Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-8965 State: PUBLISHED Published: 2024-09-27T05:31:01.915Z Last Updated: 2024-09-27T15:22:08.613Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: Code Supply Co. Products: Absolute Reviews Problem Types: CWE-79 Description: The Absolute Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Name' field of a custom post criteria in all versions up to, and including, 1.1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected
-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/12cfebb8-ae89-410b-a492-340f1553e83e?source=cve - https://plugins.trac.wordpress.org/changeset/3156409/absolute-reviews
CVE ID: CVE-2024-8966 State: PUBLISHED Published: 2025-03-20T10:11:03.188Z Last Updated: 2025-10-15T12:49:58.234Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: gradio-app Products: gradio-app/gradio Problem Types: CWE-770 Description: A vulnerability in the file upload process of gradio-app/gradio version @gradio/video@0.10.2 allows for a Denial of Service (DoS) attack. An attacker can append a large number of characters to the end of a multipart boundary, causing the system to continuously process each character and issue warnings. This can render Gradio inaccessible for extended periods, disrupting services and causing significant downtime. Additional Anal
n render Gradio inaccessible for extended periods, disrupting services and causing significant downtime. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/7b5932bb-58d1-4e71-b85c-43dc40522ff2 - https://github.com/gradio-app/gradio/commit/f1718c47137f9c60240da7afe5e3290aa0f1cb47
CVE ID: CVE-2024-8967 State: PUBLISHED Published: 2024-10-02T07:35:25.883Z Last Updated: 2024-10-02T19:22:10.586Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: iworks Products: PWA — easy way to Progressive Web App Problem Types: CWE-79 Description: The PWA — easy way to Progressive Web App plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.6.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG f
or-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/000bf956-1781-4596-ac12-81691fdd789c?source=cve - https://wordpress.org/plugins/iworks-pwa/#developers - https://plugins.trac.wordpress.org/browser/iworks-pwa/trunk/includes/iworks/class-iworks-svg.php#L16 - https://plugins.trac.wordpress.org/changeset/3161056/
CVE ID: CVE-2024-8968 State: PUBLISHED Published: 2024-12-20T06:00:04.888Z Last Updated: 2024-12-20T16:58:57.823Z Vendors: Unknown Products: WordPress Button Plugin MaxButtons Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WordPress Button Plugin MaxButtons WordPress plugin before 9.8.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/cab4d23e-e857-4b2f-b1ca-fbafd37524e0/
CVE ID: CVE-2024-8969 State: PUBLISHED Published: 2024-09-18T06:53:53.016Z Last Updated: 2024-09-18T13:28:23.529Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: The SYSCOM Group Products: OMFLOW Problem Types: CWE-200 Description: OMFLOW from The SYSCOM Group has a vulnerability involving the exposure of sensitive data. This allows remote attackers who have logged into the system to obtain password hashes of all users and administrators. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-8100-f6827-1.html - https://www.twcert.org.tw/en/cp-139-8101-193d8-2.html
CVE ID: CVE-2024-8970 State: PUBLISHED Published: 2024-10-11T12:30:37.109Z Last Updated: 2024-10-11T13:37:54.711Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-863 Description: An issue was discovered in GitLab CE/EE affecting all versions starting from 11.6 prior to 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2, which allows an attacker to trigger a pipeline as another user under certain circumstances. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/490916 - https://hackerone.com/reports/2724948
CVE ID: CVE-2024-8972 State: PUBLISHED Published: 2024-12-17T13:40:09.478Z Last Updated: 2024-12-17T17:33:51.153Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Mobil365 Informatics Products: Saha365 App Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mobil365 Informatics Saha365 App allows SQL Injection.This issue affects Saha365 App: before 30.09.2024. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-24-1890
CVE ID: CVE-2024-8973 State: PUBLISHED Published: 2025-05-09T16:14:45.564Z Last Updated: 2025-05-09T19:54:29.190Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: GitLab Products: GitLab Problem Types: CWE-770 Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 17.1 prior to 17.9.8, from 17.10 prior to 17.10.6, and from 17.11 prior to 17.11.2. It was possible to cause a DoS condition via GitHub import requests using a malicious crafted payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/491041 - https://hackerone.com/reports/2711684
CVE ID: CVE-2024-8974 State: PUBLISHED Published: 2024-09-26T23:02:00.153Z Last Updated: 2024-09-27T15:46:48.041Z Severity: LOW (CVSS 2.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-684 Description: Information disclosure in Gitlab EE/CE affecting all versions from 15.6 prior to 17.2.8, 17.3 prior to 17.3.4, and 17.4 prior to 17.4.1 in specific conditions it was possible to disclose to an unauthorised user the path of a private project." Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/482843
CVE ID: CVE-2024-8975 State: PUBLISHED Published: 2024-09-25T16:42:09.998Z Last Updated: 2024-09-26T16:22:26.037Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Grafana Products: Alloy Problem Types: CWE-428 Description: Unquoted Search Path or Element vulnerability in Grafana Alloy on Windows allows Privilege Escalation from Local User to SYSTEM This issue affects Alloy: before 1.3.3, from 1.4.0-rc.0 through 1.4.0-rc.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://grafana.com/security/security-advisories/cve-2024-8975/ - https://grafana.com/blog/2024/09/25/grafana-alloy-and-grafana-agent-flow-security-release-high-severity-fix-for
-8975/ - https://grafana.com/blog/2024/09/25/grafana-alloy-and-grafana-agent-flow-security-release-high-severity-fix-for-cve-2024-8975-and-cve-2024-8996/ - https://github.com/grafana/alloy/releases/tag/v1.4.1 - https://github.com/grafana/alloy/releases/tag/v1.3.4
CVE ID: CVE-2024-8977 State: PUBLISHED Published: 2024-10-10T10:02:10.914Z Last Updated: 2024-10-10T13:53:37.484Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-918 Description: An issue has been discovered in GitLab EE affecting all versions starting from 15.10 prior to 17.2.9, from 17.3 prior to 17.3.5, and from 17.4 prior to 17.4.2. Instances with Product Analytics Dashboard configured and enabled could be vulnerable to SSRF attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/491060 - https://hackerone.com/reports/2697456
CVE ID: CVE-2024-8978 State: PUBLISHED Published: 2024-11-15T09:29:39.946Z Last Updated: 2024-11-15T17:45:41.897Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: wpdevteam Products: Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders Problem Types: CWE-200 Description: The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.0.9 via the 'init_content_register_user_email_controls' function. This makes it possible for authenticated attackers, with Contri
he 'init_content_register_user_email_controls' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including usernames and passwords of any users who register via the Login | Register Form widget, as long as that user opens the email notification for successful registration. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/baae8fb9-b87c-4f61-88da-871c4c83615b?source=cve - https://plugins.trac.wordpress.org/browser/essential-addons-for-elementor-lite/trunk/includes/Elements/Login_Register.php#L2220 - https://plugins.trac.wordpress.org/changeset
ddons-for-elementor-lite/trunk/includes/Elements/Login_Register.php#L2220 - https://plugins.trac.wordpress.org/changeset/3188634/
CVE ID: CVE-2024-8979 State: PUBLISHED Published: 2024-11-15T09:29:39.230Z Last Updated: 2024-11-15T17:52:51.817Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: wpdevteam Products: Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders Problem Types: CWE-200 Description: The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.0.9 via the 'init_content_lostpassword_user_email_controls' function. This makes it possible for authenticated attackers, with Author
init_content_lostpassword_user_email_controls' function. This makes it possible for authenticated attackers, with Author-level access and above, to extract sensitive data including usernames and passwords of any user, including Administrators, as long as that user opens the email notification for a password change request and images are not blocked by the email client. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/34d09086-be33-40cf-b5bf-d6c03cf0b68a?source=cve - https://plugins.trac.wordpress.org/browser/essential-addons-for-elementor-lite/trunk/includes/Elements/Login_Register.php#L2440 - https://plugins.trac.word
browser/essential-addons-for-elementor-lite/trunk/includes/Elements/Login_Register.php#L2440 - https://plugins.trac.wordpress.org/changeset/3188634/
CVE ID: CVE-2024-8980 State: PUBLISHED Published: 2024-10-22T14:43:04.606Z Last Updated: 2024-10-22T15:08:48.472Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Liferay Products: Portal, DXP Problem Types: CWE-352 Description: The Script Console in Liferay Portal 7.0.0 through 7.4.3.101, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, 7.2 GA through fix pack 20, 7.1 GA through fix pack 28, 7.0 GA through fix pack 102 and 6.2 GA through fix pack 173 does not sufficiently protect against Cross-Site Request Forgery (CSRF) attacks, which allows remote attackers to execute arbitrary Groovy script via a crafted U
ss-Site Request Forgery (CSRF) attacks, which allows remote attackers to execute arbitrary Groovy script via a crafted URL or a XSS vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2024-8980
CVE ID: CVE-2024-8981 State: PUBLISHED Published: 2024-10-01T02:33:30.428Z Last Updated: 2024-10-01T14:06:27.049Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: wpmudev Products: Broken Link Checker Problem Types: CWE-80 Description: The Broken Link Checker plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg in /app/admin-notices/features/class-view.php without appropriate escaping on the URL in all versions up to, and including, 2.4.0. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such a
nject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/429fe34a-5fa9-4032-9b21-4de114dbc9d1?source=cve - https://plugins.trac.wordpress.org/changeset/3159860/broken-link-checker/trunk/app/admin-notices/features/class-view.php - https://plugins.trac.wordpress.org/browser/broken-link-checker/tags/2.4.0/app/admin-notices/features/class-view.php#L43
CVE ID: CVE-2024-8982 State: PUBLISHED Published: 2025-03-20T10:10:25.442Z Last Updated: 2025-03-20T18:21:47.837Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: bentoml Products: bentoml/openllm Problem Types: CWE-29 Description: A Local File Inclusion (LFI) vulnerability in OpenLLM version 0.6.10 allows attackers to include files from the local server through the web application. This flaw could expose internal server files and potentially sensitive information such as configuration files, passwords, and other critical data. Unauthorized access to critical server files, such as configuration files, user credentials (/etc/passwd), and private keys, can lead
access to critical server files, such as configuration files, user credentials (/etc/passwd), and private keys, can lead to a complete compromise of the system's security. Attackers could leverage the exposed information to further penetrate the network, exfiltrate data, or escalate privileges within the environment. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/b7bdc9a1-51ac-402a-8e6e-0d977699aca6
CVE ID: CVE-2024-8983 State: PUBLISHED Published: 2024-10-08T06:00:03.744Z Last Updated: 2025-08-27T12:00:59.283Z Vendors: Unknown Products: Custom Twitter Feeds Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: Custom Twitter Feeds WordPress plugin before 2.2.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/29194dde-8d11-4096-a5ae-1d69c2c5dc33/
CVE ID: CVE-2024-8984 State: PUBLISHED Published: 2025-03-20T10:09:19.131Z Last Updated: 2025-10-15T12:49:58.738Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: berriai Products: berriai/litellm Problem Types: CWE-770 Description: A Denial of Service (DoS) vulnerability exists in berriai/litellm version v1.44.5. This vulnerability can be exploited by appending characters, such as dashes (-), to the end of a multipart boundary in an HTTP request. The server continuously processes each character, leading to excessive resource consumption and rendering the service unavailable. The issue is unauthenticated and does not require any user interaction, impacting all
endering the service unavailable. The issue is unauthenticated and does not require any user interaction, impacting all users of the service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/554fc76b-3097-4223-b4cf-110b853e9355 - https://github.com/berriai/litellm/commit/4f49f836aa844ac9b6bfbeff27e6f6b2b9cf3f61
CVE ID: CVE-2024-8985 State: PUBLISHED Published: 2024-11-13T02:02:30.257Z Last Updated: 2024-11-13T14:43:51.231Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: kimberlynorris Products: Social Proof (Testimonial) Slider Problem Types: CWE-79 Description: The Social Proof (Testimonial) Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's spslider-block shortcode in all versions up to, and including, 2.2.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in page
t possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/49460db5-a0cd-4b29-85f2-8ededabf5599?source=cve - https://plugins.trac.wordpress.org/browser/social-proof-testimonials-slider/tags/2.2.4/public/class-social-proof-slider-public.php#L754 - https://plugins.trac.wordpress.org/browser/social-proof-testimonials-slider/trunk/public/class-social-proof-slider-public.php#L427 - https://wordpress.org/plugins/social-proof-testimonials-slider/#developer
ic/class-social-proof-slider-public.php#L427 - https://wordpress.org/plugins/social-proof-testimonials-slider/#developers
CVE ID: CVE-2024-8986 State: PUBLISHED Published: 2024-09-19T10:57:01.035Z Last Updated: 2024-09-19T13:38:02.412Z Vendors: grafana-plugin-sdk-go Products: Grafana Plugin SDK Problem Types: CWE-522 Description: The grafana plugin SDK bundles build metadata into the binaries it compiles; this metadata includes the repository URI for the plugin being built, as retrieved by running `git remote get-url origin`. If credentials are included in the repository URI (for instance, to allow for fetching of private dependencies), the final binary will contain the full URI, including said credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://grafana.com/security/security-ad
d credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://grafana.com/security/security-advisories/cve-2024-8986/
CVE ID: CVE-2024-8987 State: PUBLISHED Published: 2024-10-10T02:06:05.259Z Last Updated: 2024-10-10T13:13:18.150Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: youzify Products: Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress Problem Types: CWE-79 Description: The Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's youzify_media shortcode in all versions up to, and including, 1.3.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it poss
luding, 1.3.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/19c463d1-41fa-4386-b755-a14d1e68c5bd?source=cve - https://plugins.trac.wordpress.org/browser/youzify/tags/1.3.0/includes/public/core/functions/general/youzify-profile-functions.php#L910 - https://wordpress.org/plugins/youzify/#developers
CVE ID: CVE-2024-8988 State: PUBLISHED Published: 2025-05-14T08:22:09.058Z Last Updated: 2025-05-14T13:17:42.359Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: PeepSo Products: PeepSo Core: File Uploads Problem Types: CWE-639 Description: The PeepSo Core: File Uploads plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.4.6.0 via the file_download REST API endpoint due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to download files uploaded by others users and expose potentially sensitive information. Additional Analyst Notes: - CISA ADP Vulnric
iles uploaded by others users and expose potentially sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d3184996-655c-41d5-a3c5-6b36fbff58dc?source=cve - https://www.peepso.com/changelog/
CVE ID: CVE-2024-8989 State: PUBLISHED Published: 2024-10-01T07:30:15.356Z Last Updated: 2024-10-01T15:35:57.236Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: galdub Products: Free Responsive Testimonials, Social Proof Reviews, and Customer Reviews – Stars Testimonials Problem Types: CWE-79 Description: The Free Responsive Testimonials, Social Proof Reviews, and Customer Reviews – Stars Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's stars_testimonials shortcode in all versions up to, and including, 3.3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it po
ncluding, 3.3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b406f0b8-16b5-49ca-88d8-7717bef1ae61?source=cve - https://plugins.trac.wordpress.org/browser/stars-testimonials-with-slider-and-masonry-grid/trunk/plugin.class.php#L1281 - https://wordpress.org/plugins/stars-testimonials-with-slider-and-masonry-grid/#developers - https://plugin
s.php#L1281 - https://wordpress.org/plugins/stars-testimonials-with-slider-and-masonry-grid/#developers - https://plugins.trac.wordpress.org/changeset/3159818/#file8 - https://plugins.trac.wordpress.org/changeset/3159818/
CVE ID: CVE-2024-8990 State: PUBLISHED Published: 2024-10-01T07:30:13.800Z Last Updated: 2024-10-01T15:43:09.706Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: cyberhobo Products: Geo Mashup Problem Types: CWE-79 Description: The Geo Mashup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's geo_mashup_visible_posts_list shortcode in all versions up to, and including, 1.13.13 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a use