Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-24728 State: PUBLISHED Published: 2021-09-13T17:56:44 Last Updated: 2024-08-03T19:42:16.634Z Vendors: Unknown Products: Membership & Content Restriction – Paid Member Subscriptions Problem Types: CWE-89 Description: The Membership & Content Restriction – Paid Member Subscriptions WordPress plugin before 2.4.2 did not sanitise, validate or escape its order and orderby parameters before using them in SQL statement, leading to Authenticated SQL Injections in the Members and Payments pages. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=29172 - https://wpscan.com/vulnerability
//www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=29172 - https://wpscan.com/vulnerability/2277d335-1c90-4fa8-b0bf-25873c039c38 - https://plugins.trac.wordpress.org/changeset/2566399/paid-member-subscriptions
CVE ID: CVE-2021-24729 State: PUBLISHED Published: 2021-11-23T19:16:10 Last Updated: 2024-08-03T19:42:16.637Z Vendors: Unknown Products: Logo Showcase with Slick Slider – Logo Carousel, Logo Slider & Logo Grid Problem Types: CWE-79 Description: The Logo Showcase with Slick Slider WordPress plugin before 1.2.4 does not sanitise the Grid Settings, which could allow users with a role as low as Author to perform stored Cross-Site Scripting attacks via post metadata of Grid logo showcase. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/5d70818e-730d-40c9-a2db-652052a5fd5c
CVE ID: CVE-2021-24730 State: PUBLISHED Published: 2022-02-28T09:06:07 Last Updated: 2024-08-03T19:42:16.860Z Vendors: Unknown Products: Logo Showcase with Slick Slider – Logo Carousel, Logo Slider & Logo Grid Problem Types: CWE-862, CWE-352 Description: The Logo Showcase with Slick Slider WordPress plugin before 1.2.5 does not have CSRF and authorisation checks in the lswss_save_attachment_data AJAX action, allowing any authenticated users, such as Subscriber, to change title, description, alt text, and URL of arbitrary uploaded media. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/d5534ff9-c4af-46b7-8852-0f3dfd644855
CVE ID: CVE-2021-24731 State: PUBLISHED Published: 2021-11-08T17:35:16 Last Updated: 2024-08-03T19:42:16.658Z Vendors: Unknown Products: Registration Forms – User profile, Content Restriction, Spam Protection, Payment Gateways, Invitation Codes Problem Types: CWE-89 Description: The Registration Forms – User profile, Content Restriction, Spam Protection, Payment Gateways, Invitation Codes WordPress plugin before 3.7.1.6 does not properly escape user data before using it in a SQL statement in the wp-json/pie/v1/login REST API endpoint, leading to an SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/6bed00e4-b363-43b8-a392-d068d342
Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/6bed00e4-b363-43b8-a392-d068d342151a
CVE ID: CVE-2021-24732 State: PUBLISHED Published: 2021-10-18T13:46:01 Last Updated: 2024-08-03T19:42:16.680Z Vendors: Unknown Products: PDF Flipbook, 3D Flipbook WordPress – DearFlip Problem Types: CWE-79 Description: The PDF Flipbook, 3D Flipbook WordPress – DearFlip WordPress plugin before 1.7.10 does not escape the class attribute of its shortcode before outputting it back in an attribute, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/9425a9b2-e9b8-41f5-a3ca-623b6da0297c
CVE ID: CVE-2021-24733 State: PUBLISHED Published: 2022-01-24T08:00:49 Last Updated: 2024-08-03T19:42:16.560Z Vendors: Unknown Products: WP Post Page Clone Problem Types: CWE-863 Description: The WP Post Page Clone WordPress plugin before 1.2 allows users with a role as low as Contributor to clone and view other users' draft and password-protected posts which they cannot view normally. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/a7fa5896-5a1d-44c6-985c-e4abcc53da0e
CVE ID: CVE-2021-24734 State: PUBLISHED Published: 2021-10-18T13:46:03 Last Updated: 2024-08-03T19:42:16.654Z Vendors: Unknown Products: Compact WP Audio Player Problem Types: CWE-79 Description: The Compact WP Audio Player WordPress plugin before 1.9.7 does not escape some of its shortcodes attributes, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/fb007191-b008-4d19-b896-55fbee2a3cf7
CVE ID: CVE-2021-24735 State: PUBLISHED Published: 2021-10-18T13:46:04 Last Updated: 2024-08-03T19:42:16.608Z Vendors: Unknown Products: Compact WP Audio Player Problem Types: CWE-352 Description: The Compact WP Audio Player WordPress plugin before 1.9.7 does not implement nonce checks, which could allow attackers to make a logged in admin change the "Disable Simultaneous Play" setting via a CSRF attack. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/dcbcf6e7-e5b3-498b-9f5e-7896d309441f
CVE ID: CVE-2021-24736 State: PUBLISHED Published: 2021-10-18T13:46:06 Last Updated: 2024-08-03T19:42:16.864Z Vendors: Unknown Products: Easy Download Manager and File Sharing Plugin with frontend file upload – a better Media Library — Shared Files Problem Types: CWE-79 Description: The Easy Download Manager and File Sharing Plugin with frontend file upload – a better Media Library — Shared Files WordPress plugin before 1.6.57 does not sanitise and escape some of its settings before outputting them in attributes, which could lead to Stored Cross-Site Scripting issues. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/d72275bd-0c66-4b2a-940d-d52
ional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/d72275bd-0c66-4b2a-940d-d5256b5426cc
CVE ID: CVE-2021-24737 State: PUBLISHED Published: 2021-10-11T10:45:51 Last Updated: 2024-08-03T19:42:16.541Z Vendors: Unknown Products: Comments – wpDiscuz Problem Types: CWE-79 Description: The Comments – wpDiscuz WordPress plugin through 7.3.0 does not properly sanitise or escape the Follow and Unfollow messages before outputting them in the page, which could allow high privilege users to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/f51a350c-c46d-4d52-b787-762283625d0b
CVE ID: CVE-2021-24738 State: PUBLISHED Published: 2021-12-21T08:45:26 Last Updated: 2024-08-03T19:42:16.870Z Vendors: Unknown Products: Logo Carousel – Logo Slider, Logo Showcase, and Clients Logo Gallery Problem Types: CWE-79 Description: The Logo Carousel WordPress plugin before 3.4.2 does not validate and escape the "Logo Margin" carousel option, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/2c3d8c21-ecd4-41ba-8183-2ecbd9a3df25
CVE ID: CVE-2021-24739 State: PUBLISHED Published: 2021-12-21T08:45:28 Last Updated: 2024-08-03T19:42:16.595Z Vendors: Unknown Products: Logo Carousel – Logo Slider, Logo Showcase, and Clients Logo Gallery Problem Types: CWE-639 Description: The Logo Carousel WordPress plugin before 3.4.2 allows users with a role as low as Contributor to duplicate and view arbitrary private posts made by other users via the Carousel Duplication feature Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/2afadc76-93ad-47e1-a224-e442ac41cbce
CVE ID: CVE-2021-24740 State: PUBLISHED Published: 2021-10-18T13:46:07 Last Updated: 2024-08-03T19:42:16.648Z Vendors: Unknown Products: Tutor LMS – eLearning and online course solution Problem Types: CWE-79 Description: The Tutor LMS WordPress plugin before 1.9.9 does not escape some of its settings before outputting them in attributes, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/e6cf694d-c4ae-4b91-97c0-a6bdbafc7d60
CVE ID: CVE-2021-24741 State: PUBLISHED Published: 2021-09-20T10:06:51 Last Updated: 2024-08-03T19:42:16.654Z Vendors: Unknown Products: Support Board Problem Types: CWE-89 Description: The Support Board WordPress plugin before 3.3.4 does not escape multiple POST parameters (such as status_code, department, user_id, conversation_id, conversation_status_code, and recipient_id) before using them in SQL statements, leading to SQL injections which are exploitable by unauthenticated users. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40lijohnjefferson/multiple-sql-injection-unauthenticated-in-support-board-v-3-3-3-3e9b4214a4f9 - https://wpscan.com/vulnerabi
ohnjefferson/multiple-sql-injection-unauthenticated-in-support-board-v-3-3-3-3e9b4214a4f9 - https://wpscan.com/vulnerability/ccf293ec-7607-412b-b662-5e237b8690ca - https://board.support/changes
CVE ID: CVE-2021-24742 State: PUBLISHED Published: 2021-11-01T08:46:15 Last Updated: 2024-08-03T19:42:16.621Z Vendors: Unknown Products: Logo Slider and Showcase Problem Types: CWE-863 Description: The Logo Slider and Showcase WordPress plugin before 1.3.37 allows Editor users to update the plugin's settings via the rtWLSSettings AJAX action because it uses a nonce for authorisation instead of a capability check. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/8dfc86e4-56a0-4e30-9050-cf3f328ff993
CVE ID: CVE-2021-24743 State: PUBLISHED Published: 2021-10-18T13:46:09 Last Updated: 2024-08-03T19:42:16.800Z Vendors: Unknown Products: Podcast Subscribe Buttons Problem Types: CWE-79 Description: The Podcast Subscribe Buttons WordPress plugin before 1.4.2 allows users with any role capable of editing or adding posts to perform stored XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/998395f0-f176-45b9-baf7-b50d30538c7d
CVE ID: CVE-2021-24744 State: PUBLISHED Published: 2021-10-25T13:20:51 Last Updated: 2024-08-03T19:42:16.685Z Vendors: Unknown Products: WordPress Contact Forms by Cimatti Problem Types: CWE-79 Description: The WordPress Contact Forms by Cimatti WordPress plugin before 1.4.12 does not sanitise and escape the Form Title before outputting it in some admin pages. which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/702a4283-1fd6-4186-9db7-6ad387d714ea
CVE ID: CVE-2021-24745 State: PUBLISHED Published: 2021-11-29T08:25:29 Last Updated: 2024-08-03T19:42:16.657Z Vendors: Unknown Products: About Author Box Problem Types: CWE-79 Description: The About Author Box WordPress plugin before 1.0.2 does not sanitise and escape the Social Profiles field values before outputting them in attributes, which could allow user with a role as low as contributor to perform Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/a965aeca-d8f9-4070-aa0d-9c9b95493dda
CVE ID: CVE-2021-24746 State: PUBLISHED Published: 2022-03-28T17:20:47 Last Updated: 2024-08-03T19:42:16.645Z Vendors: Unknown Products: Social Sharing Plugin – Sassy Social Share Problem Types: CWE-79 Description: The Social Sharing Plugin WordPress plugin before 3.3.40 does not escape the viewed post URL before outputting it back in onclick attributes when the "Enable 'More' icon" option is enabled (which is the default setting), leading to a Reflected Cross-Site Scripting issue. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/99f4fb32-e312-4059-adaf-f4cbaa92d4fa
CVE ID: CVE-2021-24747 State: PUBLISHED Published: 2021-12-13T10:40:45 Last Updated: 2024-08-03T19:42:16.686Z Vendors: Unknown Products: SEO Booster Problem Types: CWE-89 Description: The SEO Booster WordPress plugin before 3.8 allows for authenticated SQL injection via the "fn_my_ajaxified_dataloader_ajax" AJAX request as the $_REQUEST['order'][0]['dir'] parameter is not properly escaped leading to blind and error-based SQL injections. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/40849d93-8949-4bd0-b60e-c0330b385fea - https://plugins.trac.wordpress.org/changeset/2637115
CVE ID: CVE-2021-24748 State: PUBLISHED Published: 2021-11-29T08:25:31 Last Updated: 2024-08-03T19:42:16.642Z Vendors: Unknown Products: Email Before Download Problem Types: CWE-89 Description: The Email Before Download WordPress plugin before 6.8 does not properly validate and escape the order and orderby GET parameters before using them in SQL statements, leading to authenticated SQL injection issues Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/a8625b84-337d-4c4d-a698-73e59d1f8ee1
CVE ID: CVE-2021-24749 State: PUBLISHED Published: 2021-11-29T08:25:32 Last Updated: 2024-08-03T19:42:16.664Z Vendors: Unknown Products: URL Shortify – Simple, Powerful and Easy URL Shortener Plugin For WordPress Problem Types: CWE-352 Description: The URL Shortify WordPress plugin before 1.5.1 does not have CSRF check in place when bulk-deleting links or groups, which could allow attackers to make a logged in admin delete arbitrary link and group via a CSRF attack. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/4b4e417d-0ae2-4c3c-81e6-4dcf39eb5697
CVE ID: CVE-2021-24750 State: PUBLISHED Published: 2021-12-21T08:45:29 Last Updated: 2024-08-03T19:42:16.622Z Vendors: Unknown Products: WP Visitor Statistics (Real Time Traffic) Problem Types: CWE-89 Description: The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 4.8 does not properly sanitise and escape the refUrl in the refDetails AJAX action, available to any authenticated user, which could allow users with a role as low as subscriber to perform SQL injection attacks Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/7528aded-b8c9-4833-89d6-9cd7df3620de - https://plugins.trac.wordpress.org/changeset/2622268 - http://packet
ulnerability/7528aded-b8c9-4833-89d6-9cd7df3620de - https://plugins.trac.wordpress.org/changeset/2622268 - http://packetstormsecurity.com/files/165433/WordPress-WP-Visitor-Statistics-4.7-SQL-Injection.html
CVE ID: CVE-2021-24751 State: PUBLISHED Published: 2021-11-29T08:25:33 Last Updated: 2024-08-03T19:42:16.566Z Vendors: Unknown Products: GenerateBlocks Problem Types: CWE-79 Description: The GenerateBlocks WordPress plugin before 1.4.0 does not validate the generateblocks/container block's tagName attribute, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/e0131980-d2d3-4780-8a68-a81ee8c90b7a
CVE ID: CVE-2021-24752 State: PUBLISHED Published: 2021-10-18T13:46:10 Last Updated: 2024-08-03T19:42:16.684Z Vendors: CatchThemes Products: Essential Widgets, To Top, Header Enhancement, Generate Child Theme, Essential Content Types, Catch Web Tools, Catch Under Construction, Catch Themes Demo Import, Catch Sticky Menu, Catch Scroll Progress Bar, Social Gallery and Widget, Catch Infinite Scroll, Catch Import Export, Catch Gallery, Catch Duplicate Switcher, Catch Breadcrumb, Catch IDs Problem Types: CWE-284 Description: Multiple Plugins from the CatchThemes vendor do not perform capability and CSRF checks in the ctp_switch AJAX action, which could allow any authenticated users, such as Subsc
rform capability and CSRF checks in the ctp_switch AJAX action, which could allow any authenticated users, such as Subscriber to change the Essential Widgets WordPress plugin before 1.9, To Top WordPress plugin before 2.3, Header Enhancement WordPress plugin before 1.5, Generate Child Theme WordPress plugin before 1.6, Essential Content Types WordPress plugin before 1.9, Catch Web Tools WordPress plugin before 2.7, Catch Under Construction WordPress plugin before 1.4, Catch Themes Demo Import WordPress plugin before 1.6, Catch Sticky Menu WordPress plugin before 1.7, Catch Scroll Progress Bar WordPress plugin before 1.6, Social Gallery and Widget WordPress plugin before 2.3, Catch Infinite S
Scroll Progress Bar WordPress plugin before 1.6, Social Gallery and Widget WordPress plugin before 2.3, Catch Infinite Scroll WordPress plugin before 1.9, Catch Import Export WordPress plugin before 1.9, Catch Gallery WordPress plugin before 1.7, Catch Duplicate Switcher WordPress plugin before 1.6, Catch Breadcrumb WordPress plugin before 1.7, Catch IDs WordPress plugin before 2.4's configurations. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/181a729e-fffe-457c-9e8d-a4343fd2e630
CVE ID: CVE-2021-24753 State: PUBLISHED Published: 2021-12-27T10:33:18 Last Updated: 2024-08-03T19:42:16.632Z Vendors: Unknown Products: Rich Reviews by Starfish Problem Types: CWE-89 Description: The Rich Reviews by Starfish WordPress plugin before 1.9.6 does not properly validate the orderby GET parameter of the pending reviews page before using it in a SQL statement, leading to an authenticated SQL injection issue Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/be7b102f-3982-46bd-a79c-203498f7c820 - https://plugins.trac.wordpress.org/changeset/2624882/
CVE ID: CVE-2021-24754 State: PUBLISHED Published: 2021-10-18T13:46:12 Last Updated: 2024-08-03T19:42:16.729Z Vendors: Unknown Products: MainWP Child Reports Problem Types: CWE-89 Description: The MainWP Child Reports WordPress plugin before 2.0.8 does not validate or sanitise the order parameter before using it in a SQL statement in the admin dashboard, leading to an SQL injection issue Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/132118aa-4b72-4eaa-8aa1-6ad7b0c7f495
CVE ID: CVE-2021-24755 State: PUBLISHED Published: 2021-11-29T08:25:35 Last Updated: 2024-08-03T19:42:16.590Z Vendors: Unknown Products: myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin Problem Types: CWE-89 Description: The myCred WordPress plugin before 2.3 does not validate or escape the fields parameter before using it in a SQL statement, leading to an SQL injection exploitable by any authenticated user Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/01419d03-54d6-413d-9a67-64c63c26d741
CVE ID: CVE-2021-24756 State: PUBLISHED Published: 2021-12-13T10:40:47 Last Updated: 2024-08-03T19:42:16.815Z Vendors: Unknown Products: WP System Log Problem Types: CWE-79 Description: The WP System Log WordPress plugin before 1.0.21 does not sanitise, validate and escape the IP address retrieved from login requests before outputting them in the admin dashboard, which could allow unauthenticated attacker to perform Cross-Site Scripting attacks against admins viewing the logs. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/0cea0717-8f54-4f1c-b3ee-aff7dd91bf59
CVE ID: CVE-2021-24757 State: PUBLISHED Published: 2021-11-01T08:46:17 Last Updated: 2024-08-03T19:42:16.595Z Vendors: Unknown Products: Stylish Price List Problem Types: CWE-863 Description: The Stylish Price List WordPress plugin before 6.9.0 does not perform capability checks in its spl_upload_ser_img AJAX action (available to both unauthenticated and authenticated users), which could allow unauthenticated users to upload images. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/352a9e05-2d5f-4bf7-8da9-85621fb15d91
CVE ID: CVE-2021-24758 State: PUBLISHED Published: 2021-11-17T10:15:34 Last Updated: 2024-08-03T19:42:16.879Z Vendors: Unknown Products: Email Log Problem Types: CWE-89 Description: The Email Log WordPress plugin before 2.4.7 does not properly validate, sanitise and escape the "orderby" and "order" GET parameters before using them in SQL statement in the admin dashboard, leading to SQL injections Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/8dd70db4-5845-440d-8b1d-012738abaac2
CVE ID: CVE-2021-24759 State: PUBLISHED Published: 2021-12-06T15:55:26 Last Updated: 2024-08-03T19:42:16.873Z Vendors: Unknown Products: PDF.js Viewer Problem Types: CWE-79 Description: The PDF.js Viewer WordPress plugin before 2.0.2 does not escape some of its shortcode and Gutenberg Block attributes, which could allow users with a role as low as Contributor to to perform Cross-Site Scripting attacks Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/38274ef2-5100-4669-9544-a42346b6727d
CVE ID: CVE-2021-24760 State: PUBLISHED Published: 2021-10-18T13:46:13 Last Updated: 2024-08-03T19:42:16.874Z Vendors: Unknown Products: Gutenberg PDF Viewer Block Problem Types: CWE-79 Description: The Gutenberg PDF Viewer Block WordPress plugin before 1.0.1 does not sanitise and escape its block, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/aebf821f-1724-4e4c-8d42-5a94e509d271
CVE ID: CVE-2021-24761 State: PUBLISHED Published: 2022-02-01T12:21:22 Last Updated: 2024-08-03T19:42:16.647Z Vendors: Unknown Products: Error Log Viewer by BestWebSoft Problem Types: CWE-352, CWE-22 Description: The Error Log Viewer WordPress plugin before 1.1.2 does not perform nonce check when deleting a log file and does not have path traversal prevention, which could allow attackers to make a logged in admin delete arbitrary text files on the web server. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/c14e1ba6-fc00-4150-b541-0d6740fee4d2
CVE ID: CVE-2021-24762 State: PUBLISHED Published: 2022-02-01T12:21:23 Last Updated: 2024-08-03T19:42:17.219Z Vendors: Unknown Products: Perfect Survey Problem Types: CWE-89 Description: The Perfect Survey WordPress plugin before 1.5.2 does not validate and escape the question_id GET parameter before using it in a SQL statement in the get_question AJAX action, allowing unauthenticated users to perform SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/c1620905-7c31-4e62-80f5-1d9635be11ad - http://packetstormsecurity.com/files/166072/WordPress-Perfect-Survey-1.5.1-SQL-Injection.html
CVE ID: CVE-2021-24763 State: PUBLISHED Published: 2022-02-01T12:21:23 Last Updated: 2024-08-03T19:42:17.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Perfect Survey WordPress plugin before 1.5.2 does not have proper authorisation nor CSRF checks in the save_global_setting AJAX action, allowing unauthenticated users to edit surveys and modify settings. Given the lack of sanitisation and escaping in the settings, this could also lead to a Stored Cross-Site Scripting issue which will be executed in the context of a user viewing any survey Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/c73c7694-1cee-4f26-a425-9c336adce52b