launched remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory only mentions the parameter "fdate" to be affected. But it must be assumed "tdate" is affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.280946 - https://vuldb.com/?ctiid.280946 - https://vuldb.com/?submit.425437 - https://github.com/jadu101/CVE/blob/main/phpgurukul_boat_booking_system_bwdates_report_details_sqli.md - https://phpgurukul.com/
CVE ID: CVE-2024-10161 State: PUBLISHED Published: 2024-10-20T00:31:05.138Z Last Updated: 2024-10-21T20:11:53.970Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Boat Booking System Problem Types: CWE-434 Description: A vulnerability, which was classified as critical, was found in PHPGurukul Boat Booking System 1.0. This affects an unknown part of the file change-image.php of the component Update Boat Image Page. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.280947 - https://vuldb.com/?ctiid.280947 - https://vuldb.com/?submit.425440 - https://github.com/jadu101/CVE/blob/main/phpgurukul_boat_booking_system_change_image_file_upload_rce.md - https://phpgurukul.com/
CVE ID: CVE-2024-10162 State: PUBLISHED Published: 2024-10-20T01:00:08.694Z Last Updated: 2024-10-21T20:05:34.685Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Boat Booking System Problem Types: CWE-89 Description: A vulnerability has been found in PHPGurukul Boat Booking System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/edit-subadmin.php of the component Edit Subdomain Details Page. The manipulation of the argument sadminusername/fullname/emailid/mobilenumber leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The initial researcher adv
tack can be initiated remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory only mentions the parameter "mobilenumber" to be affected. But it must be assumed that other parameters are affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.280948 - https://vuldb.com/?ctiid.280948 - https://vuldb.com/?submit.425449 - https://github.com/jadu101/CVE/blob/main/phpgurukul_boat_booking_system_edit_subadmin_sqli.md - https://phpgurukul.com/
CVE ID: CVE-2024-10163 State: PUBLISHED Published: 2024-10-20T01:31:04.762Z Last Updated: 2024-10-22T14:25:38.276Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Sentiment Based Movie Rating System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Sentiment Based Movie Rating System 1.0. It has been classified as critical. Affected is an unknown function of the file /msrps/movie_details.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The initial researcher disclosure mentions a slightly changed product
has been disclosed to the public and may be used. The initial researcher disclosure mentions a slightly changed product name. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.280950 - https://vuldb.com/?ctiid.280950 - https://vuldb.com/?submit.425464 - https://github.com/2967607153/CVE-report/blob/main/Sourcecodester-SQLi-Sentiment-Based-Moive-Rating.md - https://www.sourcecodester.com/
CVE ID: CVE-2024-10164 State: PUBLISHED Published: 2024-11-21T02:06:21.099Z Last Updated: 2024-11-21T11:40:10.380Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: codename065 Products: Premium Packages – Sell Digital Products Securely Problem Types: CWE-79 Description: The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpdmpp_pay_link shortcode in all versions up to, and including, 5.9.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to injec
pplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0c1758fc-5b0b-4071-b31b-1d72e34cc924?source=cve - https://wordpress.org/plugins/wpdm-premium-packages/#developers
CVE ID: CVE-2024-10165 State: PUBLISHED Published: 2024-10-20T02:00:06.781Z Last Updated: 2024-10-21T20:04:01.939Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Codezips Products: Sales Management System Problem Types: CWE-89 Description: A vulnerability was found in Codezips Sales Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file deletecustcom.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.280951 -
public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.280951 - https://vuldb.com/?ctiid.280951 - https://vuldb.com/?submit.425636 - https://github.com/ppp-src/CVE/issues/14
CVE ID: CVE-2024-10166 State: PUBLISHED Published: 2024-10-20T02:31:03.954Z Last Updated: 2024-10-21T20:03:03.981Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Codezips Products: Sales Management System Problem Types: CWE-89 Description: A vulnerability was found in Codezips Sales Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file checkuser.php. The manipulation of the argument name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.280952 - https://vul
may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.280952 - https://vuldb.com/?ctiid.280952 - https://vuldb.com/?submit.425643 - https://github.com/ppp-src/CVE/issues/15
CVE ID: CVE-2024-10167 State: PUBLISHED Published: 2024-10-20T03:00:06.033Z Last Updated: 2024-10-21T19:58:14.174Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Codezips Products: Sales Management System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in Codezips Sales Management System 1.0. This affects an unknown part of the file deletecustind.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.280953 - https://vuldb.com/?ctiid.
dditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.280953 - https://vuldb.com/?ctiid.280953 - https://vuldb.com/?submit.425650 - https://github.com/ppp-src/CVE/issues/16
CVE ID: CVE-2024-10168 State: PUBLISHED Published: 2024-11-06T11:32:01.809Z Last Updated: 2024-11-06T13:20:34.057Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: realmag777 Products: Active Products Tables for WooCommerce. Use constructor to create tables Problem Types: CWE-79 Description: The Active Products Tables for WooCommerce. Use constructor to create tables plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's woot_button shortcode in all versions up to, and including, 1.0.6.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with c
sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4a13b13e-72d3-43c9-b5ec-d499f3b22091?source=cve - https://wordpress.org/plugins/profit-products-tables-for-woocommerce/#developers - https://plugins.trac.wordpress.org/changeset/3182136/
CVE ID: CVE-2024-10169 State: PUBLISHED Published: 2024-10-20T03:31:04.258Z Last Updated: 2024-10-21T15:36:33.244Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Hospital Management System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in code-projects Hospital Management System 1.0. This vulnerability affects unknown code of the file change-password.php. The manipulation of the argument cpass leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.280954 - https://
nd may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.280954 - https://vuldb.com/?ctiid.280954 - https://vuldb.com/?submit.425745 - https://github.com/RainFo666/cve/issues/1 - https://code-projects.org/
CVE ID: CVE-2024-10170 State: PUBLISHED Published: 2024-10-20T04:00:05.717Z Last Updated: 2024-10-21T15:37:43.640Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Hospital Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in code-projects Hospital Management System 1.0. This issue affects some unknown processing of the file get_doctor.php. The manipulation of the argument specilizationid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.
disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.280955 - https://vuldb.com/?ctiid.280955 - https://vuldb.com/?submit.426440 - https://github.com/zer0-1s/cve/issues/1 - https://code-projects.org/
CVE ID: CVE-2024-10171 State: PUBLISHED Published: 2024-10-20T04:31:04.265Z Last Updated: 2024-10-21T15:38:50.949Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: code-projects Products: Blood Bank System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in code-projects Blood Bank System up to 1.0. Affected is an unknown function of the file /admin/massage.php. The manipulation of the argument bid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.280956 - https://vul
may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.280956 - https://vuldb.com/?ctiid.280956 - https://vuldb.com/?submit.426282 - https://github.com/cdl00/cve/blob/main/sql8-message-book.md - https://code-projects.org/
CVE ID: CVE-2024-10172 State: PUBLISHED Published: 2024-11-21T02:06:45.218Z Last Updated: 2024-11-21T11:30:09.904Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: voidcoders Products: WPBakery Visual Composer WHMCS Elements Problem Types: CWE-79 Description: The WPBakery Visual Composer WHMCS Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's void_wbwhmcse_laouts_search shortcode in all versions up to, and including, 1.0.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitra
tributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/cc4b52c6-1ac2-4f90-a776-c91232f5de34?source=cve - https://wordpress.org/plugins/void-visual-whmcs-element/#developers
CVE ID: CVE-2024-10173 State: PUBLISHED Published: 2024-10-20T05:00:05.689Z Last Updated: 2024-10-21T18:00:56.746Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: didi Products: DDMQ Problem Types: CWE-287 Description: A vulnerability has been found in didi DDMQ 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Console Module. The manipulation with the input /;login leads to improper authentication. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and
oduct takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.280957 - https://vuldb.com/?ctiid.280957 - https://vuldb.com/?submit.421516 - https://github.com/didi/DDMQ/issues/37 - https://github.com/didi/DDMQ/issues/37#issue-2577905007
CVE ID: CVE-2024-10174 State: PUBLISHED Published: 2024-11-13T03:20:08.239Z Last Updated: 2024-11-13T15:41:35.962Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: wedevs Products: WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts Problem Types: CWE-639 Description: The WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.6.13 via the 'Abstract_Permission' class due to missing validation on the 'user_id' user controlled key. This makes it possible for
e 'Abstract_Permission' class due to missing validation on the 'user_id' user controlled key. This makes it possible for unauthenticated attackers to spoof their identity to that of an administrator and access all of the plugins REST routes. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/dea2d045-d3b4-4b55-8b4f-5baa82a18834?source=cve - https://plugins.trac.wordpress.org/browser/wedevs-project-manager/trunk/core/Permissions/Abstract_Permission.php#L32 - https://plugins.trac.wordpress.org/changeset/3185807/wedevs-project-manager/trunk/core/Permissions/Abstract_Permission.php
CVE ID: CVE-2024-10175 State: PUBLISHED Published: 2024-11-27T06:41:28.887Z Last Updated: 2024-11-27T12:01:12.279Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: labibahmed42 Products: Pricing Tables For WPBakery Page Builder (formerly Visual Composer) Problem Types: CWE-79 Description: The Pricing Tables For WPBakery Page Builder (formerly Visual Composer) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wdo_pricing_tables shortcode in all versions up to, and including, 1.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contri
ization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/79091bc0-d9b6-4a4b-926d-0447193d27c5?source=cve - https://wordpress.org/plugins/pricing-tables-for-visual-composer/#developers