Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-5624 State: PUBLISHED Published: 2024-08-29T08:53:06.058Z Last Updated: 2024-08-29T13:40:31.563Z Vendors: B&R Industrial Automation Products: B&R APROL Problem Types: CWE-79 Description: Reflected Cross-Site Scripting (XSS) in Shift Logbook application of B&R APROL <= R 4.4-00P3 may allow a network-based attacker to execute arbitrary JavaScript code in the context of the user's browser session Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.br-automation.com/fileadmin/SA24P2014_Multiple_vulnerabilities_in_BR_APROL.pdf-367290ae.pdf
CVE ID: CVE-2024-5625 State: PUBLISHED Published: 2024-07-18T17:12:37.358Z Last Updated: 2024-08-01T21:18:06.243Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: PruvaSoft Informatics Products: Apinizer Management Console Problem Types: CWE-611 Description: Improper Restriction of XML External Entity Reference vulnerability in PruvaSoft Informatics Apinizer Management Console allows Data Serialization External Entities Blowup.This issue affects Apinizer Management Console: before 2024.05.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.usom.gov.tr/bildirim/tr-24-1010
CVE ID: CVE-2024-5626 State: PUBLISHED Published: 2024-07-12T06:00:06.094Z Last Updated: 2024-08-08T20:44:06.230Z Vendors: Unknown Products: Inline Related Posts Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Inline Related Posts WordPress plugin before 3.7.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/6b03f450-4982-4f6c-a6f1-f7e85b1deec1/
CVE ID: CVE-2024-5627 State: PUBLISHED Published: 2024-07-13T06:00:12.388Z Last Updated: 2025-03-27T15:51:17.909Z Vendors: Unknown Products: Tournamatch Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Tournamatch WordPress plugin before 4.6.1 does not sanitise and escape some parameters, which could allow users with a role as low as subscriber to perform Cross-Site Scripting attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/5b18dc3d-0d5f-44e9-b22f-48ea0a9c9193/
CVE ID: CVE-2024-5628 State: PUBLISHED Published: 2024-09-13T05:30:55.590Z Last Updated: 2024-09-13T14:01:29.018Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: themefusion Products: Fusion Builder Problem Types: CWE-79 Description: The Avada | Website Builder For WordPress & eCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's fusion_button shortcode in all versions up to, and including, 3.11.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that
ible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. NOTE: This vulnerability was partially fixed in 3.11.9. Additional hardening for alternate attack vectors was added to version 3.11.10. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/7c23bd29-ba02-4c90-a631-5ce6294d7760?source=cve - https://avada.com/documentation/avada-changelog/ - https://avada.com/blog/version-7-11-9-security-update/
CVE ID: CVE-2024-5629 State: PUBLISHED Published: 2024-06-05T14:32:56.435Z Last Updated: 2025-02-13T17:54:22.106Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:L) Vendors: MongoDB Inc Products: PyMongo Problem Types: CWE-125 Description: An out-of-bounds read in the 'bson' module of PyMongo 4.6.2 or earlier allows deserialization of malformed BSON provided by a Server to raise an exception which may contain arbitrary application memory. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://jira.mongodb.org/browse/PYTHON-4305 - https://lists.debian.org/debian-lts-announce/2024/06/msg00007.html
CVE ID: CVE-2024-5630 State: PUBLISHED Published: 2024-07-15T06:00:02.225Z Last Updated: 2024-08-01T21:18:06.829Z Vendors: Unknown Products: Insert or Embed Articulate Content into WordPress Problem Types: CWE-78 OS Command Injection Description: The Insert or Embed Articulate Content into WordPress plugin before 4.3000000024 does not prevent authors from uploading arbitrary files to the site, which may allow them to upload PHP shells on affected sites. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/538c875f-4c20-4be0-8098-5bddb7aecff4/
CVE ID: CVE-2024-5631 State: PUBLISHED Published: 2024-07-09T10:57:24.256Z Last Updated: 2024-08-01T21:18:06.842Z Vendors: Longse Technology, Zamel Products: NVR3608PGE2W, ZMB-01 Problem Types: CWE-319 Description: Longse NVR (Network Video Recorder) model NVR3608PGE2W, as well as products based on this device, are transmitting user's login and password to a remote control service without using any encryption. This enables an on-path attacker to eavesdrop the credentials and subsequently obtain access to the video stream. The credentials are being sent when a user decides to change his password in router's portal. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Re
o change his password in router's portal. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://zamel.com/pl/gardi/zestaw-monitoringu-bezprzewodowego-wi-fi-typ-zmb-01 - https://cert.pl/en/posts/2024/07/CVE-2024-5631/ - https://cert.pl/posts/2024/07/CVE-2024-5631
CVE ID: CVE-2024-5632 State: PUBLISHED Published: 2024-07-09T10:57:39.740Z Last Updated: 2024-08-01T21:18:06.827Z Vendors: Longse Technology, Zamel Products: NVR3608PGE2W, ZMB-01 Problem Types: CWE-1392 Description: Longse NVR (Network Video Recorder) model NVR3608PGE2W, as well as products based on this device, create a WiFi network with a default password. A user is neither advised to change it during the installation process, nor such a need is described in the manual. As the cameras from the same kit connect automatically, it is very probable for the default password to be left unchanged. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://za
be left unchanged. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://zamel.com/pl/gardi/zestaw-monitoringu-bezprzewodowego-wi-fi-typ-zmb-01 - https://cert.pl/en/posts/2024/07/CVE-2024-5631/ - https://cert.pl/posts/2024/07/CVE-2024-5631/
CVE ID: CVE-2024-5633 State: PUBLISHED Published: 2024-07-09T10:58:17.510Z Last Updated: 2024-08-01T21:18:06.432Z Vendors: Longse Technology, Zamel Products: LBH30FE200W, ZMB-01/C Problem Types: CWE-912 Description: Longse model LBH30FE200W cameras, as well as products based on this device, provide an unrestricted access for an attacker located in the same local network to an undocumented binary service CoolView on one of the ports. An attacker with a knowledge of the available commands is able to perform read/write operations on the device's memory, which might result in e.g. bypassing telnet login and obtaining full access to the device. Additional Analyst Notes: - CISA ADP Vulnrichment: -
.g. bypassing telnet login and obtaining full access to the device. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://zamel.com/pl/gardi/zestaw-monitoringu-bezprzewodowego-wi-fi-typ-zmb-01 - https://cert.pl/en/posts/2024/07/CVE-2024-5631/ - https://cert.pl/posts/2024/07/CVE-2024-5631/
CVE ID: CVE-2024-5634 State: PUBLISHED Published: 2024-07-09T10:58:47.153Z Last Updated: 2024-08-01T21:18:06.724Z Vendors: Longse Technology, Zamel Products: LBH30FE200W, ZMB-01/C Problem Types: CWE-1391 Description: Longse model LBH30FE200W cameras, as well as products based on this device, make use of telnet passwords which follow a specific pattern. Once the pattern is known, brute-forcing the password becomes relatively easy. Additionally, every camera with the same firmware version shares the same password. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://zamel.com/pl/gardi/zestaw-monitoringu-bezprzewodowego-wi-fi-typ-zmb-01 - https://cer
am Container: References: - https://zamel.com/pl/gardi/zestaw-monitoringu-bezprzewodowego-wi-fi-typ-zmb-01 - https://cert.pl/en/posts/2024/07/CVE-2024-5631/ - https://cert.pl/posts/2024/07/CVE-2024-5631/
CVE ID: CVE-2024-5635 State: PUBLISHED Published: 2024-06-04T22:00:04.218Z Last Updated: 2024-08-01T21:18:06.678Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: itsourcecode Products: Bakery Online Ordering System Problem Types: CWE-89 Description: A vulnerability was found in itsourcecode Bakery Online Ordering System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument txtsearch leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-267091. Additional Anal
disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-267091. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.267091 - https://vuldb.com/?ctiid.267091 - https://vuldb.com/?submit.349244 - https://github.com/L1OudFd8cl09/CVE/blob/main/03_06_2024_a.md
CVE ID: CVE-2024-5636 State: PUBLISHED Published: 2024-06-05T00:31:03.782Z Last Updated: 2024-08-01T21:18:06.671Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: itsourcecode Products: Bakery Online Ordering System Problem Types: CWE-89 Description: A vulnerability was found in itsourcecode Bakery Online Ordering System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file report/index.php. The manipulation of the argument procduct leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-267092. Additional Analyst Notes: - C
sclosed to the public and may be used. The identifier of this vulnerability is VDB-267092. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.267092 - https://vuldb.com/?ctiid.267092 - https://vuldb.com/?submit.349247 - https://github.com/L1OudFd8cl09/CVE/blob/main/03_06_2024_b.md
CVE ID: CVE-2024-5637 State: PUBLISHED Published: 2024-06-07T11:02:21.508Z Last Updated: 2024-08-01T21:18:06.839Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: vanyukov Products: Market Exporter Problem Types: CWE-862 Missing Authorization Description: The Market Exporter plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'remove_files' function in all versions up to, and including, 2.0.19. This makes it possible for authenticated attackers, with Subscriber-level access and above, to use path traversal to delete arbitrary files on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Progra
path traversal to delete arbitrary files on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c3ea4bf9-e109-465e-890a-c2923089fb66?source=cve - https://plugins.trac.wordpress.org/browser/market-exporter/trunk/includes/class-restapi.php#L427 - https://plugins.trac.wordpress.org/changeset/3098360/market-exporter/trunk/includes/class-restapi.php
CVE ID: CVE-2024-5638 State: PUBLISHED Published: 2024-06-08T05:44:29.318Z Last Updated: 2024-08-01T21:18:06.792Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: awordpresslife Products: Formula Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Formula theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘id’ parameter in the 'ti_customizer_notify_dismiss_recommended_plugins' AJAX action in all versions up to, and including, 0.5.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary w
cient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/193eeb92-f0af-4c6a-ac44-3166023a3006?source=cve - https://themes.trac.wordpress.org/browser/formula/0.5.1/inc/customizer/customizer-notice/formula-customizer-notify.php?rev=229770#L184 - https://themes.trac.wordpress.org/changeset/230569/
CVE ID: CVE-2024-5639 State: PUBLISHED Published: 2024-06-21T06:58:18.451Z Last Updated: 2024-08-01T21:18:06.678Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: cozmoslabs Products: User Profile Picture Problem Types: CWE-639 Authorization Bypass Through User-Controlled Key Description: The User Profile Picture plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.6.1 via the 'rest_api_change_profile_image' function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Author-level access and above, to update the profile picture of any user. Addit
ssible for authenticated attackers, with Author-level access and above, to update the profile picture of any user. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/01a3b9ba-b18a-48d9-8365-d10f79fc6a6b?source=cve - https://plugins.trac.wordpress.org/browser/metronet-profile-picture/tags/2.6.1/metronet-profile-picture.php#L989 - https://plugins.trac.wordpress.org/browser/metronet-profile-picture/tags/2.6.1/metronet-profile-picture.php#L1122 - https://plugins.trac.wordpress.org/changeset/3105132/
CVE ID: CVE-2024-5640 State: PUBLISHED Published: 2024-06-07T04:33:24.651Z Last Updated: 2024-08-01T21:18:06.800Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: bdthemes Products: Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ attribute within the Pacific widget in all versions up to, and including, 3.14.7 due to insufficie
cripting via the ‘id’ attribute within the Pacific widget in all versions up to, and including, 3.14.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9820b52b-540a-47e8-9e5f-274ef1720ffa?source=cve - https://plugins.trac.wordpress.org/browser/bdthemes-prime-slider-lite/tags/3.14.7/modules/pacific/widgets/pacific.php#L1462 - https://wordpress.
dpress.org/browser/bdthemes-prime-slider-lite/tags/3.14.7/modules/pacific/widgets/pacific.php#L1462 - https://wordpress.org/plugins/bdthemes-prime-slider-lite/#developers - https://plugins.trac.wordpress.org/changeset/3097891/#file372
CVE ID: CVE-2024-5641 State: PUBLISHED Published: 2024-07-04T07:32:27.597Z Last Updated: 2024-08-01T21:18:06.794Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: cedcommerce Products: One Click Order Re-Order Problem Types: CWE-862 Missing Authorization Description: The One Click Order Re-Order plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ced_ocor_save_general_setting' function in all versions up to, and including, 1.1.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change the plugin settings, including adding stored cross-site scripting. Ad
with Subscriber-level access and above, to change the plugin settings, including adding stored cross-site scripting. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/8a297784-96cd-4135-a8f1-e50f3a0d71bd?source=cve - https://plugins.trac.wordpress.org/browser/one-click-order-reorder/trunk/includes/class-basket-order.php#L489 - https://plugins.trac.wordpress.org/changeset/3110914/
CVE ID: CVE-2024-5642 State: PUBLISHED Published: 2024-06-27T21:05:31.281Z Last Updated: 2025-10-09T18:36:41.965Z Vendors: Python Software Foundation Products: CPython Description: CPython 3.9 and earlier doesn't disallow configuring an empty list ("[]") for SSLContext.set_npn_protocols() which is an invalid value for the underlying OpenSSL API. This results in a buffer over-read when NPN is used (see CVE-2024-5535 for OpenSSL). This vulnerability is of low severity due to NPN being not widely used and specifying an empty list likely being uncommon in-practice (typically a protocol name would be configured). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Referenc
protocol name would be configured). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://jbp.io/2024/06/27/cve-2024-5535-openssl-memory-safety.html - https://github.com/python/cpython/pull/23014 - https://mail.python.org/archives/list/security-announce@python.org/thread/PLP2JI3PJY33YG6P5BZYSSNU66HASXBQ/ - https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e - http://www.openwall.com/lists/oss-security/2024/06/28/4 - https://github.com/python/cpython/issues/121227 - https://security.netapp.com/advisory/ntap-20240726-0005/ - https://github.com/python/cpython/commit/a2cdbb6e8188ba9ba8b356b28d91bff60e86fe31
CVE ID: CVE-2024-5644 State: PUBLISHED Published: 2024-07-13T06:00:12.584Z Last Updated: 2024-08-01T21:18:06.697Z Vendors: Unknown Products: Tournamatch Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Tournamatch WordPress plugin before 4.6.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/afe14c7a-95b2-4d3f-901a-e53ecef70d49/
CVE ID: CVE-2024-5645 State: PUBLISHED Published: 2024-06-07T09:33:36.853Z Last Updated: 2024-08-01T21:18:06.679Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: envothemes Products: Envo Extra Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Envo Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘button_css_id’ parameter within the Button widget in all versions up to, and including, 1.8.23 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbi
ut escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/dbe53b09-84c6-4fb6-9a79-1e4987678129?source=cve - https://plugins.trac.wordpress.org/browser/envo-extra/tags/1.8.22/lib/elementor/widgets/button/button.php#L676 - https://wordpress.org/plugins/envo-extra/#developers - https://plugins.trac.wordpress.org/changeset/3098500/
CVE ID: CVE-2024-5646 State: PUBLISHED Published: 2024-06-11T20:33:00.081Z Last Updated: 2024-08-01T21:18:06.823Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: futuriowp Products: Futurio Extra Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Futurio Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘header_size’ attribute within the Advanced Text Block widget in all versions up to, and including, 2.0.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above,
zation and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/cbb3bd9b-ac1f-4488-931f-2ba37576df2d?source=cve - https://plugins.trac.wordpress.org/browser/futurio-extra/tags/2.0.5/inc/elementor/widgets/advanced-text-block.php#L265 - https://plugins.trac.wordpress.org/changeset/3100491/#file1
CVE ID: CVE-2024-5647 State: PUBLISHED Published: 2025-07-03T09:22:19.308Z Last Updated: 2025-07-03T13:17:30.817Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: blossomthemes, majeedraza, divisupreme, robosoft, gutentor, oceanwp, thehappymonster, badhonrocks, Elegant Themes, boldthemes, wpdevteam, gn_themes Products: BlossomThemes Social Feed, Carousel Slider, Supreme Modules Lite – Divi Theme, Extra Theme and Divi Builder, Photo Gallery, Images, Slider in Rbs Image Gallery, Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor, OceanWP, Happy Addons for Elementor, Divi Torque – Plugin for Divi Theme and Builder, Divi Builder, Divi, Divi Extra, Bo
OceanWP, Happy Addons for Elementor, Divi Torque – Plugin for Divi Theme and Builder, Divi Builder, Divi, Divi Extra, Bold Page Builder, Essential Addons for Elementor – Popular Elementor Templates and Widgets, WP Shortcodes Plugin — Shortcodes Ultimate Problem Types: CWE-79 Description: Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled Magnific Popups library (version 1.1.0) in various versions due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever
attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. NOTE: This vulnerability was fixed in the upstream library (Magnific Popups version 1.2.0) by disabling the loading of HTML within certain fields by default. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/dae80fc2-3076-4a32-876d-5df1c62de9bd?source=cve - https://plugins.trac.wordpress.org/browser/shortcodes-ultimate/trunk/vendor/magnific-popup/magnific-popup.js - https://plugins.trac.wordpress.org/browser/essential-addons-for-elementor-lite/trunk/assets/front-end/js