Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
oit has been disclosed publicly and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324645 - https://vuldb.com/?ctiid.324645 - https://vuldb.com/?submit.650177 - https://github.com/drew-byte/Online-Clinic-Management-System_TimeBasedSQLi_PoC/blob/main/README.md - https://itsourcecode.com/
CVE ID: CVE-2025-10619 State: PUBLISHED Published: 2025-09-17T21:02:11.492Z Last Updated: 2025-09-18T13:59:51.758Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C) Vendors: sequa-ai Products: sequa-mcp Problem Types: CWE-78, CWE-77 Description: A vulnerability was detected in sequa-ai sequa-mcp up to 1.0.13. This affects the function redirectToAuthorization of the file src/helpers/node-oauth-client-provider.ts of the component OAuth Server Discovery. Performing manipulation results in os command injection. Remote exploitation of the attack is possible. The exploit is now public and may be used. Upgrading to version 1.0.14 is able to mitigate this issue. The patch is named
he exploit is now public and may be used. Upgrading to version 1.0.14 is able to mitigate this issue. The patch is named e569815854166db5f71c2e722408f8957fb9e804. It is recommended to upgrade the affected component. The vendor explains: "We only promote that mcp server with our own URLs that have a valid response, but yes if someone would use it with a non sequa url, this is a valid attack vector. We have released a new version (1.0.14) that fixes this and validates that only URLs can be opened." Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324646 - https://vuldb.com/?ctiid.324646 - https://vuldb.com/?submit.650189 - https://lavender-bicycle-a5a.noti
.com/?id.324646 - https://vuldb.com/?ctiid.324646 - https://vuldb.com/?submit.650189 - https://lavender-bicycle-a5a.notion.site/Sequa-MCP-RCE-26853a41781f807da1c0cd158f9e3e1a?source=copy_link - https://github.com/sequa-ai/sequa-mcp/commit/e569815854166db5f71c2e722408f8957fb9e804
CVE ID: CVE-2025-10620 State: PUBLISHED Published: 2025-09-17T21:32:07.505Z Last Updated: 2025-09-18T13:58:09.661Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Online Clinic Management System Problem Types: CWE-89, CWE-74 Description: A flaw has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of the file /editp2.php. Executing manipulation of the argument id/firstname/lastname/type/age/address can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb
ploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324647 - https://vuldb.com/?ctiid.324647 - https://vuldb.com/?submit.650193 - https://github.com/drew-byte/OnlineClinicManagementSystem_TimeBasedSQLi_PoC/blob/main/README.md - https://itsourcecode.com/
CVE ID: CVE-2025-10621 State: PUBLISHED Published: 2025-09-17T22:02:07.463Z Last Updated: 2025-09-18T13:55:47.308Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Hotel Reservation System Problem Types: CWE-89, CWE-74 Description: A vulnerability was determined in SourceCodester Hotel Reservation System 1.0. The affected element is an unknown function of the file editroomimage.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.3246
sclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324650 - https://vuldb.com/?ctiid.324650 - https://vuldb.com/?submit.650218 - https://github.com/aCas1o/cve_report/blob/main/report.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-10622 State: PUBLISHED Published: 2025-11-05T07:32:14.390Z Last Updated: 2025-11-06T21:06:37.850Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Satellite 6.15 for RHEL 8, Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9, Red Hat Satellite 6.17 for RHEL 9, Red Hat Satellite 6.18 for RHEL 9, Red Hat Satellite 6 Problem Types: CWE-602 Description: A flaw was found in Red Hat Satellite (Foreman component). This vulnerability allows an authenticated user with edit_settings permissions to achieve arbitrary command execution on the underlying operating system via insufficient server-side validation of com
to achieve arbitrary command execution on the underlying operating system via insufficient server-side validation of command whitelisting. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:19721 - https://access.redhat.com/errata/RHSA-2025:19832 - https://access.redhat.com/errata/RHSA-2025:19855 - https://access.redhat.com/errata/RHSA-2025:19856 - https://access.redhat.com/security/cve/CVE-2025-10622 - https://bugzilla.redhat.com/show_bug.cgi?id=2396020
CVE ID: CVE-2025-10623 State: PUBLISHED Published: 2025-09-17T22:32:08.211Z Last Updated: 2025-09-18T13:29:27.608Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Hotel Reservation System Problem Types: CWE-89, CWE-74 Description: A vulnerability was identified in SourceCodester Hotel Reservation System 1.0. The impacted element is an unknown function of the file deleteuser.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324651 - https:
nd might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324651 - https://vuldb.com/?ctiid.324651 - https://vuldb.com/?submit.650221 - https://github.com/aCas1o/cve_report02/blob/main/report.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-10624 State: PUBLISHED Published: 2025-09-17T22:32:11.654Z Last Updated: 2025-09-18T13:28:47.606Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: User Management System Problem Types: CWE-89, CWE-74 Description: A security flaw has been discovered in PHPGurukul User Management System 1.0. This affects an unknown function of the file /login.php. Performing manipulation of the argument emailid results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324652 - https://vu
be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324652 - https://vuldb.com/?ctiid.324652 - https://vuldb.com/?submit.650222 - https://github.com/CSentinel/CVE/issues/3 - https://phpgurukul.com/
CVE ID: CVE-2025-10625 State: PUBLISHED Published: 2025-09-17T23:02:08.394Z Last Updated: 2025-09-18T14:40:04.291Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Online Exam Form Submission Problem Types: CWE-89, CWE-74 Description: A vulnerability was detected in SourceCodester Online Exam Form Submission 1.0. Affected by this vulnerability is an unknown functionality of the file /user/dashboard.php?page=update_profile. The manipulation of the argument phone results in sql injection. The attack may be launched remotely. The exploit is now public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - C
ly. The exploit is now public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324655 - https://vuldb.com/?ctiid.324655 - https://vuldb.com/?submit.650444 - https://github.com/qcycop0101-hash/CVE/issues/24 - https://www.sourcecodester.com/
CVE ID: CVE-2025-10626 State: PUBLISHED Published: 2025-09-17T23:32:06.660Z Last Updated: 2025-09-18T14:39:57.385Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Online Exam Form Submission Problem Types: CWE-89, CWE-74 Description: A flaw has been found in SourceCodester Online Exam Form Submission 1.0. Affected by this issue is some unknown functionality of the file /admin/update_s3.php. This manipulation of the argument credits causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.3246
n published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324656 - https://vuldb.com/?ctiid.324656 - https://vuldb.com/?submit.650449 - https://github.com/qcycop0101-hash/CVE/issues/25 - https://www.sourcecodester.com/
CVE ID: CVE-2025-10627 State: PUBLISHED Published: 2025-09-17T23:32:09.473Z Last Updated: 2025-09-18T13:28:02.194Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Online Exam Form Submission Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in SourceCodester Online Exam Form Submission 1.0. This affects an unknown part of the file /admin/delete_user.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324657 - https:/
and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324657 - https://vuldb.com/?ctiid.324657 - https://vuldb.com/?submit.650542 - https://github.com/bdrfly/cve-/issues/1 - https://www.sourcecodester.com/
CVE ID: CVE-2025-10628 State: PUBLISHED Published: 2025-09-18T00:02:07.068Z Last Updated: 2025-09-18T13:27:31.867Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR-852 Problem Types: CWE-77, CWE-74 Description: A vulnerability was found in D-Link DIR-852 1.00CN B09. This vulnerability affects unknown code of the file /htdocs/cgibin/hedwig.cgi of the component Web Management Interface. Performing manipulation results in command injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Anal
could be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324658 - https://vuldb.com/?ctiid.324658 - https://vuldb.com/?submit.650656 - https://github.com/i-Corner/cve/issues/31 - https://www.dlink.com/
CVE ID: CVE-2025-10629 State: PUBLISHED Published: 2025-09-18T00:32:06.706Z Last Updated: 2025-09-18T13:26:16.353Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR-852 Problem Types: CWE-77, CWE-74 Description: A vulnerability was determined in D-Link DIR-852 1.00CN B09. This issue affects the function ssdpcgi_main of the file htodcs/cgibin of the component Simple Service Discovery Protocol Service. Executing manipulation of the argument ST can lead to command injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. This vulnerability only affects products that are no longer supported b
has been publicly disclosed and may be utilized. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324659 - https://vuldb.com/?ctiid.324659 - https://vuldb.com/?submit.650660 - https://github.com/i-Corner/cve/issues/30 - https://www.dlink.com/
CVE ID: CVE-2025-10630 State: PUBLISHED Published: 2025-09-19T09:44:14.960Z Last Updated: 2025-09-24T13:57:31.465Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Grafana Products: grafana-zabbix-plugin Problem Types: CWE-20 Description: Grafana is an open-source platform for monitoring and observability. Grafana-Zabbix is a plugin for Grafana allowing to visualize monitoring data from Zabbix and create dashboards for analyzing metrics and realtime monitoring. Versions 5.2.1 and below contained a ReDoS vulnerability via user-supplied regex query which could causes CPU usage to max out. This vulnerability is fixed in version 6.0.0. Additional Analyst Notes: -
query which could causes CPU usage to max out. This vulnerability is fixed in version 6.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://grafana.com/security/security-advisories/cve-2025-10630/ - https://github.com/grafana/grafana-zabbix/releases/tag/v6.0.0
CVE ID: CVE-2025-10631 State: PUBLISHED Published: 2025-09-18T00:32:09.860Z Last Updated: 2025-09-18T13:25:26.232Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Online Petshop Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability was identified in itsourcecode Online Petshop Management System 1.0. Impacted is an unknown function of the file addcnp.php of the component Available Products Page. The manipulation of the argument name/description leads to cross site scripting. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrich
the attack remotely. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324660 - https://vuldb.com/?ctiid.324660 - https://vuldb.com/?submit.650675 - https://github.com/drew-byte/Online-Pet-Shop-Management-System-Stored-XSS-PoC/blob/main/README.md - https://itsourcecode.com/
CVE ID: CVE-2025-10632 State: PUBLISHED Published: 2025-09-18T01:02:08.088Z Last Updated: 2025-09-18T13:23:00.177Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Online Petshop Management System Problem Types: CWE-79, CWE-94 Description: A security flaw has been discovered in itsourcecode Online Petshop Management System 1.0. The affected element is an unknown function of the file availableframe.php of the component Admin Dashboard. The manipulation of the argument name/address results in cross site scripting. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited. Additional Analyst
ble to launch the attack remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324661 - https://vuldb.com/?ctiid.324661 - https://vuldb.com/?submit.650676 - https://github.com/drew-byte/Online-Pet-Shop-Management-System_AdminDashboard_Stored-XSS-PoC/blob/main/README.md - https://itsourcecode.com/
CVE ID: CVE-2025-10634 State: PUBLISHED Published: 2025-09-18T01:02:15.143Z Last Updated: 2025-09-18T13:18:03.415Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR-823X Problem Types: CWE-77, CWE-74 Description: A weakness has been identified in D-Link DIR-823X 240126/240802/250416. The impacted element is the function sub_412E7C of the file /usr/sbin/goahead of the component Environment Variable Handler. This manipulation of the argument terminal_addr/server_ip/server_port causes command injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA
ted remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324662 - https://vuldb.com/?ctiid.324662 - https://vuldb.com/?submit.650792 - https://github.com/Cpppq43/D-Link/blob/main/DIink-DIR-823x.md - https://pan.baidu.com/s/1dWnXEa58P0KHw53L9U_PoQ - https://www.dlink.com/
CVE ID: CVE-2025-10635 State: PUBLISHED Published: 2025-10-08T06:00:03.943Z Last Updated: 2025-10-08T14:17:55.584Z Vendors: Unknown Products: Find Me On Problem Types: CWE-89 SQL Injection Description: The Find Me On WordPress plugin through 2.0.9.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing subscribers and above to perform SQL injection attacks Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/92e965aa-45fc-4189-a341-1ecac656ebf3/
CVE ID: CVE-2025-10636 State: PUBLISHED Published: 2025-10-30T06:00:07.969Z Last Updated: 2025-10-30T14:09:05.103Z Vendors: Unknown Products: NS Maintenance Mode for WP Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The NS Maintenance Mode for WP WordPress plugin through 1.3.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/a1ab1d82-108e-4f66-9d06-5036cde9678a/
CVE ID: CVE-2025-10637 State: PUBLISHED Published: 2025-10-25T06:49:24.127Z Last Updated: 2025-10-27T15:38:46.458Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: quadlayers Products: Social Feed Gallery Problem Types: CWE-862 Description: The Social Feed Gallery plugin for WordPress is vulnerable to Information Exposure in versions less than, or equal to, 4.9.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to exfiltrate Instagram profile and media data from any account the site owner connected to their site. Additional Analyst Notes: - CISA ADP Vulnrichm
e and media data from any account the site owner connected to their site. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ae0dd6b0-9028-456e-9843-d45754c01c53?source=cve - https://wordpress.org/plugins/insta-gallery/ - https://plugins.trac.wordpress.org/browser/insta-gallery/tags/4.9.2/lib/api/rest/endpoints/frontend/class-user-profile.php#L19 - https://plugins.trac.wordpress.org/changeset/3381423/insta-gallery/trunk/lib/api/rest/endpoints/frontend/class-user-profile.php
CVE ID: CVE-2025-10638 State: PUBLISHED Published: 2025-10-22T06:00:02.379Z Last Updated: 2025-10-22T15:42:45.575Z Vendors: Unknown Products: NS Maintenance Mode for WP Problem Types: CWE-862 Missing Authorization Description: The NS Maintenance Mode for WP WordPress plugin through 1.3.1 lacks authorization in its subscriber export function allowing unauthenticated attackers to download a list of a site's subscribers containing their name and email address Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/1998a079-d986-47fe-907f-d4d295b06603/
CVE ID: CVE-2025-10639 State: PUBLISHED Published: 2025-10-21T11:36:10.097Z Last Updated: 2025-11-03T17:31:34.424Z Vendors: EfficientLab Products: WorkExaminer Professional Problem Types: CWE-798 Description: The WorkExaminer Professional server installation comes with an FTP server that is used to receive the client logs on TCP port 12304. An attacker with network access to this port can use weak hardcoded credentials to login to the FTP server and modify or read data, log files and gain remote code execution as NT Authority\SYSTEM on the server by exchanging accessible service binaries in the WorkExaminer installation directory (e.g. "C:\Program File (x86)\Work Examiner Professional Server
rvice binaries in the WorkExaminer installation directory (e.g. "C:\Program File (x86)\Work Examiner Professional Server"). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://r.sec-consult.com/workexaminer
CVE ID: CVE-2025-10640 State: PUBLISHED Published: 2025-10-21T11:43:44.598Z Last Updated: 2025-11-03T17:31:35.365Z Vendors: EfficientLab Products: WorkExaminer Professional Problem Types: CWE-602 Description: An unauthenticated attacker with access to TCP port 12306 of the WorkExaminer server can exploit missing server-side authentication checks to bypass the login prompt in the WorkExaminer Professional console to gain administrative access to the WorkExaminer server and therefore all sensitive monitoring data. This includes monitored screenshots and keystrokes of all users. The WorkExaminer Professional console is used for administrative access to the server. Before access to the console i
s. The WorkExaminer Professional console is used for administrative access to the server. Before access to the console is granted administrators must login. Internally, a custom protocol is used to call a respective stored procedure on the MSSQL database. The return value of the call is not validated on the server-side. Instead it is only validated client-side which allows to bypass authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://r.sec-consult.com/workexaminer
CVE ID: CVE-2025-10641 State: PUBLISHED Published: 2025-10-21T11:48:02.692Z Last Updated: 2025-11-03T17:31:36.369Z Vendors: EfficientLab Products: WorkExaminer Professional Problem Types: CWE-319 Description: All WorkExaminer Professional traffic between monitoring client, console and server is transmitted as plain text. This allows an attacker with access to the network to read the transmitted sensitive data. An attacker can also freely modify the data on the wire. The monitoring clients transmit their data to the server using the unencrypted FTP. Clients connect to the FTP server on port 12304 and transmit the data unencrypted. In addition, all traffic between the console client and the se
P server on port 12304 and transmit the data unencrypted. In addition, all traffic between the console client and the server at port 12306 is unencrypted. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://r.sec-consult.com/workexaminer
CVE ID: CVE-2025-10642 State: PUBLISHED Published: 2025-09-18T01:32:06.355Z Last Updated: 2025-09-18T13:17:07.434Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:ND/RL:ND/RC:UR) Vendors: wangchenyi1996 Products: chat_forum Problem Types: CWE-79, CWE-94 Description: A vulnerability has been found in wangchenyi1996 chat_forum up to 80bdb92f5b460d36cab36e530a2c618acef5afd2. This impacts an unknown function of the file /q.php. Such manipulation of the argument path leads to cross site scripting. The attack may be launched remotely. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases
basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324675 - https://vuldb.com/?ctiid.324675 - https://vuldb.com/?submit.651885 - https://github.com/wangchenyi1996/chat_forum/blob/master/q.php#L31