Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ficant attempted out-of-bounds reads. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2024:1785 - https://access.redhat.com/errata/RHSA-2024:2036 - https://access.redhat.com/errata/RHSA-2024:2037 - https://access.redhat.com/errata/RHSA-2024:2038 - https://access.redhat.com/errata/RHSA-2024:2039 - https://access.redhat.com/errata/RHSA-2024:2040 - https://access.redhat.com/errata/RHSA-2024:2041 - https://access.redhat.com/errata/RHSA-2024:2042 - https://access.redhat.com/errata/RHSA-2024:2080 - https://access.redhat.com/errata/RHSA-2024:2616 - https://access.redhat.com/errata/RHSA-2024:3258 - https://access.redhat.
tps://access.redhat.com/errata/RHSA-2024:2616 - https://access.redhat.com/errata/RHSA-2024:3258 - https://access.redhat.com/errata/RHSA-2024:3261 - https://access.redhat.com/errata/RHSA-2024:3343 - https://access.redhat.com/errata/RHSA-2024:9093 - https://access.redhat.com/errata/RHSA-2024:9122 - https://access.redhat.com/errata/RHSA-2025:12751 - https://access.redhat.com/security/cve/CVE-2024-31081 - https://bugzilla.redhat.com/show_bug.cgi?id=2271998
CVE ID: CVE-2024-31082 State: PUBLISHED Published: 2024-04-04T13:48:34.893Z Last Updated: 2025-11-20T07:19:02.338Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 Problem Types: CWE-126 Description: A heap-based buffer over-read vulnerability was found in the X.org server's ProcAppleDRICreatePixmap() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endiann
ally leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker's inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2024-31082 - https://bugzilla.re
ment: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2024-31082 - https://bugzilla.redhat.com/show_bug.cgi?id=2271999 - https://lists.x.org/archives/xorg-announce/2024-April/003497.html
CVE ID: CVE-2024-31083 State: PUBLISHED Published: 2024-04-05T12:04:49.414Z Last Updated: 2025-11-20T07:19:07.523Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services fo
Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Extended Update Support, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Extended Update Support, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 Problem Types: CWE-416 Description: A use-after-free vulnerability was found in the ProcRenderAddGlyphs() function of Xorg servers. This issue occurs when AllocateGlyph() is called to store new glyphs sent by the client to the X server, potentially resulting in m
occurs when AllocateGlyph() is called to store new glyphs sent by the client to the X server, potentially resulting in multiple entries pointing to the same non-refcounted glyphs. Consequently, ProcRenderAddGlyphs() may free a glyph, leading to a use-after-free scenario when the same glyph pointer is subsequently accessed. This flaw allows an authenticated attacker to execute arbitrary code on the system by sending a specially crafted request. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2024:1785 - https://access.redhat.com/errata/RHSA-2024:2036 - https://access.redhat.com/errata/RHSA-2024:2037 - https://acce
:1785 - https://access.redhat.com/errata/RHSA-2024:2036 - https://access.redhat.com/errata/RHSA-2024:2037 - https://access.redhat.com/errata/RHSA-2024:2038 - https://access.redhat.com/errata/RHSA-2024:2039 - https://access.redhat.com/errata/RHSA-2024:2040 - https://access.redhat.com/errata/RHSA-2024:2041 - https://access.redhat.com/errata/RHSA-2024:2042 - https://access.redhat.com/errata/RHSA-2024:2080 - https://access.redhat.com/errata/RHSA-2024:2616 - https://access.redhat.com/errata/RHSA-2024:3258 - https://access.redhat.com/errata/RHSA-2024:3261 - https://access.redhat.com/errata/RHSA-2024:3343 - https://access.redhat.com/errata/RHSA-2024:9093 - https://access.redhat.com/errata/RHSA-2024
com/errata/RHSA-2024:3343 - https://access.redhat.com/errata/RHSA-2024:9093 - https://access.redhat.com/errata/RHSA-2024:9122 - https://access.redhat.com/errata/RHSA-2025:12751 - https://access.redhat.com/security/cve/CVE-2024-31083 - https://bugzilla.redhat.com/show_bug.cgi?id=2272000
CVE ID: CVE-2024-31084 State: PUBLISHED Published: 2024-03-31T19:35:50.256Z Last Updated: 2024-08-02T01:46:04.686Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Pulsar Web Design Products: Weekly Class Schedule Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pulsar Web Design Weekly Class Schedule allows Reflected XSS.This issue affects Weekly Class Schedule: from n/a through 3.19. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/weekly-class-schedule/wordpress-weekly-class-schedule-pl
er: References: - https://patchstack.com/database/vulnerability/weekly-class-schedule/wordpress-weekly-class-schedule-plugin-3-19-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-31085 State: PUBLISHED Published: 2024-03-31T19:34:22.349Z Last Updated: 2024-08-02T01:46:04.605Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Rob Marsh, SJ Products: Post-Plugin Library Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rob Marsh, SJ Post-Plugin Library allows Reflected XSS.This issue affects Post-Plugin Library: from n/a through 2.6.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/post-plugin-library/wordpress-post-plugin-library-plugin-2-6-2-1-re
ces: - https://patchstack.com/database/vulnerability/post-plugin-library/wordpress-post-plugin-library-plugin-2-6-2-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-31086 State: PUBLISHED Published: 2024-04-15T07:46:20.046Z Last Updated: 2024-08-02T01:46:04.314Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Venugopal Products: Change default login logo,url and title Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Venugopal Change default login logo,url and title allows Cross-Site Scripting (XSS).This issue affects Change default login logo,url and title: from n/a through 2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/change-default-login-logo-url-and-title/wordpress-change
er: References: - https://patchstack.com/database/vulnerability/change-default-login-logo-url-and-title/wordpress-change-default-login-logo-url-and-title-plugin-2-0-csrf-to-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-31087 State: PUBLISHED Published: 2024-03-31T19:32:04.962Z Last Updated: 2024-08-02T01:46:04.581Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Joel Starnes Products: pageMash > Page Management Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Joel Starnes pageMash > Page Management allows Reflected XSS.This issue affects pageMash > Page Management: from n/a through 1.3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/pagemash/wordpress-pagemash-plugin-1-3-0-cross-sit
ontainer: References: - https://patchstack.com/database/vulnerability/pagemash/wordpress-pagemash-plugin-1-3-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-31089 State: PUBLISHED Published: 2024-03-31T19:30:05.663Z Last Updated: 2024-08-02T01:46:04.535Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Techblissonline.com (Rajesh) Products: Platinum SEO Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Techblissonline.Com (Rajesh) Platinum SEO allows Stored XSS.This issue affects Platinum SEO: from n/a through 2.4.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/platinum-seo-pack/wordpress-platinum-seo-plugin-2-4-0-cross-s
eferences: - https://patchstack.com/database/vulnerability/platinum-seo-pack/wordpress-platinum-seo-plugin-2-4-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-31090 State: PUBLISHED Published: 2024-03-31T19:27:37.254Z Last Updated: 2024-08-02T01:46:04.400Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: 荒野无灯 Products: Hacklog Down As PDF Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 荒野无灯 Hacklog Down As PDF allows Reflected XSS.This issue affects Hacklog Down As PDF: from n/a through 2.3.6. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/down-as-pdf/wordpress-hacklog-down-as-pdf-plugin-2-3-6-cross-site-scripting-xss-vulnera
stack.com/database/vulnerability/down-as-pdf/wordpress-hacklog-down-as-pdf-plugin-2-3-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-31091 State: PUBLISHED Published: 2024-03-31T19:25:19.996Z Last Updated: 2024-08-02T01:46:04.481Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: SparkWeb Interactive, Inc. Products: Custom Field Bulk Editor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SparkWeb Interactive, Inc. Custom Field Bulk Editor allows Reflected XSS.This issue affects Custom Field Bulk Editor: from n/a through 1.9.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/custom-field-bulk-editor/wor
hment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/custom-field-bulk-editor/wordpress-custom-field-bulk-editor-plugin-1-9-1-cross-site-scripting-vulnerability?_s_id=cve
CVE ID: CVE-2024-31092 State: PUBLISHED Published: 2024-03-31T19:20:46.418Z Last Updated: 2024-08-02T01:46:04.479Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Philip M. Hofer (Frumph) Products: Comic Easel Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Philip M. Hofer (Frumph) Comic Easel allows Reflected XSS.This issue affects Comic Easel: from n/a through 1.15. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/comic-easel/wordpress-comic-easel-plugin-1-15-cross-site-scripting-xss-v
- https://patchstack.com/database/vulnerability/comic-easel/wordpress-comic-easel-plugin-1-15-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-31093 State: PUBLISHED Published: 2024-04-15T07:45:07.415Z Last Updated: 2024-08-02T01:46:04.412Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Kaloyan K. Tsvetkov Products: Broken Images Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Kaloyan K. Tsvetkov Broken Images allows Cross-Site Scripting (XSS).This issue affects Broken Images: from n/a through 0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/wp-broken-images/wordpress-broken-images-plugin-0-2-csrf-to-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-31094 State: PUBLISHED Published: 2024-03-31T18:03:49.691Z Last Updated: 2025-03-25T14:35:59.484Z Vendors: Filter Custom Fields & Taxonomies Light Products: Filter Custom Fields & Taxonomies Light Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in Filter Custom Fields & Taxonomies Light.This issue affects Filter Custom Fields & Taxonomies Light: from n/a through 1.05. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/filter-custom-fields-taxonomies-light/wordpress-filter-custom-fields-taxonomies-light-plugin-1-05-php-object-injection-vulnerability?_s_id=c
-taxonomies-light/wordpress-filter-custom-fields-taxonomies-light-plugin-1-05-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-31095 State: PUBLISHED Published: 2024-03-31T18:21:53.982Z Last Updated: 2025-03-25T14:35:31.488Z Vendors: Ricard Torres Products: Thumbs Rating Problem Types: CWE-639 Description: Authorization Bypass Through User-Controlled Key vulnerability in Ricard Torres Thumbs Rating.This issue affects Thumbs Rating: from n/a through 5.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/thumbs-rating/wordpress-thumbs-rating-plugin-5-1-0-insecure-direct-object-references-idor-vulnerability?_s_id=cve
CVE ID: CVE-2024-31096 State: PUBLISHED Published: 2024-03-31T18:29:03.838Z Last Updated: 2024-08-02T01:46:04.316Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: kopatheme Products: Nictitate Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in kopatheme Nictitate.This issue affects Nictitate: from n/a through 1.1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/nictitate/wordpress-nictitate-theme-1-1-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-31097 State: PUBLISHED Published: 2024-03-31T19:18:52.909Z Last Updated: 2024-08-02T01:46:04.614Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Stephan Spencer Products: SEO Title Tag Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stephan Spencer SEO Title Tag allows Reflected XSS.This issue affects SEO Title Tag: from n/a through 3.5.9. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/seo-title-tag/wordpress-seo-title-tag-plugin-3-5-9-reflected-cross-site-scripting-x
atchstack.com/database/vulnerability/seo-title-tag/wordpress-seo-title-tag-plugin-3-5-9-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-31098 State: PUBLISHED Published: 2024-06-09T08:58:36.101Z Last Updated: 2024-08-02T01:46:04.531Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: Mr.Ebabi Products: New Order Notification for Woocommerce Problem Types: CWE-862 Description: Missing Authorization vulnerability in Mr.Ebabi New Order Notification for Woocommerce.This issue affects New Order Notification for Woocommerce: from n/a through 2.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/new-order-notification-for-woocommerce/wordpress-new-order-notification-for-woocommerce-plugin-2-0-2-brok
/vulnerability/new-order-notification-for-woocommerce/wordpress-new-order-notification-for-woocommerce-plugin-2-0-2-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-31099 State: PUBLISHED Published: 2024-04-01T14:07:10.063Z Last Updated: 2024-08-02T01:46:04.455Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: Averta Products: Shortcodes and extra features for Phlox theme Problem Types: CWE-862 Description: Missing Authorization vulnerability in Averta Shortcodes and extra features for Phlox theme auxin-elements.This issue affects Shortcodes and extra features for Phlox theme: from n/a through 2.15.7. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/auxin-elements/wordpress-phlox-core-elements-plugin-2-15-5-broken-acce
: - https://patchstack.com/database/vulnerability/auxin-elements/wordpress-phlox-core-elements-plugin-2-15-5-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-31100 State: PUBLISHED Published: 2024-03-31T18:26:31.355Z Last Updated: 2024-08-08T18:44:54.460Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Festi-Team Products: Popup Cart Lite for WooCommerce Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Festi-Team Popup Cart Lite for WooCommerce.This issue affects Popup Cart Lite for WooCommerce: from n/a through 1.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/woocommerce-woocart-popup-lite/wordpress-popup-cart-lite-for-woocommerce-plugin-1-1-cross-site-request-forgery
erability/woocommerce-woocart-popup-lite/wordpress-popup-cart-lite-for-woocommerce-plugin-1-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-31101 State: PUBLISHED Published: 2024-03-31T19:14:51.917Z Last Updated: 2024-08-02T01:46:04.515Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: August Infotech Products: AI Twitter Feeds (Twitter widget & shortcode) Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in August Infotech AI Twitter Feeds (Twitter widget & shortcode) allows Stored XSS.This issue affects AI Twitter Feeds (Twitter widget & shortcode): from n/a through 2.4. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vuln
onal Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/ai-twitter-feeds/wordpress-ai-twitter-feeds-twitter-widget-shortcode-plugin-2-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-31102 State: PUBLISHED Published: 2024-03-31T19:12:31.280Z Last Updated: 2024-08-02T01:46:04.407Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Scimone Ignazio Products: Prenotazioni Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Scimone Ignazio Prenotazioni allows Stored XSS.This issue affects Prenotazioni: from n/a through 1.7.4. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/prenotazioni/wordpress-prenotazioni-plugin-1-7-4-cross-site-scripting-xss-vulnerability
stack.com/database/vulnerability/prenotazioni/wordpress-prenotazioni-plugin-1-7-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-31103 State: PUBLISHED Published: 2024-03-31T19:10:12.859Z Last Updated: 2024-08-02T01:46:04.128Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Kanban for WordPress Products: Kanban Boards for WordPress Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kanban for WordPress Kanban Boards for WordPress allows Reflected XSS.This issue affects Kanban Boards for WordPress: from n/a through 2.5.21. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/kanban/wordpress-kanban-boards
ent: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/kanban/wordpress-kanban-boards-for-wordpress-plugin-2-5-21-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-31104 State: PUBLISHED Published: 2024-03-31T19:08:18.633Z Last Updated: 2024-08-02T01:46:04.580Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: GetResponse Products: GetResponse for WordPress Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GetResponse GetResponse for WordPress allows Stored XSS.This issue affects GetResponse for WordPress: from n/a through 5.5.33. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/getresponse-integration/wordpress-getresponse-for-wordp
ner: References: - https://patchstack.com/database/vulnerability/getresponse-integration/wordpress-getresponse-for-wordpress-plugin-5-5-33-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-31105 State: PUBLISHED Published: 2024-04-02T17:33:57.578Z Last Updated: 2024-08-02T01:46:04.559Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Adam Bowen Products: Tax Rate Upload Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Adam Bowen Tax Rate Upload allows Reflected XSS.This issue affects Tax Rate Upload: from n/a through 2.4.5. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/tax-rate-upload/wordpress-tax-rate-upload-plugin-2-4-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-31106 State: PUBLISHED Published: 2024-03-31T19:06:47.446Z Last Updated: 2024-08-02T01:46:04.596Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Yooslider Products: Yoo Slider Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Yooslider Yoo Slider allows Reflected XSS.This issue affects Yoo Slider: from n/a through 2.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/yoo-slider/wordpress-yoo-slider-image-slider-video-slider-plugin-2-1-1-reflected-cross-site-scripting-xs
e/vulnerability/yoo-slider/wordpress-yoo-slider-image-slider-video-slider-plugin-2-1-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve