Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-32518 State: PUBLISHED Published: 2024-04-17T07:36:53.355Z Last Updated: 2024-08-02T02:13:39.123Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Pepro Dev. Group Products: PeproDev Ultimate Invoice Problem Types: CWE-862 Description: Missing Authorization vulnerability in Pepro Dev. Group PeproDev Ultimate Invoice.This issue affects PeproDev Ultimate Invoice: from n/a through 2.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/pepro-ultimate-invoice/wordpress-peprodev-ultimate-invoice-plugin-2-0-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-32519 State: PUBLISHED Published: 2024-04-17T07:34:52.520Z Last Updated: 2024-08-02T02:13:40.159Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: GutenGeek Products: GG Woo Feed for WooCommerce Problem Types: CWE-862 Description: Missing Authorization vulnerability in GutenGeek GG Woo Feed for WooCommerce.This issue affects GG Woo Feed for WooCommerce: from n/a through 1.2.6. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/gg-woo-feed/wordpress-gg-woo-feed-for-woocommerce-plugin-1-2-6-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-32520 State: PUBLISHED Published: 2024-04-17T07:33:02.858Z Last Updated: 2024-08-02T02:13:39.111Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: WPClever Products: WPC Grouped Product for WooCommerce Problem Types: CWE-862 Description: Missing Authorization vulnerability in WPClever WPC Grouped Product for WooCommerce.This issue affects WPC Grouped Product for WooCommerce: from n/a through 4.4.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/wpc-grouped-product/wordpress-wpc-grouped-product-for-woocommerce-plugin-4-4-2-broken-access-control-vulnerabili
ability/wpc-grouped-product/wordpress-wpc-grouped-product-for-woocommerce-plugin-4-4-2-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-32521 State: PUBLISHED Published: 2024-05-17T08:56:57.732Z Last Updated: 2024-08-02T02:13:40.334Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Highfivery LLC Products: Zero Spam Problem Types: CWE-602 Description: Client-Side Enforcement of Server-Side Security vulnerability in Highfivery LLC Zero Spam allows Removing Important Client Functionality.This issue affects Zero Spam: from n/a through 5.5.6. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/zero-spam/wordpress-zero-spam-for-wordpress-plugin-5-5-5-bypass-spam-protection-vulnerability?_s_id=cve
CVE ID: CVE-2024-32522 State: PUBLISHED Published: 2024-04-17T07:31:47.218Z Last Updated: 2024-08-02T02:13:39.392Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Jaed Mosharraf & Pluginbazar Team Products: Open Close WooCommerce Store Problem Types: CWE-862 Description: Missing Authorization vulnerability in Jaed Mosharraf & Pluginbazar Team Open Close WooCommerce Store.This issue affects Open Close WooCommerce Store: from n/a through 4.9.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/woc-open-close/wordpress-open-close-woocommerce-store-plugin-4-9-1-broken-access-co
atchstack.com/database/vulnerability/woc-open-close/wordpress-open-close-woocommerce-store-plugin-4-9-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-32523 State: PUBLISHED Published: 2024-05-17T08:58:28.466Z Last Updated: 2024-08-02T02:13:39.675Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:L) Vendors: EverPress Products: Mailster Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in EverPress Mailster allows PHP Local File Inclusion.This issue affects Mailster: from n/a through 4.0.6. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/mailster/wordpress-mailster-plugin-4-0-6-unauthenticated-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2024-32524 State: PUBLISHED Published: 2024-04-17T07:29:59.164Z Last Updated: 2024-08-02T02:13:40.314Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Nuggethon Products: Custom Order Statuses for WooCommerce Problem Types: CWE-862 Description: Missing Authorization vulnerability in Nuggethon Custom Order Statuses for WooCommerce.This issue affects Custom Order Statuses for WooCommerce: from n/a through 1.5.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/custom-order-statuses-for-woocommerce/wordpress-custom-order-statuses-for-woocommerce-plugin-1-5-2-broke
e/vulnerability/custom-order-statuses-for-woocommerce/wordpress-custom-order-statuses-for-woocommerce-plugin-1-5-2-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-32525 State: PUBLISHED Published: 2024-04-17T07:17:23.473Z Last Updated: 2024-08-02T02:13:40.117Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Theme My Login Products: Theme My Login Problem Types: CWE-862 Description: Missing Authorization vulnerability in Theme My Login.This issue affects Theme My Login: from n/a through 7.1.6. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/theme-my-login/wordpress-theme-my-login-plugin-7-1-6-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-32526 State: PUBLISHED Published: 2024-04-17T09:48:05.714Z Last Updated: 2024-08-02T02:13:39.288Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Flector Products: Easy Textillate Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Flector Easy Textillate allows Stored XSS.This issue affects Easy Textillate: from n/a through 2.02. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/easy-textillate/wordpress-easy-textillate-plugin-2-02-cross-site-scripting-xss-vulnerability?_s
m/database/vulnerability/easy-textillate/wordpress-easy-textillate-plugin-2-02-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-32527 State: PUBLISHED Published: 2024-04-17T09:46:26.070Z Last Updated: 2024-08-02T02:13:39.827Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Jotform Products: Jotform Online Forms Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jotform Jotform Online Forms allows Stored XSS.This issue affects Jotform Online Forms: from n/a through 1.3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/embed-form/wordpress-jotform-online-forms-plugin-1-3-1-cross-site-scripting-xss
://patchstack.com/database/vulnerability/embed-form/wordpress-jotform-online-forms-plugin-1-3-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-32528 State: PUBLISHED Published: 2024-04-17T09:44:17.583Z Last Updated: 2024-08-02T02:13:39.450Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Seerox Products: WP Dynamic Keywords Injector Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Seerox WP Dynamic Keywords Injector allows Reflected XSS.This issue affects WP Dynamic Keywords Injector: from n/a through 2.3.18. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/wp-dynamic-keywords-injector/wordpress-wp-dynamic-keywo
ner: References: - https://patchstack.com/database/vulnerability/wp-dynamic-keywords-injector/wordpress-wp-dynamic-keywords-injector-plugin-2-3-18-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-32529 State: PUBLISHED Published: 2024-04-17T09:35:19.813Z Last Updated: 2024-08-02T02:13:39.178Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Momoyoga Products: Yoga Schedule Momoyoga Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Momoyoga Yoga Schedule Momoyoga allows Stored XSS.This issue affects Yoga Schedule Momoyoga: from n/a through 2.7.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/momoyoga-integration/wordpress-yoga-schedule-momoyoga-plugin-2-7-0-cros
- https://patchstack.com/database/vulnerability/momoyoga-integration/wordpress-yoga-schedule-momoyoga-plugin-2-7-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-32530 State: PUBLISHED Published: 2024-04-17T09:32:48.579Z Last Updated: 2024-08-02T02:13:40.239Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: PressTigers Products: Simple Testimonials Showcase Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PressTigers Simple Testimonials Showcase allows Stored XSS.This issue affects Simple Testimonials Showcase: from n/a through 1.1.5. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/simple-testimonials-showcase/wordpress-simple-t
m Container: References: - https://patchstack.com/database/vulnerability/simple-testimonials-showcase/wordpress-simple-testimonials-showcase-plugin-1-1-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-32531 State: PUBLISHED Published: 2024-04-17T09:31:11.094Z Last Updated: 2024-08-02T02:13:39.791Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Everest themes Products: GuCherry Blog Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Everest themes GuCherry Blog allows Reflected XSS.This issue affects GuCherry Blog: from n/a through 1.1.8. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/gucherry-blog/wordpress-gucherry-blog-theme-1-1-8-reflected-cross-site-scripting-xss-
chstack.com/database/vulnerability/gucherry-blog/wordpress-gucherry-blog-theme-1-1-8-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-32532 State: PUBLISHED Published: 2024-04-17T07:13:52.400Z Last Updated: 2024-08-02T02:13:39.769Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: SiteGround Products: Speed Optimizer Problem Types: CWE-862 Description: Missing Authorization vulnerability in SiteGround Speed Optimizer.This issue affects Speed Optimizer: from n/a through 7.4.6. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/sg-cachepress/wordpress-speed-optimizer-plugin-7-4-6-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-32533 State: PUBLISHED Published: 2024-04-17T08:45:16.631Z Last Updated: 2024-08-02T02:13:40.102Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Peter Shaw Products: LH Add Media From Url Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Peter Shaw LH Add Media From Url allows Reflected XSS.This issue affects LH Add Media From Url: from n/a through 1.22. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/lh-add-media-from-url/wordpress-lh-add-media-from-url-plugin-1-22-refl
: - https://patchstack.com/database/vulnerability/lh-add-media-from-url/wordpress-lh-add-media-from-url-plugin-1-22-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-32534 State: PUBLISHED Published: 2024-04-17T08:44:16.095Z Last Updated: 2024-08-02T02:13:39.090Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: 10Web Form Builder Team Products: Form Maker by 10Web Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 10Web Form Builder Team Form Maker by 10Web allows Stored XSS.This issue affects Form Maker by 10Web: from n/a through 1.15.23. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/form-maker/wordpress-form-maker-plugin-1-15-23-c
Container: References: - https://patchstack.com/database/vulnerability/form-maker/wordpress-form-maker-plugin-1-15-23-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-32535 State: PUBLISHED Published: 2024-04-17T08:43:04.708Z Last Updated: 2024-08-08T16:11:33.663Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Jojaba Products: Access Category Password Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jojaba Access Category Password allows Reflected XSS.This issue affects Access Category Password: from n/a through 1.5.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/access-category-password/wordpress-access-category-password-plugin-1
es: - https://patchstack.com/database/vulnerability/access-category-password/wordpress-access-category-password-plugin-1-5-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-32536 State: PUBLISHED Published: 2024-04-17T08:41:55.519Z Last Updated: 2024-08-02T02:13:39.843Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Trade Pips Products: WP TradingView Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Trade Pips WP TradingView allows Stored XSS.This issue affects WP TradingView: from n/a through 1.7. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/wp-tradingview/wordpress-wp-tradingview-plugin-1-7-cross-site-scripting-xss-vulnerability?_s_
com/database/vulnerability/wp-tradingview/wordpress-wp-tradingview-plugin-1-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-32538 State: PUBLISHED Published: 2024-04-17T08:35:26.837Z Last Updated: 2024-08-02T02:13:40.143Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Joshua Eldridge Products: Easy CountDowner Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Joshua Eldridge Easy CountDowner allows Stored XSS.This issue affects Easy CountDowner: from n/a through 1.0.8. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/easy-countdowner/wordpress-easy-countdowner-plugin-1-0-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-32539 State: PUBLISHED Published: 2024-04-17T08:32:51.096Z Last Updated: 2024-08-02T02:13:39.838Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: JoomUnited Products: WP File Download Light Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JoomUnited WP File Download Light allows Stored XSS.This issue affects WP File Download Light: from n/a through 1.3.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/wp-file-download-light/wordpress-wp-file-download-light-plugin-1-3-
ces: - https://patchstack.com/database/vulnerability/wp-file-download-light/wordpress-wp-file-download-light-plugin-1-3-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-32540 State: PUBLISHED Published: 2024-04-17T08:30:16.574Z Last Updated: 2024-08-02T02:13:39.859Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Web357 Products: Fixed HTML Toolbar Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Web357 Fixed HTML Toolbar allows Stored XSS.This issue affects Fixed HTML Toolbar: from n/a through 1.0.7. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/fixed-html-toolbar/wordpress-fixed-html-toolbar-plugin-1-0-7-cross-site-scripting-xss-v
stack.com/database/vulnerability/fixed-html-toolbar/wordpress-fixed-html-toolbar-plugin-1-0-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-32541 State: PUBLISHED Published: 2024-04-17T08:29:05.344Z Last Updated: 2024-08-02T02:13:39.844Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Tobias Battenberg Products: WP-Cufon Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tobias Battenberg WP-Cufon allows Stored XSS.This issue affects WP-Cufon: from n/a through 1.6.10. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/wp-cufon/wordpress-wp-cufon-plugin-1-6-10-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-32542 State: PUBLISHED Published: 2024-04-17T08:27:37.910Z Last Updated: 2024-08-02T02:13:40.391Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Organic Themes Products: Bulk Block Converter Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Organic Themes Bulk Block Converter allows Reflected XSS.This issue affects Bulk Block Converter: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/bulk-block-converter/wordpress-bulk-block-converter-plugin-1-0-1
rences: - https://patchstack.com/database/vulnerability/bulk-block-converter/wordpress-bulk-block-converter-plugin-1-0-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-32543 State: PUBLISHED Published: 2024-04-17T08:26:11.410Z Last Updated: 2024-08-02T02:13:40.330Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Minoji Products: MJ Update History Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Minoji MJ Update History allows Reflected XSS.This issue affects MJ Update History: from n/a through 1.0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/mj-update-history/wordpress-mj-update-history-plugin-1-0-4-reflected-cross-site-scripting
ack.com/database/vulnerability/mj-update-history/wordpress-mj-update-history-plugin-1-0-4-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-32544 State: PUBLISHED Published: 2024-04-17T08:23:55.685Z Last Updated: 2024-08-02T02:13:40.060Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Netgsm Products: Netgsm Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Netgsm allows Reflected XSS.This issue affects Netgsm: from n/a through 2.8. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/netgsm/wordpress-netgsm-plugin-2-8-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-32545 State: PUBLISHED Published: 2024-04-17T08:22:39.745Z Last Updated: 2024-08-02T02:13:39.995Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Canva Products: Canva – Design beautiful blog graphics Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Canva Canva – Design beautiful blog graphics allows Reflected XSS.This issue affects Canva – Design beautiful blog graphics: from n/a through 1.2.4. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/canva/wordpress-canva-design
hment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/canva/wordpress-canva-design-beautiful-blog-graphics-plugin-1-2-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-32546 State: PUBLISHED Published: 2024-04-17T08:21:30.969Z Last Updated: 2024-08-02T02:13:39.731Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Adam Bowen Products: Tax Rate Upload Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Adam Bowen Tax Rate Upload allows Reflected XSS.This issue affects Tax Rate Upload: from n/a through 2.4.5. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/tax-rate-upload/wordpress-tax-rate-upload-plugin-2-4-5-cross-site-scripting-xss-vulnera
stack.com/database/vulnerability/tax-rate-upload/wordpress-tax-rate-upload-plugin-2-4-5-cross-site-scripting-xss-vulnerability-2?_s_id=cve
CVE ID: CVE-2024-32547 State: PUBLISHED Published: 2024-04-17T08:12:19.629Z Last Updated: 2024-08-02T02:13:39.670Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Max Bond Products: Code Insert Manager (Q2W3 Inc Manager) Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Max Bond Code Insert Manager (Q2W3 Inc Manager) allows Reflected XSS.This issue affects Code Insert Manager (Q2W3 Inc Manager): from n/a through 2.5.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/q2w3-inc-manager/wor
Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/q2w3-inc-manager/wordpress-code-insert-manager-q2w3-inc-manager-plugin-2-5-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-32548 State: PUBLISHED Published: 2024-04-17T08:10:57.788Z Last Updated: 2024-08-02T02:13:40.098Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Hideki Tanaka Products: What's New Generator Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hideki Tanaka What's New Generator allows Stored XSS.This issue affects What's New Generator: from n/a through 2.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/whats-new-genarator/wordpress-what-s-new-generator-plugin-2-0-2-cro
ces: - https://patchstack.com/database/vulnerability/whats-new-genarator/wordpress-what-s-new-generator-plugin-2-0-2-cross-site-scripting-xss-vulnerability?_s_id=cve