Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-32327 State: PUBLISHED Published: 2024-04-18T00:00:00 Last Updated: 2024-08-02T02:06:44.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK N300RT V2.1.8-B20201030.1539 contains a Store Cross-site scripting (XSS) vulnerability in Port Forwarding under the Firewall Page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.totolink.net/home/menu/newstpl/menu_newstpl/products/id/154.html - https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/N300RT/XSS_5_Port_Forwarding/README.md
CVE ID: CVE-2024-32332 State: PUBLISHED Published: 2024-04-18T00:00:00 Last Updated: 2024-08-02T02:06:44.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK N300RT V2.1.8-B20201030.1539 contains a Store Cross-site scripting (XSS) vulnerability in WDS Settings under the Wireless Page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.totolink.net/home/menu/newstpl/menu_newstpl/products/id/154.html - https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/N300RT/XSS_1_WDS_Settings/README.md
CVE ID: CVE-2024-32333 State: PUBLISHED Published: 2024-04-18T00:00:00 Last Updated: 2024-08-02T02:06:44.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK N300RT V2.1.8-B20201030.1539 contains a Store Cross-site scripting (XSS) vulnerability in MAC Filtering under the Firewall Page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.totolink.net/home/menu/newstpl/menu_newstpl/products/id/154.html - https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/N300RT/XSS_3_MAC_Filtering/README.md
CVE ID: CVE-2024-32334 State: PUBLISHED Published: 2024-04-18T00:00:00 Last Updated: 2024-08-02T02:06:43.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK N300RT V2.1.8-B20201030.1539 contains a Store Cross-site scripting (XSS) vulnerability in IP/Port Filtering under the Firewall Page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.totolink.net/home/menu/newstpl/menu_newstpl/products/id/154.html - https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/N300RT/XSS_4_IP_Port_Filtering/README.md
CVE ID: CVE-2024-32335 State: PUBLISHED Published: 2024-04-18T00:00:00 Last Updated: 2024-08-02T02:06:44.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK N300RT V2.1.8-B20201030.1539 contains a Store Cross-site scripting (XSS) vulnerability in Access Control under the Wireless Page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.totolink.net/home/menu/newstpl/menu_newstpl/products/id/154.html - https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/N300RT/XSS_2_Access_Control/README.md
CVE ID: CVE-2024-32337 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-08-02T02:06:44.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the Settings section of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the ADMIN LOGIN URL parameter under the Security module. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/adiapera/xss_security_wondercms_3.4.3
CVE ID: CVE-2024-32338 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-08-02T02:06:44.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the Settings section of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the PAGE TITLE parameter under the Current Page module. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/adiapera/xss_current_page_wondercms_3.4.3
CVE ID: CVE-2024-32339 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-08-02T02:06:44.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the HOW TO page of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into any of the parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/adiapera/xss_how_to_page_wondercms_3.4.3
CVE ID: CVE-2024-32340 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-08-14T20:22:07.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the Settings section of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the WEBSITE TITLE parameter under the Menu module. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/adiapera/xss_menu_page_wondercms_3.4.3
CVE ID: CVE-2024-32341 State: PUBLISHED Published: 2024-04-17T00:00:00.000Z Last Updated: 2025-03-13T18:03:49.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Home page of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into any of the parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/adiapera/xss_home_page_wondercms_3.4.3
CVE ID: CVE-2024-32342 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-08-02T02:06:44.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the Create Page of Boid CMS v2.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Permalink parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/adiapera/xss_create_boidcms_2.1.0
CVE ID: CVE-2024-32343 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-08-02T02:06:44.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the Create Page of Boid CMS v2.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Content parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/adiapera/xss_create2_boidcms_2.1.0
CVE ID: CVE-2024-32344 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-08-02T02:06:44.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Edit parameter under the Language section. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/adiapera/xss_language_cmsimple_5.15/blob/main/README.md
CVE ID: CVE-2024-32345 State: PUBLISHED Published: 2024-04-17T00:00:00 Last Updated: 2024-11-22T14:15:38.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Configuration parameter under the Language section. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/adiapera/xss_language_cmsimple_5.15
CVE ID: CVE-2024-32349 State: PUBLISHED Published: 2024-05-14T15:52:55.912Z Last Updated: 2025-02-13T15:48:02.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an authenticated remote command execution (RCE) vulnerability via the "mtu" parameters in the "cstecgi.cgi" binary. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.totolink.net/ - https://github.com/1s1and123/Vulnerabilities/blob/main/device/ToToLink/X5000R/TOTOLink_X5000R_RCE.md
CVE ID: CVE-2024-32350 State: PUBLISHED Published: 2024-05-14T15:55:10.699Z Last Updated: 2025-02-13T15:48:03.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an authenticated remote command execution (RCE) vulnerability via the "ipsecPsk" parameter in the "cstecgi.cgi" binary. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.totolink.net/ - https://github.com/1s1and123/Vulnerabilities/blob/main/device/ToToLink/X5000R/TOTOLink_X5000R_RCE.md
CVE ID: CVE-2024-32351 State: PUBLISHED Published: 2024-05-14T15:56:21.177Z Last Updated: 2025-02-13T15:48:04.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an authenticated remote command execution (RCE) vulnerability via the "mru" parameter in the "cstecgi.cgi" binary. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.totolink.net/ - https://github.com/1s1and123/Vulnerabilities/blob/main/device/ToToLink/X5000R/TOTOLink_X5000R_RCE.md
CVE ID: CVE-2024-32352 State: PUBLISHED Published: 2024-05-14T15:57:23.755Z Last Updated: 2025-02-13T15:48:04.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an authenticated remote command execution (RCE) vulnerability via the "ipsecL2tpEnable" parameter in the "cstecgi.cgi" binary. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.totolink.net/ - https://github.com/1s1and123/Vulnerabilities/blob/main/device/ToToLink/X5000R/TOTOLink_X5000R_RCE.md
CVE ID: CVE-2024-32353 State: PUBLISHED Published: 2024-05-14T15:58:27.613Z Last Updated: 2025-02-13T15:48:05.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain a command injection vulnerability via the 'port' parameter in the setSSServer function at /cgi-bin/cstecgi.cgi. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.totolink.net/ - https://github.com/1s1and123/Vulnerabilities/blob/main/device/ToToLink/X5000R/TOTOLink_X5000R_RCE.md
CVE ID: CVE-2024-32354 State: PUBLISHED Published: 2024-05-14T15:59:27.126Z Last Updated: 2025-02-13T15:48:05.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain a command injection vulnerability via the 'timeout' parameter in the setSSServer function at /cgi-bin/cstecgi.cgi. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.totolink.net/ - https://github.com/1s1and123/Vulnerabilities/blob/main/device/ToToLink/X5000R/TOTOLink_X5000R_RCE.md
CVE ID: CVE-2024-32355 State: PUBLISHED Published: 2024-05-14T16:00:46.289Z Last Updated: 2025-02-13T15:48:06.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain a command injection vulnerability via the 'password' parameter in the setSSServer function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.totolink.net/ - https://github.com/1s1and123/Vulnerabilities/blob/main/device/ToToLink/X5000R/TOTOLink_X5000R_RCE.md
CVE ID: CVE-2024-32358 State: PUBLISHED Published: 2024-04-25T00:00:00.000Z Last Updated: 2025-03-13T14:18:48.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Jpress v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the custom plug-in module function, a different vulnerability than CVE-2024-43033. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wolai.com/catr00t/2LujDzjjcrAjUYpWtcusXD - https://gist.github.com/rootlili/a6b6c89591f4773857ae81b7ca5898bc - https://github.com/JPressProjects/jpress/releases/tag/v5.1.0 - https://gitee.com/JPressProjects/jpress/releases/tag/v5.1.0 - htt
github.com/JPressProjects/jpress/releases/tag/v5.1.0 - https://gitee.com/JPressProjects/jpress/releases/tag/v5.1.0 - https://www.jpress.cn/download
CVE ID: CVE-2024-32359 State: PUBLISHED Published: 2024-05-02T00:00:00 Last Updated: 2024-08-02T02:06:44.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: An RBAC authorization risk in Carina v0.13.0 and earlier allows local attackers to execute arbitrary code through designed commands to obtain the secrets of the entire cluster and further take over the cluster. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://carina.com - https://github.com/HouqiyuA/k8s-rbac-poc - https://github.com/carina-io/carina - https://gist.github.com/HouqiyuA/568d9857dab4ddba6b8b6a791e90f906
CVE ID: CVE-2024-32368 State: PUBLISHED Published: 2024-04-22T00:00:00 Last Updated: 2024-11-22T14:49:10.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Permission vulnerability in Agasta Sanketlife 2.0 Pocket 12-Lead ECG Monitor FW Version 3.0 allows a local attacker to cause a denial of service via the Bluetooth Low Energy (BLE) component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://en.wikipedia.org/wiki/Bluetooth_Low_Energy_denial_of_service_attacks/ - https://github.com/Yashodhanvivek/Agasta-SanketLife-2.0-ECG-Monitor_-Vulnerability/tree/main
CVE ID: CVE-2024-32369 State: PUBLISHED Published: 2024-05-07T00:00:00 Last Updated: 2024-08-02T02:06:44.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a remote attacker to obtain sensitive information via a crafted payload to the start and limit parameter in the mliWhiteList.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/89.html - https://github.com/chucrutis/CVE-2024-32369
CVE ID: CVE-2024-32370 State: PUBLISHED Published: 2024-05-07T00:00:00 Last Updated: 2024-08-02T02:06:44.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a remote attacker to obtain sensitive information via a crafted payload to the id parameter in the mliSystemUsers.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/639.html - https://github.com/chucrutis/CVE-2024-32370
CVE ID: CVE-2024-32371 State: PUBLISHED Published: 2024-05-07T00:00:00 Last Updated: 2024-08-02T02:06:44.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a regular user account to escalate their privileges and gain administrative access by changing the type parameter from 1 to 0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/639.html - https://github.com/chucrutis/CVE-2024-32371
CVE ID: CVE-2024-32391 State: PUBLISHED Published: 2024-04-19T00:00:00 Last Updated: 2024-08-02T02:06:44.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in MacCMS v.10 v.2024.1000.3000 allows a remote attacker to execute arbitrary code via a crafted payload. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/magicblack/maccms10/issues/1133
CVE ID: CVE-2024-32392 State: PUBLISHED Published: 2024-04-19T00:00:00 Last Updated: 2024-08-02T02:06:44.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in CmSimple v.5.15 allows a remote attacker to execute arbitrary code via the functions.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/Hebing123/cve/issues/33
CVE ID: CVE-2024-32394 State: PUBLISHED Published: 2024-04-22T00:00:00 Last Updated: 2024-11-22T15:30:46.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in ruijie.com/cn RG-RSR10-01G-T(WA)-S RSR_3.0(1)B9P2_RSR10-01G-TW-S_07150910 and RG-RSR10-01G-T(WA)-S RSR_3.0(1)B9P2_RSR10-01G-TW-S_07150910 allows a remote attacker to execute arbitrary code via a crafted HTTP request. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/Swind1er/7aad5c28e5bdc91d73fa7489b7250c94
CVE ID: CVE-2024-32399 State: PUBLISHED Published: 2024-04-22T00:00:00 Last Updated: 2024-08-02T02:06:44.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal vulnerability in RaidenMAILD Mail Server v.4.9.4 and before allows a remote attacker to obtain sensitive information via the /webeditor/ component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/NN0b0dy/c01/blob/main/01.pdf - https://github.com/NN0b0dy/CVE-2024-32399/blob/main/README.md
CVE ID: CVE-2024-32404 State: PUBLISHED Published: 2024-04-26T00:00:00 Last Updated: 2024-08-02T02:06:44.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: Server-Side Template Injection (SSTI) vulnerability in inducer relate before v.2024.1, allows remote attackers to execute arbitrary code via a crafted payload to the Markup Sandbox feature. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://packetstormsecurity.com/2404-exploits/rlts-sstexec.txt
CVE ID: CVE-2024-32405 State: PUBLISHED Published: 2024-04-22T00:00:00.000Z Last Updated: 2025-02-05T21:26:14.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in inducer relate before v.2024.1 allows a remote attacker to escalate privileges via a crafted payload to the Answer field of InlineMultiQuestion parameter on Exam function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cxsecurity.com/issue/WLB-2024040051 - https://packetstormsecurity.com/files/178101/Relate-Cross-Site-Scripting.html
CVE ID: CVE-2024-32406 State: PUBLISHED Published: 2024-04-26T00:00:00 Last Updated: 2024-08-02T02:06:44.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: Server-Side Template Injection (SSTI) vulnerability in inducer relate before v.2024.1 allows a remote attacker to execute arbitrary code via a crafted payload to the Batch-Issue Exam Tickets function. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://packetstormsecurity.com/files/178251/Relate-Learning-And-Teaching-System-SSTI-Remote-Code-Execution.html
CVE ID: CVE-2024-32407 State: PUBLISHED Published: 2024-04-22T00:00:00 Last Updated: 2024-10-25T19:39:09.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in inducer relate before v.2024.1 allows a remote attacker to execute arbitrary code via a crafted payload to the Page Sandbox feature. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://book.hacktricks.xyz/v/jp/pentesting-web/ssti-server-side-template-injection - https://cxsecurity.com/issue/WLB-2024040049
CVE ID: CVE-2024-32409 State: PUBLISHED Published: 2024-04-19T00:00:00 Last Updated: 2024-08-02T02:06:44.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code via a crafted script. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://semcms.com - http://www.sem-cms.com/ - https://gitee.com/whats-the-bad-idea/cve
CVE ID: CVE-2024-32418 State: PUBLISHED Published: 2024-04-22T00:00:00 Last Updated: 2024-08-02T02:06:44.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in flusity CMS v2.33 allows a remote attacker to execute arbitrary code via the add_addon.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/PWB003/cms/blob/main/1.md
CVE ID: CVE-2024-32428 State: PUBLISHED Published: 2024-04-15T06:29:54.433Z Last Updated: 2024-08-02T02:06:44.154Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Moss Web Works Products: MWW Disclaimer Buttons Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Moss Web Works MWW Disclaimer Buttons allows Stored XSS.This issue affects MWW Disclaimer Buttons: from n/a through 3.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/mww-disclaimer-buttons/wordpress-mww-disclaimer-buttons-plu
References: - https://patchstack.com/database/vulnerability/mww-disclaimer-buttons/wordpress-mww-disclaimer-buttons-plugin-3-0-2-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-32429 State: PUBLISHED Published: 2024-04-15T06:28:38.392Z Last Updated: 2024-08-08T18:43:38.881Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: WPChill Products: Remove Footer Credit Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPChill Remove Footer Credit allows Stored XSS.This issue affects Remove Footer Credit: from n/a through 1.0.13. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/remove-footer-credit/wordpress-remove-footer-credit-plugin-1-0-13-cross-site-s
s://patchstack.com/database/vulnerability/remove-footer-credit/wordpress-remove-footer-credit-plugin-1-0-13-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-32430 State: PUBLISHED Published: 2024-04-15T07:14:25.402Z Last Updated: 2024-08-02T02:06:44.158Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: ActiveCampaign Products: ActiveCampaign Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in ActiveCampaign.This issue affects ActiveCampaign: from n/a through 8.1.14. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/activecampaign-subscription-forms/wordpress-activecampaign-plugin-8-1-14-server-side-request-forgery-ssrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-32431 State: PUBLISHED Published: 2024-04-15T07:16:16.327Z Last Updated: 2024-08-02T02:06:44.157Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: WP All Import Products: Import Users from CSV Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in WP All Import Import Users from CSV.This issue affects Import Users from CSV: from n/a through 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/import-users-from-csv/wordpress-import-users-from-csv-plugin-1-2-php-object-injection?_s_id=cve
CVE ID: CVE-2024-32432 State: PUBLISHED Published: 2024-04-24T15:38:08.999Z Last Updated: 2024-08-02T02:06:44.240Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Ovic Team Products: Ovic Addon Toolkit Problem Types: CWE-862 Description: Missing Authorization vulnerability in Ovic Team Ovic Addon Toolkit.This issue affects Ovic Addon Toolkit: from n/a through 2.6.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/ovic-addon-toolkit/wordpress-ovic-addon-toolkit-plugin-2-6-1-broken-access-control-vulnerability?_s_id=cve