Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-33937 State: PUBLISHED Published: 2024-05-03T08:18:16.602Z Last Updated: 2024-08-02T02:42:59.871Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Nico Martin Products: Progressive WordPress (PWA) Problem Types: CWE-862 Description: Missing Authorization vulnerability in Nico Martin Progressive WordPress (PWA).This issue affects Progressive WordPress (PWA): from n/a through 2.1.13. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/progressive-wp/wordpress-progressive-wordpress-pwa-plugin-2-1-13-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-33938 State: PUBLISHED Published: 2024-05-02T11:16:20.912Z Last Updated: 2024-08-02T02:42:59.691Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: codename065 Products: Sliding Widgets Problem Types: CWE-862 Description: Missing Authorization vulnerability in codename065 Sliding Widgets allows Cross-Site Scripting (XSS).This issue affects Sliding Widgets: from n/a through 1.5.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/sliding-widgets/wordpress-sliding-widgets-plugin-1-5-0-broken-access-control-to-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-33939 State: PUBLISHED Published: 2025-05-19T15:55:18.574Z Last Updated: 2025-05-19T16:58:29.630Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Masteriyo Products: Masteriyo - LMS Problem Types: CWE-288 Description: Authentication Bypass Using an Alternate Path or Channel vulnerability in Masteriyo Masteriyo - LMS. Unauth access to course progress.This issue affects Masteriyo - LMS: from n/a through 1.7.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/learning-management-system/vulnerability/wordpress-lms-by-masteriyo-plugin-1-7-3-broken-authentication-vulnerability?_s_id=
rning-management-system/vulnerability/wordpress-lms-by-masteriyo-plugin-1-7-3-broken-authentication-vulnerability?_s_id=cve
CVE ID: CVE-2024-33940 State: PUBLISHED Published: 2024-05-03T07:00:13.764Z Last Updated: 2024-08-02T02:42:59.801Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Ashan Jay Products: EventON Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ashan Jay EventON allows Stored XSS.This issue affects EventON: from n/a through 2.2.14. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/eventon-lite/wordpress-eventon-plugin-2-2-14-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-33941 State: PUBLISHED Published: 2024-05-03T07:26:32.006Z Last Updated: 2024-11-01T18:29:31.073Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Avirtum Products: iPanorama 360 WordPress Virtual Tour Builder Problem Types: CWE-862 Description: Missing Authorization vulnerability in Avirtum iPanorama 360 WordPress Virtual Tour Builder.This issue affects iPanorama 360 WordPress Virtual Tour Builder: from n/a through 1.8.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/ipanorama-360-virtual-tour-builder-lite/wordpress-ipanorama-360-plugin-1-8-1-broken-acc
stack.com/database/vulnerability/ipanorama-360-virtual-tour-builder-lite/wordpress-ipanorama-360-plugin-1-8-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-33942 State: PUBLISHED Published: 2024-05-02T11:29:23.397Z Last Updated: 2024-08-02T02:42:59.760Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Eric Alli Products: Google Typography Problem Types: CWE-862 Description: Missing Authorization vulnerability in Eric Alli Google Typography.This issue affects Google Typography: from n/a through 1.1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/google-typography/wordpress-google-typography-plugin-1-1-2-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-33943 State: PUBLISHED Published: 2024-05-03T06:58:57.632Z Last Updated: 2024-08-02T02:42:59.878Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: HappyKite Products: Ultimate Under Construction Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HappyKite Ultimate Under Construction allows Stored XSS.This issue affects Ultimate Under Construction: from n/a through 1.9.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/ultimate-under-construction/wordpress-ultimate-under-c
iner: References: - https://patchstack.com/database/vulnerability/ultimate-under-construction/wordpress-ultimate-under-construction-plugin-1-9-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-33944 State: PUBLISHED Published: 2024-05-02T11:26:48.951Z Last Updated: 2024-08-02T02:42:59.831Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Kestrel Products: WooCommerce AWeber Newsletter Subscription Problem Types: CWE-862 Description: Missing Authorization vulnerability in Kestrel WooCommerce AWeber Newsletter Subscription.This issue affects WooCommerce AWeber Newsletter Subscription: from n/a through 4.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/woocommerce-aweber-newsletter-subscription/wordpress-woocommerce-aweber-newsletter-subscripti
com/database/vulnerability/woocommerce-aweber-newsletter-subscription/wordpress-woocommerce-aweber-newsletter-subscription-plugin-4-0-1-unauthenticated-access-token-change-reset-vulnerability?_s_id=cve
CVE ID: CVE-2024-33945 State: PUBLISHED Published: 2024-05-03T06:57:12.312Z Last Updated: 2024-08-02T02:42:59.894Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: solverwp.com Products: Eleblog – Elementor Blog And Magazine Addons Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in solverwp.Com Eleblog – Elementor Blog And Magazine Addons allows Stored XSS.This issue affects Eleblog – Elementor Blog And Magazine Addons: from n/a through 1.8. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability
yst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/ele-blog/wordpress-eleblog-elementor-blog-and-magazine-addons-plugin-1-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-33946 State: PUBLISHED Published: 2024-05-03T06:55:24.874Z Last Updated: 2024-08-02T02:42:59.875Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: WPify s.r.o. Products: WPify Woo Czech Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPify s.R.O. WPify Woo Czech allows Reflected XSS.This issue affects WPify Woo Czech: from n/a through 4.0.10. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/wpify-woo/wordpress-wpify-woo-czech-plugin-4-0-10-cross-site-scripting-xss-vulnera
patchstack.com/database/vulnerability/wpify-woo/wordpress-wpify-woo-czech-plugin-4-0-10-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-33947 State: PUBLISHED Published: 2024-05-03T06:53:37.984Z Last Updated: 2024-08-02T02:42:59.765Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Metagauss Products: RegistrationMagic Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Metagauss RegistrationMagic allows Reflected XSS.This issue affects RegistrationMagic: from n/a through 5.3.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/custom-registration-form-builder-with-submission-manager/wordpress-registrationma
/patchstack.com/database/vulnerability/custom-registration-form-builder-with-submission-manager/wordpress-registrationmagic-plugin-5-3-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-33948 State: PUBLISHED Published: 2024-05-02T16:47:24.852Z Last Updated: 2024-08-02T02:42:59.771Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Pixel Industry Products: TweetScroll Widget Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pixel Industry TweetScroll Widget allows Stored XSS.This issue affects TweetScroll Widget: from n/a through 1.3.7. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/tweetscroll-widget/wordpress-tweetscroll-widget-plugin-1-3-7-cross-site
- https://patchstack.com/database/vulnerability/tweetscroll-widget/wordpress-tweetscroll-widget-plugin-1-3-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-33949 State: PUBLISHED Published: 2024-05-02T16:46:13.883Z Last Updated: 2024-08-02T02:42:59.766Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Vark Products: Min and Max Purchase for WooCommerce Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vark Min and Max Purchase for WooCommerce allows Stored XSS.This issue affects Min and Max Purchase for WooCommerce: from n/a through 2.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/min-and-max-purchase-for-woocommerce/
CVE Program Container: References: - https://patchstack.com/database/vulnerability/min-and-max-purchase-for-woocommerce/wordpress-min-and-max-purchase-for-woocommerce-plugin-2-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-33950 State: PUBLISHED Published: 2024-05-02T11:32:14.773Z Last Updated: 2024-08-02T02:42:59.921Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Aleksei Polechin (alek´) Products: Archives Calendar Widget Problem Types: CWE-79 Description: Administrator Cross Site Scripting (XSS) in Archives Calendar Widget <= 1.0.15 versions. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/archives-calendar-widget/wordpress-archives-calendar-widget-plugin-1-0-15-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-33951 State: PUBLISHED Published: 2024-05-02T11:31:02.564Z Last Updated: 2024-08-02T02:42:59.872Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Adam DeHaven Products: Perfect Pullquotes Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Adam DeHaven Perfect Pullquotes allows Stored XSS.This issue affects Perfect Pullquotes: from n/a through 1.7.5. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/perfect-pullquotes/wordpress-perfect-pullquotes-plugin-1-7-5-cross-site-scr
ttps://patchstack.com/database/vulnerability/perfect-pullquotes/wordpress-perfect-pullquotes-plugin-1-7-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-33952 State: PUBLISHED Published: 2024-05-02T11:22:46.789Z Last Updated: 2024-08-02T02:42:59.523Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Justin Tadlock Products: Unique Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Justin Tadlock Unique allows Stored XSS.This issue affects Unique: from n/a through 0.3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/unique/wordpress-unique-theme-0-3-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-33953 State: PUBLISHED Published: 2024-05-02T11:21:16.553Z Last Updated: 2024-08-02T02:42:59.802Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Matt van Andel Products: Adventure Journal Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Matt van Andel Adventure Journal allows Stored XSS.This issue affects Adventure Journal: from n/a through 1.7.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/adventure-journal/wordpress-adventure-journal-theme-1-7-2-cross-site-scrip
https://patchstack.com/database/vulnerability/adventure-journal/wordpress-adventure-journal-theme-1-7-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-33954 State: PUBLISHED Published: 2024-05-02T11:18:59.423Z Last Updated: 2024-08-02T02:42:59.744Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Atanas Yonkov Products: Pliska Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Atanas Yonkov Pliska allows Stored XSS.This issue affects Pliska: from n/a through 0.3.5. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/pliska/wordpress-pliska-theme-0-3-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-33955 State: PUBLISHED Published: 2024-05-02T11:17:56.921Z Last Updated: 2024-08-02T02:42:59.942Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Theme Freesia Products: Freesia Empire Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Theme Freesia Freesia Empire allows Stored XSS.This issue affects Freesia Empire: from n/a through 1.4.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/freesia-empire/wordpress-freesia-empire-theme-1-4-1-cross-site-scripting-xss-vulnerab
chstack.com/database/vulnerability/freesia-empire/wordpress-freesia-empire-theme-1-4-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-33956 State: PUBLISHED Published: 2024-05-02T11:24:41.603Z Last Updated: 2024-08-02T02:42:59.892Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: ThemeLocation Products: Custom WooCommerce Checkout Fields Editor Problem Types: CWE-862 Description: Missing Authorization vulnerability in ThemeLocation Custom WooCommerce Checkout Fields Editor.This issue affects Custom WooCommerce Checkout Fields Editor: from n/a through 1.3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/add-fields-to-checkout-page-woocommerce/wordpress-custom-woocommerce-checkout-fields
tchstack.com/database/vulnerability/add-fields-to-checkout-page-woocommerce/wordpress-custom-woocommerce-checkout-fields-editor-plugin-1-3-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-33957 State: PUBLISHED Published: 2024-08-06T11:03:09.911Z Last Updated: 2024-08-06T15:51:35.882Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Janobe Products: E-Negosyo System Problem Types: CWE-89 Description: SQL injection vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in 'id' in '/admin/orders/controller.php' parameter Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-janobe-products
CVE ID: CVE-2024-33958 State: PUBLISHED Published: 2024-08-06T11:04:38.203Z Last Updated: 2024-08-08T15:45:42.899Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Janobe Products: E-Negosyo System Problem Types: CWE-89 Description: SQL injection vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in 'phonenumber' in '/passwordrecover.php' parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-janobe-products
CVE ID: CVE-2024-33959 State: PUBLISHED Published: 2024-08-06T11:12:58.443Z Last Updated: 2024-08-06T13:28:46.113Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Janobe Products: Janobe PayPal, Janove Credit Card, Janobe Debit Card Payment Problem Types: CWE-89 Description: SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'categ' in '/admin/mod_reports/printreport.php' parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - htt
in '/admin/mod_reports/printreport.php' parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-janobe-products
CVE ID: CVE-2024-33960 State: PUBLISHED Published: 2024-08-06T11:17:25.814Z Last Updated: 2024-08-06T13:48:39.835Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Janobe Products: Janobe PayPal, Janobe Credit Card, Janobe Debit Card Payment Problem Types: CWE-89 Description: SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'end' in '/admin/mod_reports/printreport.php' parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https
n '/admin/mod_reports/printreport.php' parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-janobe-products
CVE ID: CVE-2024-33961 State: PUBLISHED Published: 2024-08-06T11:18:02.453Z Last Updated: 2024-08-07T18:35:39.554Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Janobe Products: Janobe PayPal, Janobe Credit Card, Janobe Debit Card Payment Problem Types: CWE-89 Description: SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'code' in '/admin/mod_reservation/controller.php' parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h
in '/admin/mod_reservation/controller.php' parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-janobe-products
CVE ID: CVE-2024-33962 State: PUBLISHED Published: 2024-08-06T11:19:05.216Z Last Updated: 2024-08-06T18:44:02.442Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Janobe Products: Janobe PayPal, Janobe Credit Card, Janobe Debit Card Payment Problem Types: CWE-89 Description: SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'code' in '/admin/mod_reservation/index.php' parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:
in '/admin/mod_reservation/index.php' parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-janobe-products
CVE ID: CVE-2024-33963 State: PUBLISHED Published: 2024-08-06T11:19:43.629Z Last Updated: 2024-08-06T13:26:37.483Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Janobe Products: Janobe PayPal, Janobe Credit Card, Janobe Debit Card Payment Problem Types: CWE-89 Description: SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'id' in '/admin/mod_room/index.php' parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.inc
'/admin/mod_room/index.php' parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-janobe-products
CVE ID: CVE-2024-33964 State: PUBLISHED Published: 2024-08-06T11:20:18.453Z Last Updated: 2024-08-06T13:49:35.848Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Janobe Products: Janobe PayPal, Janobe Credit Card, Janobe Debit Card Payment Problem Types: CWE-89 Description: SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'id' in '/admin/mod_users/index.php' parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.in
'/admin/mod_users/index.php' parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-janobe-products
CVE ID: CVE-2024-33965 State: PUBLISHED Published: 2024-08-06T11:20:53.115Z Last Updated: 2024-08-06T15:29:34.390Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Janobe Products: Janobe PayPal, Janobe Credit Card, Janobe Debit Card Payment Problem Types: CWE-89 Description: SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'view' in '/tubigangarden/admin/mod_accomodation/index.php' parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: Refer
in '/tubigangarden/admin/mod_accomodation/index.php' parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-janobe-products