Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-6960 State: PUBLISHED Published: 2025-07-01T15:02:08.575Z Last Updated: 2025-07-01T15:29:59.116Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Employee Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in Campcodes Employee Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /empproject.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vul
en disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314497 - https://vuldb.com/?ctiid.314497 - https://vuldb.com/?submit.605900 - https://github.com/ez-lbz/poc/issues/38 - https://www.campcodes.com/
CVE ID: CVE-2025-6961 State: PUBLISHED Published: 2025-07-01T15:32:06.164Z Last Updated: 2025-07-01T15:56:58.015Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Employee Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in Campcodes Employee Management System 1.0. Affected by this issue is some unknown functionality of the file /mark.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:
as been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314498 - https://vuldb.com/?ctiid.314498 - https://vuldb.com/?submit.605908 - https://github.com/ez-lbz/poc/issues/39 - https://www.campcodes.com/
CVE ID: CVE-2025-6962 State: PUBLISHED Published: 2025-07-01T15:32:08.265Z Last Updated: 2025-07-01T15:47:17.009Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Employee Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in Campcodes Employee Management System 1.0. This affects an unknown part of the file /myprofileup.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com
closed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314499 - https://vuldb.com/?ctiid.314499 - https://vuldb.com/?submit.605909 - https://github.com/ez-lbz/poc/issues/40 - https://www.campcodes.com/
CVE ID: CVE-2025-6963 State: PUBLISHED Published: 2025-07-01T16:02:06.354Z Last Updated: 2025-07-01T18:42:53.337Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Employee Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in Campcodes Employee Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /myprofile.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id
ed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314500 - https://vuldb.com/?ctiid.314500 - https://vuldb.com/?submit.605910 - https://github.com/ez-lbz/poc/issues/41 - https://www.campcodes.com/
CVE ID: CVE-2025-6965 State: PUBLISHED Published: 2025-07-15T13:44:00.784Z Last Updated: 2025-11-04T21:14:51.528Z Vendors: SQLite Products: SQLite Problem Types: CWE-197 Description: There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.sqlite.org/src/info/5508b56fd24016c13981ec280ecdd833007c9d8dd595edb295b984c2b487b5c8
CVE ID: CVE-2025-6970 State: PUBLISHED Published: 2025-07-09T22:22:46.811Z Last Updated: 2025-07-10T13:06:17.016Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: netweblogic Products: Events Manager – Calendar, Bookings, Tickets, and more! Problem Types: CWE-89 Description: The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter in all versions up to, and including, 7.0.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQ
ient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/7320c06e-a7a7-4ed0-93cd-e85d74bae73f?source=cve - https://plugins.trac.wordpress.org/browser/events-manager/tags/7.0.3/classes/em-object.php#L1060 - https://plugins.trac.wordpress.org/changeset/3321403/events-manager
CVE ID: CVE-2025-6971 State: PUBLISHED Published: 2025-07-15T15:02:05.556Z Last Updated: 2025-07-15T15:30:36.848Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Dassault Systèmes Products: SOLIDWORKS eDrawings Problem Types: CWE-416 Description: Use After Free vulnerability exists in the CATPRODUCT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted CATPRODUCT file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.3ds.com/trust-center/security/security-advisories/cve-2025-6971
CVE ID: CVE-2025-6972 State: PUBLISHED Published: 2025-07-15T15:02:42.714Z Last Updated: 2025-07-15T15:28:39.847Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Dassault Systèmes Products: SOLIDWORKS eDrawings Problem Types: CWE-416 Description: Use After Free vulnerability exists in the CATPRODUCT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted CATPRODUCT file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.3ds.com/trust-center/security/security-advisories/cve-2025-6972
CVE ID: CVE-2025-6973 State: PUBLISHED Published: 2025-07-15T15:03:51.740Z Last Updated: 2025-07-15T15:25:55.399Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Dassault Systèmes Products: SOLIDWORKS eDrawings Problem Types: CWE-416 Description: Use After Free vulnerability exists in the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted JT file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.3ds.com/trust-center/security/security-advisories/cve-2025-6973
CVE ID: CVE-2025-6974 State: PUBLISHED Published: 2025-07-15T15:04:16.913Z Last Updated: 2025-07-15T15:20:51.039Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Dassault Systèmes Products: SOLIDWORKS eDrawings Problem Types: CWE-457 Description: Use of Uninitialized Variable vulnerability exists in the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted JT file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.3ds.com/trust-center/security/security-advisories/cve-2025-6974
CVE ID: CVE-2025-6975 State: PUBLISHED Published: 2025-07-09T22:22:47.356Z Last Updated: 2025-07-10T13:10:07.456Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: netweblogic Products: Events Manager – Calendar, Bookings, Tickets, and more! Problem Types: CWE-79 Description: The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘calendar_header’ parameter in all versions up to, and including, 7.0.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can suc
is makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b6e3e59b-837b-4058-b7bc-a22cff22afb4?source=cve - https://plugins.trac.wordpress.org/browser/events-manager/tags/7.0.3/templates/calendar/section-header-navigation.php#L8 - https://plugins.trac.wordpress.org/changeset/3321403/events-manager
CVE ID: CVE-2025-6976 State: PUBLISHED Published: 2025-07-09T22:22:47.733Z Last Updated: 2025-07-10T13:49:28.842Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: netweblogic Products: Events Manager – Calendar, Bookings, Tickets, and more! Problem Types: CWE-79 Description: The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 7.0.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject ar
ed attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/da97a395-64b8-4efd-b189-f917674b1c18?source=cve - https://plugins.trac.wordpress.org/browser/events-manager/tags/7.0.3/classes/em-events.php#L287 - https://plugins.trac.wordpress.org/browser/events-manager/tags/7.0.3/classes/em-events.php#L335 - https://plugins.trac.wordpress.org/browser/events-manager/tags/7.0.3/classes/em-events.php#L357 - https://plugins.trac.wo
ttps://plugins.trac.wordpress.org/browser/events-manager/tags/7.0.3/classes/em-events.php#L357 - https://plugins.trac.wordpress.org/browser/events-manager/tags/7.0.3/classes/em-events.php#L485 - https://plugins.trac.wordpress.org/browser/events-manager/tags/7.0.3/classes/em-locations.php#L214 - https://plugins.trac.wordpress.org/browser/events-manager/tags/7.0.3/classes/em-locations.php#L261 - https://plugins.trac.wordpress.org/changeset/3321403/events-manager
CVE ID: CVE-2025-6977 State: PUBLISHED Published: 2025-07-16T04:24:02.528Z Last Updated: 2025-07-18T14:45:52.322Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: metagauss Products: ProfileGrid – User Profiles, Groups and Communities Problem Types: CWE-79 Description: The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘pm_get_messenger_notification’ function in all versions up to, and including, 5.9.5.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they ca
g. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a logged-in user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/addf264e-e23c-4bb6-a898-0fbb4ec28189?source=cve - https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/trunk/public/class-profile-magic-public.php#L1322 - https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/trunk/public/class-profile-magic-public.php#L1329 - https://plugins.trac.wordpr
rid-user-profiles-groups-and-communities/trunk/public/class-profile-magic-public.php#L1329 - https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/trunk/public/class-profile-magic-public.php#L1330 - https://plugins.trac.wordpress.org/changeset/3324676/
CVE ID: CVE-2025-6978 State: PUBLISHED Published: 2025-10-23T18:50:14.706Z Last Updated: 2025-10-23T18:58:45.528Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Arista Networks Products: Arista Edge Threat Management - Arista Next Generation Firewall Problem Types: CWE-78 Description: Diagnostics command injection vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://https://www.arista.com/en/support/advisories-notices/security-advisory/22535-security-advisory-0123
CVE ID: CVE-2025-6979 State: PUBLISHED Published: 2025-10-23T18:46:37.557Z Last Updated: 2025-10-23T18:59:32.658Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Arista Networks Products: Arista Edge Threat Management - Arista Next Generation Firewall Problem Types: CWE-287 Description: Captive Portal can allow authentication bypass Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://https://www.arista.com/en/support/advisories-notices/security-advisory/22535-security-advisory-0123
CVE ID: CVE-2025-6980 State: PUBLISHED Published: 2025-10-23T18:41:47.326Z Last Updated: 2025-10-23T18:59:58.995Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Arista Networks Products: Arista Edge Threat Management - Arista Next Generation Firewall Problem Types: CWE-200 Description: Captive Portal can expose sensitive information Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://https://www.arista.com/en/support/advisories-notices/security-advisory/22535-security-advisory-0123
CVE ID: CVE-2025-6981 State: PUBLISHED Published: 2025-07-15T20:44:30.022Z Last Updated: 2025-07-16T19:04:18.464Z Vendors: GitHub Products: Enterprise Server Problem Types: CWE-863 Description: An incorrect authorization vulnerability allowed unauthorized read access to the contents of internal repositories for contractor accounts when the Contractors API feature was enabled. The Contractors API is a rarely-enabled feature in private preview. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.18 and was fixed in versions 3.14.15, 3.15.10, 3.16.6 and 3.17.3 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.github.com/en/enterprise-serve
and 3.17.3 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.github.com/en/enterprise-server@3.14/admin/release-notes#3.14.15 - https://docs.github.com/en/enterprise-server@3.15/admin/release-notes#3.15.10 - https://docs.github.com/en/enterprise-server@3.16/admin/release-notes#3.16.6 - https://docs.github.com/en/enterprise-server@3.17/admin/release-notes#3.17.3
CVE ID: CVE-2025-6982 State: PUBLISHED Published: 2025-07-16T20:01:41.382Z Last Updated: 2025-11-03T20:07:18.484Z Vendors: TP-Link System Inc. Products: Archer C50 V3, Archer C50 V4, Archer C50 V5 Problem Types: CWE-798 Description: Use of Hard-coded Credentials in TP-Link Archer C50 V3( <= 180703)/V4( <= 250117 )/V5( <= 200407 ), allows attackers to decrypt the config.xml files. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.tp-link.com/us/support/faq/4538/
CVE ID: CVE-2025-6983 State: PUBLISHED Published: 2025-07-16T20:10:07.726Z Last Updated: 2025-07-16T20:36:15.269Z Vendors: TP-Link System Inc. Products: Archer C1200 Problem Types: CWE-1021 Description: A Clickjacking vulnerability in TP-Link Archer C1200 web management page allows an attacker to trick users into performing unintended actions via rendered UI layers or frames.This issue affects Archer C1200 <= 1.1.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.tp-link.com/us/support/faq/4539/
CVE ID: CVE-2025-6984 State: PUBLISHED Published: 2025-09-04T08:07:41.996Z Last Updated: 2025-09-04T20:07:31.531Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: langchain-ai Products: langchain-ai/langchain Problem Types: CWE-200 Description: The langchain-ai/langchain project, specifically the EverNoteLoader component, is vulnerable to XML External Entity (XXE) attacks due to insecure XML parsing. The affected version is 0.3.63. The vulnerability arises from the use of etree.iterparse() without disabling external entity references, which can lead to sensitive information disclosure. An attacker could exploit this by crafting a malicious XML payload that refe
n lead to sensitive information disclosure. An attacker could exploit this by crafting a malicious XML payload that references local files, potentially exposing sensitive data such as /etc/passwd. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/a6b521cf-258c-41c0-9edb-d8ef976abb2a
CVE ID: CVE-2025-6985 State: PUBLISHED Published: 2025-10-06T17:58:29.078Z Last Updated: 2025-10-06T18:10:28.811Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: langchain-ai Products: langchain-ai/langchain Problem Types: CWE-611 Description: The HTMLSectionSplitter class in langchain-text-splitters version 0.3.8 is vulnerable to XML External Entity (XXE) attacks due to unsafe XSLT parsing. This vulnerability arises because the class allows the use of arbitrary XSLT stylesheets, which are parsed using lxml.etree.parse() and lxml.etree.XSLT() without any hardening measures. In lxml versions up to 4.9.x, external entities are resolved by default, allowing attac
without any hardening measures. In lxml versions up to 4.9.x, external entities are resolved by default, allowing attackers to read arbitrary local files or perform outbound HTTP(S) fetches. In lxml versions 5.0 and above, while entity expansion is disabled, the XSLT document() function can still read any URI unless XSLTAccessControl is applied. This vulnerability allows remote attackers to gain read-only access to any file the LangChain process can reach, including sensitive files such as SSH keys, environment files, source code, or cloud metadata. No authentication, special privileges, or user interaction are required, and the issue is exploitable in default deployments that enable custom
ial privileges, or user interaction are required, and the issue is exploitable in default deployments that enable custom XSLT. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/cf78abbb-df3b-43de-b6ee-132b73ff8331
CVE ID: CVE-2025-6986 State: PUBLISHED Published: 2025-08-06T01:45:13.173Z Last Updated: 2025-08-06T15:57:01.838Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: ninjateam Products: FileBird – WordPress Media Library Folders & File Manager Problem Types: CWE-89 Description: The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to SQL Injection via the 'search' parameter in all versions up to, and including, 6.4.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Author-level access and abo
paration on the existing SQL query. This makes it possible for authenticated attackers, with Author-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ce70da8e-7273-4eca-b187-2db7c36f1a50?source=cve - https://plugins.trac.wordpress.org/browser/filebird/trunk/includes/Controller/FolderController.php - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3338922%40filebird&new=3338922%40filebird&sfp_email=&sfph_mail=#file11
CVE ID: CVE-2025-6987 State: PUBLISHED Published: 2025-07-26T06:43:21.917Z Last Updated: 2025-07-28T16:04:39.330Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: mdempfle Products: Advanced iFrame Problem Types: CWE-79 Description: The Advanced iFrame plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'advanced_iframe' shortcode in all versions up to, and including, 2025.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user ac
, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/6acb99eb-d61c-4d1f-b399-32db07c7e3e7?source=cve - https://plugins.trac.wordpress.org/browser/advanced-iframe/trunk/advanced-iframe.php#L725 - https://plugins.trac.wordpress.org/browser/advanced-iframe/trunk/includes/advanced-iframe-main-read-config.php - https://plugins.trac.wordpress.org/browser/advanced-iframe/trunk/includes/advanced-iframe-main-iframe.php#L419 - https://plugins.trac.wordpress.org/changeset/3329909/advanced-if
e/trunk/includes/advanced-iframe-main-iframe.php#L419 - https://plugins.trac.wordpress.org/changeset/3329909/advanced-iframe/trunk/includes/advanced-iframe-main-read-config.php
CVE ID: CVE-2025-6988 State: PUBLISHED Published: 2025-11-01T07:30:04.897Z Last Updated: 2025-11-03T13:30:11.443Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: hogash Products: KALLYAS - Creative eCommerce Multi-Purpose WordPress Theme Problem Types: CWE-79 Description: The kallyas theme for WordPress is vulnerable to Stored Cross-Site Scripting via several of the plugin's shortcodes in all versions up to, and including, 4.23.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will
or authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/89f4d353-bb6a-4520-bb3e-a0121fb4bf9b?source=cve - https://my.hogash.com/changelog_category/kallyas-wordpress-theme/#4-24-0