Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
icient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0e230f9f-5eda-4362-973b-ada9cf425697?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3040242%40archivist-custom-archive-templates&new=3040242%40archivist-custom-archive-templates&sfp_email=&sfph_mail=
CVE ID: CVE-2024-1811 State: PUBLISHED Published: 2024-03-20T12:38:40.702Z Last Updated: 2025-03-20T14:27:27.934Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: OpenText Products: ArcSight Platform Problem Types: Remote Vulnerability Description: A potential vulnerability has been identified in OpenText ArcSight Platform. The vulnerability could be remotely exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://portal.microfocus.com/s/article/KM000027383
CVE ID: CVE-2024-1812 State: PUBLISHED Published: 2024-04-09T18:59:24.410Z Last Updated: 2024-08-01T18:48:21.981Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: wpeverest Products: Everest Forms – Build Contact Forms, Surveys, Polls, Quizzes, Newsletter & Application Forms, and Many More with Ease! Problem Types: CWE-918 Server-Side Request Forgery (SSRF) Description: The Everest Forms plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.0.7 via the 'font_url' parameter. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and
ible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d4561441-d147-4c02-a837-c1656e17627d?source=cve - https://plugins.trac.wordpress.org/changeset/3049743/everest-forms
CVE ID: CVE-2024-1813 State: PUBLISHED Published: 2024-04-09T18:59:06.091Z Last Updated: 2024-08-01T18:48:22.020Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: presstigers Products: Simple Job Board Problem Types: CWE-502 Deserialization of Untrusted Data Description: The Simple Job Board plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.11.0 via deserialization of untrusted input in the job_board_applicant_list_columns_value function. This makes it possible for unauthenticated attackers to inject a PHP Object. If a POP chain is present via an additional plugin or theme installed on the target system, it c
to inject a PHP Object. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code when a submitted job application is viewed. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/89584034-4a93-42a6-8fef-55dc3895c45c?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3051715%40simple-job-board&old=3038476%40simple-job-board&sfp_email=&sfph_mail=
CVE ID: CVE-2024-1814 State: PUBLISHED Published: 2024-05-23T11:02:38.904Z Last Updated: 2024-08-01T18:48:22.115Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: brainstormforce Products: Spectra – WordPress Gutenberg Blocks Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Spectra – WordPress Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Testimonial block in all versions up to, and including, 2.12.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attac
cient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d9ed939c-dc9c-46e8-9b23-0a3e5733e8d5?source=cve - https://plugins.trac.wordpress.org/changeset/3075043/ultimate-addons-for-gutenberg
CVE ID: CVE-2024-1815 State: PUBLISHED Published: 2024-05-23T11:02:37.360Z Last Updated: 2024-08-01T18:48:21.997Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: brainstormforce Products: Spectra – WordPress Gutenberg Blocks Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Spectra – WordPress Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Gallery block in all versions up to, and including, 2.12.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated att
ficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/1cd877e6-e000-437d-ba9f-0640350277e4?source=cve - https://plugins.trac.wordpress.org/changeset/3075043/ultimate-addons-for-gutenberg
CVE ID: CVE-2024-1816 State: PUBLISHED Published: 2024-06-26T23:31:50.436Z Last Updated: 2024-08-29T15:04:55.560Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: GitLab Products: GitLab Problem Types: CWE-400 Description: An issue was discovered in GitLab CE/EE affecting all versions starting from 12.0 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows for an attacker to cause a denial of service using a crafted OpenAPI file. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/442852 - https://hackerone.com/reports/23707
gram Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/442852 - https://hackerone.com/reports/2370737
CVE ID: CVE-2024-1817 State: PUBLISHED Published: 2024-02-23T14:00:10.832Z Last Updated: 2024-08-14T19:06:50.941Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Demososo Products: DM Enterprise Website Building System Problem Types: CWE-287 Description: A vulnerability has been found in Demososo DM Enterprise Website Building System up to 2022.8 and classified as critical. Affected by this vulnerability is the function dmlogin of the file indexDM_load.php of the component Cookie Handler. The manipulation of the argument is_admin with the input y leads to improper authentication. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. T
per authentication. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-254605 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.254605 - https://vuldb.com/?ctiid.254605 - https://note.zhaoj.in/share/8gO8yxJ8aN51
CVE ID: CVE-2024-1818 State: PUBLISHED Published: 2024-02-23T14:31:04.839Z Last Updated: 2024-08-01T18:56:20.677Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: CodeAstro Products: Membership Management System Problem Types: CWE-434 Description: A vulnerability was found in CodeAstro Membership Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /uploads/ of the component Logo Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-254606 is the identifier assigned to this vulnerability. Additional Analyst Notes: -
to the public and may be used. VDB-254606 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.254606 - https://vuldb.com/?ctiid.254606 - https://drive.google.com/file/d/1EqHqZXfxhNkrDXNfx7wglpxaa5ZlPbx4/view?usp=drive_link
CVE ID: CVE-2024-1819 State: PUBLISHED Published: 2024-02-23T14:31:06.592Z Last Updated: 2024-08-28T17:50:17.688Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: CodeAstro Products: Membership Management System Problem Types: CWE-434 Description: A vulnerability was found in CodeAstro Membership Management System 1.0. It has been classified as critical. This affects an unknown part of the component Add Members Tab. The manipulation of the argument Member Photo leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-254607. Additional Analyst
closed to the public and may be used. The associated identifier of this vulnerability is VDB-254607. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.254607 - https://vuldb.com/?ctiid.254607 - https://drive.google.com/file/d/12sNvBJ7wYjZ-2NBLdyG4e-L8sOO-zrbK/view?usp=sharing
CVE ID: CVE-2024-1820 State: PUBLISHED Published: 2024-02-23T15:00:12.503Z Last Updated: 2024-08-08T20:33:11.583Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: Crime Reporting System Problem Types: CWE-89 Description: A vulnerability was found in code-projects Crime Reporting System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file inchargelogin.php. The manipulation of the argument email/password leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-254608. Additional Analyst Notes: - CVE Program Con
public and may be used. The identifier of this vulnerability is VDB-254608. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.254608 - https://vuldb.com/?ctiid.254608 - https://github.com/jxp98/VulResearch/blob/main/2024/02/1Crime%20Reporting%20System%20-%20SQL%20Injection.md
CVE ID: CVE-2024-1821 State: PUBLISHED Published: 2024-02-23T15:00:14.130Z Last Updated: 2024-08-01T18:56:20.675Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: code-projects Products: Crime Reporting System Problem Types: CWE-89 Description: A vulnerability was found in code-projects Crime Reporting System 1.0. It has been rated as critical. This issue affects some unknown processing of the file police_add.php. The manipulation of the argument police_name/police_id/police_spec/password leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier VDB-254609 was assigned to this vulnerability. Additional Analyst Notes:
d to the public and may be used. The identifier VDB-254609 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.254609 - https://vuldb.com/?ctiid.254609 - https://github.com/jxp98/VulResearch/blob/main/2024/02/2Crime%20Reporting%20System%20-%20SQL%20Injection-police_add.md
CVE ID: CVE-2024-1822 State: PUBLISHED Published: 2024-02-23T15:31:05.339Z Last Updated: 2024-08-01T18:56:21.059Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: PHPGurukul Products: Tourism Management System Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in PHPGurukul Tourism Management System 1.0. Affected is an unknown function of the file user-bookings.php. The manipulation of the argument Full Name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-254610 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA AD
public and may be used. VDB-254610 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.254610 - https://vuldb.com/?ctiid.254610 - https://drive.google.com/file/d/1ulzFlRqsex39dDUOFU2LbmphrQblSAwn/view?usp=drive_link
CVE ID: CVE-2024-1823 State: PUBLISHED Published: 2024-02-23T15:31:11.732Z Last Updated: 2024-08-08T20:56:58.490Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: CodeAstro Products: Simple Voting System Problem Types: CWE-284 Description: A vulnerability classified as critical was found in CodeAstro Simple Voting System 1.0. Affected by this vulnerability is an unknown functionality of the file users.php of the component Backend. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-254611. Additional Analyst
sclosed to the public and may be used. The associated identifier of this vulnerability is VDB-254611. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.254611 - https://vuldb.com/?ctiid.254611 - https://docs.qq.com/doc/DYll0ZEFKcUdGYlNr
CVE ID: CVE-2024-1824 State: PUBLISHED Published: 2024-02-23T16:00:12.858Z Last Updated: 2024-08-14T19:04:28.647Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: CodeAstro Products: House Rental Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in CodeAstro House Rental Management System 1.0. Affected by this issue is some unknown functionality of the file signing.php. The manipulation of the argument uname/password leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-254612. Additional Analyst Note
een disclosed to the public and may be used. The identifier of this vulnerability is VDB-254612. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.254612 - https://vuldb.com/?ctiid.254612 - https://docs.qq.com/doc/DYk9QcHVFRENObWtj
CVE ID: CVE-2024-1825 State: PUBLISHED Published: 2024-02-23T16:31:08.110Z Last Updated: 2024-08-01T18:56:20.962Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: CodeAstro Products: House Rental Management System Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in CodeAstro House Rental Management System 1.0. This affects an unknown part of the component User Registration Page. The manipulation of the argument address with the input <img src="1" onerror="console.log(1)"> leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-254
le to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-254613 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.254613 - https://vuldb.com/?ctiid.254613 - https://docs.qq.com/doc/DYndSY3V4UXh4dHFC
CVE ID: CVE-2024-1826 State: PUBLISHED Published: 2024-02-23T17:00:11.611Z Last Updated: 2024-08-27T14:18:12.656Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: Library System Problem Types: CWE-89 Description: A vulnerability has been found in code-projects Library System 1.0 and classified as critical. This vulnerability affects unknown code of the file Source/librarian/user/student/login.php. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-254614 is the identifier assigned to this vulnerability. Additional Analyst Notes: -
to the public and may be used. VDB-254614 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.254614 - https://vuldb.com/?ctiid.254614 - https://github.com/jxp98/VulResearch/blob/main/2024/02/3Library%20System%20In%20PHP%20-%20SQL%20Injection-student_login.md
CVE ID: CVE-2024-1827 State: PUBLISHED Published: 2024-02-23T17:31:04.049Z Last Updated: 2024-08-08T20:32:08.460Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: Library System Problem Types: CWE-89 Description: A vulnerability was found in code-projects Library System 1.0 and classified as critical. This issue affects some unknown processing of the file Source/librarian/user/teacher/login.php. The manipulation of the argument username/password leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-254615. Additional Analyst Notes: -
o the public and may be used. The associated identifier of this vulnerability is VDB-254615. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.254615 - https://vuldb.com/?ctiid.254615 - https://github.com/jxp98/VulResearch/blob/main/2024/02/3.2Library%20System%20In%20PHP%20-%20SQL%20Injection-teacher_login.md
CVE ID: CVE-2024-1828 State: PUBLISHED Published: 2024-02-23T18:00:12.764Z Last Updated: 2024-08-27T20:46:18.494Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: Library System Problem Types: CWE-89 Description: A vulnerability was found in code-projects Library System 1.0. It has been classified as critical. Affected is an unknown function of the file Source/librarian/user/teacher/registration.php. The manipulation of the argument email/idno/phone/username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-254616. Additional Analys
has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-254616. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.254616 - https://vuldb.com/?ctiid.254616 - https://github.com/jxp98/VulResearch/blob/main/2024/02/3.3Library%20System%20In%20PHP%20-%20SQL%20Injection-teacher_reg.md
CVE ID: CVE-2024-1829 State: PUBLISHED Published: 2024-02-23T18:00:14.601Z Last Updated: 2024-08-01T18:56:22.377Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: Library System Problem Types: CWE-89 Description: A vulnerability was found in code-projects Library System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file Source/librarian/user/student/registration.php. The manipulation of the argument email/regno/phone/username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-254617 was assigned to this vulne
tely. The exploit has been disclosed to the public and may be used. The identifier VDB-254617 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.254617 - https://vuldb.com/?ctiid.254617 - https://github.com/jxp98/VulResearch/blob/main/2024/02/3.4Library%20System%20In%20PHP%20-%20SQL%20Injection-student_reg.md
CVE ID: CVE-2024-1830 State: PUBLISHED Published: 2024-02-23T18:31:04.107Z Last Updated: 2024-08-01T18:56:22.046Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: Library System Problem Types: CWE-89 Description: A vulnerability was found in code-projects Library System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file Source/librarian/user/student/lost-password.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-254618 is the identifier assigned to this vulnerability. Additional Analyst N
sclosed to the public and may be used. VDB-254618 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.254618 - https://vuldb.com/?ctiid.254618 - https://github.com/jxp98/VulResearch/blob/main/2024/02/3.5Library%20System%20In%20PHP%20-%20SQL%20Injection-student_lostpass.md
CVE ID: CVE-2024-1831 State: PUBLISHED Published: 2024-02-23T19:00:13.911Z Last Updated: 2024-08-01T18:56:22.214Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Complete File Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in SourceCodester Complete File Management System 1.0. Affected is an unknown function of the file users/index.php of the component Login Form. The manipulation of the argument username with the input torada%27+or+%271%27+%3D+%271%27+--+- leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. V
injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-254622 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.254622 - https://vuldb.com/?ctiid.254622 - https://toradah.notion.site/Login-Bypass-via-SQL-injection-b1e45264f6104bc696836ade6e60fb98?pvs=4
CVE ID: CVE-2024-1832 State: PUBLISHED Published: 2024-02-23T19:31:05.282Z Last Updated: 2024-08-12T15:56:36.420Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Complete File Management System Problem Types: CWE-89 Description: A vulnerability has been found in SourceCodester Complete File Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/ of the component Admin Login Form. The manipulation of the argument username with the input torada%27+or+%271%27+%3D+%271%27+--+- leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and m
%27+--+- leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-254623. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.254623 - https://vuldb.com/?ctiid.254623 - https://toradah.notion.site/SQL-Injection-via-Admin-Login-Form-7372893848cb4bb996ae2c9effb0266a?pvs=25