Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
wordpress.org/browser/nd-elements/trunk/widgets/marquee/index.php#L200 - https://plugins.trac.wordpress.org/browser/nd-elements/trunk/widgets/postgrid/index.php#L186 - https://plugins.trac.wordpress.org/changeset/3094318/
CVE ID: CVE-2024-5349 State: PUBLISHED Published: 2024-07-02T04:31:34.980Z Last Updated: 2024-08-01T21:11:12.443Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: choijun Products: LA-Studio Element Kit for Elementor Problem Types: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Description: The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.8.1 via the 'map_style' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary files on the server, allowing the ex
ttackers, with Contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/2e29a67b-2b67-4cd5-a5ae-a931900c75cd?source=cve - https://plugins.trac.wordpress.org/changeset/3108501/lastudio-element-kit/trunk/includes/addons/google-maps.php
CVE ID: CVE-2024-5350 State: PUBLISHED Published: 2024-05-25T22:31:05.264Z Last Updated: 2024-08-21T14:36:25.965Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: anji-plus Products: AJ-Report Problem Types: CWE-89 Description: A vulnerability was found in anji-plus AJ-Report up to 1.4.1. It has been classified as critical. Affected is the function pageList of the file /pageList. The manipulation of the argument p leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-266262 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: R
identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.266262 - https://vuldb.com/?ctiid.266262 - https://github.com/anji-plus/report/issues/34 - https://github.com/anji-plus/report/files/15363269/aj-report.pdf
CVE ID: CVE-2024-5351 State: PUBLISHED Published: 2024-05-26T00:00:06.021Z Last Updated: 2024-08-01T21:11:12.476Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: anji-plus Products: AJ-Report Problem Types: CWE-502 Description: A vulnerability was found in anji-plus AJ-Report up to 1.4.1. It has been declared as critical. Affected by this vulnerability is the function getValueFromJs of the component Javascript Handler. The manipulation leads to deserialization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-266263. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Pr
e associated identifier of this vulnerability is VDB-266263. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.266263 - https://vuldb.com/?ctiid.266263 - https://github.com/anji-plus/report/issues/34 - https://github.com/anji-plus/report/files/15363269/aj-report.pdf
CVE ID: CVE-2024-5352 State: PUBLISHED Published: 2024-05-26T00:31:04.056Z Last Updated: 2024-08-01T21:11:12.451Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: anji-plus Products: AJ-Report Problem Types: CWE-502 Description: A vulnerability was found in anji-plus AJ-Report up to 1.4.1. It has been rated as critical. Affected by this issue is the function validationRules of the component com.anjiplus.template.gaea.business.modules.datasetparam.controller.DataSetParamController#verification. The manipulation leads to deserialization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-266
remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-266264. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.266264 - https://vuldb.com/?ctiid.266264 - https://github.com/anji-plus/report/issues/34 - https://github.com/anji-plus/report/files/15363269/aj-report.pdf
CVE ID: CVE-2024-5353 State: PUBLISHED Published: 2024-05-26T04:00:04.861Z Last Updated: 2024-08-01T21:11:12.555Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: anji-plus Products: AJ-Report Problem Types: CWE-22 Description: A vulnerability classified as critical has been found in anji-plus AJ-Report up to 1.4.1. This affects the function decompress of the component ZIP File Handler. The manipulation leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-266265 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Referenc
was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.266265 - https://vuldb.com/?ctiid.266265 - https://github.com/anji-plus/report/issues/34 - https://github.com/anji-plus/report/files/15363269/aj-report.pdf
CVE ID: CVE-2024-5354 State: PUBLISHED Published: 2024-05-26T04:31:04.850Z Last Updated: 2024-08-01T21:11:12.396Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: anji-plus Products: AJ-Report Problem Types: CWE-200 Description: A vulnerability classified as problematic was found in anji-plus AJ-Report up to 1.4.1. This vulnerability affects unknown code of the file /reportShare/detailByCode. The manipulation of the argument shareToken leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-266266 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA
e public and may be used. VDB-266266 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.266266 - https://vuldb.com/?ctiid.266266 - https://github.com/anji-plus/report/issues/34 - https://github.com/anji-plus/report/files/15363269/aj-report.pdf
CVE ID: CVE-2024-5355 State: PUBLISHED Published: 2024-05-26T06:00:05.776Z Last Updated: 2024-08-01T21:11:12.484Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: anji-plus Products: AJ-Report Problem Types: CWE-77 Description: A vulnerability, which was classified as critical, has been found in anji-plus AJ-Report up to 1.4.1. This issue affects the function IGroovyHandler. The manipulation leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-266267. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuld
ty is VDB-266267. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.266267 - https://vuldb.com/?ctiid.266267 - https://github.com/anji-plus/report/issues/34 - https://github.com/anji-plus/report/files/15363269/aj-report.pdf
CVE ID: CVE-2024-5356 State: PUBLISHED Published: 2024-05-26T07:31:04.492Z Last Updated: 2024-08-01T21:11:12.571Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: anji-plus Products: AJ-Report Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in anji-plus AJ-Report up to 1.4.1. Affected is an unknown function of the file /dataSet/testTransform;swagger-ui. The manipulation of the argument dynSentence leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-266268. Additional Analyst Notes: - CISA ADP Vulnrichment: - CV
may be used. The identifier of this vulnerability is VDB-266268. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.266268 - https://vuldb.com/?ctiid.266268 - https://vuldb.com/?submit.338486 - https://github.com/anji-plus/report/issues/34 - https://github.com/anji-plus/report/files/15363269/aj-report.pdf
CVE ID: CVE-2024-5357 State: PUBLISHED Published: 2024-05-26T08:00:08.073Z Last Updated: 2024-08-01T21:11:12.500Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Zoo Management System Problem Types: CWE-89 Description: A vulnerability has been found in PHPGurukul Zoo Management System 2.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/forgot-password.php. The manipulation of the argument email leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-266269 was assigned to this vulnerability. Additional Analyst Notes:
d to the public and may be used. The identifier VDB-266269 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.266269 - https://vuldb.com/?ctiid.266269 - https://vuldb.com/?submit.343372 - https://www.yuque.com/yuqueyonghunhj6tg/ygf5oy/wzxsew2dfb84l3lo
CVE ID: CVE-2024-5358 State: PUBLISHED Published: 2024-05-26T09:00:18.595Z Last Updated: 2024-08-01T21:11:12.464Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Zoo Management System Problem Types: CWE-89 Description: A vulnerability was found in PHPGurukul Zoo Management System 2.1 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/normal-search.php. The manipulation of the argument searchdata leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-266270 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA A
public and may be used. VDB-266270 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.266270 - https://vuldb.com/?ctiid.266270 - https://vuldb.com/?submit.343374 - https://www.yuque.com/yuqueyonghunhj6tg/ygf5oy/otrp279l6c41kem1
CVE ID: CVE-2024-5359 State: PUBLISHED Published: 2024-05-26T10:00:07.564Z Last Updated: 2024-08-01T21:11:12.443Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Zoo Management System Problem Types: CWE-89 Description: A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been classified as critical. This affects an unknown part of the file /admin/foreigner-search.php. The manipulation of the argument searchdata leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-266271. Additional Analyst Notes: - CISA
public and may be used. The associated identifier of this vulnerability is VDB-266271. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.266271 - https://vuldb.com/?ctiid.266271 - https://vuldb.com/?submit.343716 - https://www.yuque.com/yuqueyonghunhj6tg/ygf5oy/cznh8x2li4fmds4d
CVE ID: CVE-2024-5360 State: PUBLISHED Published: 2024-05-26T10:31:07.466Z Last Updated: 2024-09-03T15:26:24.956Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Zoo Management System Problem Types: CWE-89 Description: A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been declared as critical. This vulnerability affects unknown code of the file /admin/foreigner-bwdates-reports-details.php. The manipulation of the argument fromdate leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-266272. Additional Analyst Notes: - CV
closed to the public and may be used. The identifier of this vulnerability is VDB-266272. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.266272 - https://vuldb.com/?ctiid.266272 - https://vuldb.com/?submit.343722 - https://www.yuque.com/yuqueyonghunhj6tg/ygf5oy/owcaryw2yqlk5x2a
CVE ID: CVE-2024-5361 State: PUBLISHED Published: 2024-05-26T11:00:07.645Z Last Updated: 2024-08-01T21:11:12.554Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Zoo Management System Problem Types: CWE-89 Description: A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been rated as critical. This issue affects some unknown processing of the file /admin/normal-bwdates-reports-details.php. The manipulation of the argument fromdate leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-266273 was assigned to this vulnerability. Additional Analyst Note
sed to the public and may be used. The identifier VDB-266273 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.266273 - https://vuldb.com/?ctiid.266273 - https://vuldb.com/?submit.343886 - https://www.yuque.com/yuqueyonghunhj6tg/ygf5oy/gotd8yz2e0ed9gof
CVE ID: CVE-2024-5362 State: PUBLISHED Published: 2024-05-26T11:31:03.618Z Last Updated: 2024-08-01T21:11:12.768Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Hospital Management System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in SourceCodester Online Hospital Management System 1.0. Affected is an unknown function of the file departmentDoctor.php. The manipulation of the argument deptid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-266274 is the identifier assigned to this vulnerability. Additional Analyst No
closed to the public and may be used. VDB-266274 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.266274 - https://vuldb.com/?ctiid.266274 - https://vuldb.com/?submit.343373 - https://github.com/CveSecLook/cve/issues/41
CVE ID: CVE-2024-5363 State: PUBLISHED Published: 2024-05-26T12:00:04.912Z Last Updated: 2024-08-01T21:11:12.468Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Best House Rental Management System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in SourceCodester Best House Rental Management System up to 1.0. Affected by this vulnerability is an unknown functionality of the file manage_user.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-266275. Addit
t has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-266275. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.266275 - https://vuldb.com/?ctiid.266275 - https://vuldb.com/?submit.343427 - https://github.com/rockersiyuan/CVE/blob/main/SourceCodester_House_Rental_Management_System_Sql_Inject-1.md
CVE ID: CVE-2024-5364 State: PUBLISHED Published: 2024-05-26T12:31:05.192Z Last Updated: 2024-08-01T21:11:12.689Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Best House Rental Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in SourceCodester Best House Rental Management System up to 1.0. Affected by this issue is some unknown functionality of the file manage_tenant.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-266276. Add
y. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-266276. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.266276 - https://vuldb.com/?ctiid.266276 - https://vuldb.com/?submit.343431 - https://github.com/rockersiyuan/CVE/blob/main/SourceCodester_House_Rental_Management_System_Sql_Inject-2.md
CVE ID: CVE-2024-5365 State: PUBLISHED Published: 2024-05-26T13:00:04.390Z Last Updated: 2024-08-01T21:11:12.487Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Best House Rental Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in SourceCodester Best House Rental Management System up to 1.0. This affects an unknown part of the file manage_payment.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-266277 was assigned to this vulnerability. Additional
s been disclosed to the public and may be used. The identifier VDB-266277 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.266277 - https://vuldb.com/?ctiid.266277 - https://vuldb.com/?submit.343432 - https://github.com/rockersiyuan/CVE/blob/main/SourceCodester_House_Rental_Management_System_Sql_Inject-3.md
CVE ID: CVE-2024-5366 State: PUBLISHED Published: 2024-05-26T14:00:04.458Z Last Updated: 2024-08-01T21:11:12.503Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Best House Rental Management System Problem Types: CWE-89 Description: A vulnerability has been found in SourceCodester Best House Rental Management System up to 1.0 and classified as critical. This vulnerability affects unknown code of the file edit-cate.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-266278 is the identifier assigned to this vulnerability. Additional Analyst
disclosed to the public and may be used. VDB-266278 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.266278 - https://vuldb.com/?ctiid.266278 - https://vuldb.com/?submit.343433 - https://github.com/rockersiyuan/CVE/blob/main/SourceCodester_House_Rental_Management_System_Sql_Inject-4.md
CVE ID: CVE-2024-5367 State: PUBLISHED Published: 2024-05-26T15:00:04.409Z Last Updated: 2024-08-01T21:11:12.431Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Kashipara Products: College Management System Problem Types: CWE-79 Description: A vulnerability was found in Kashipara College Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file each_extracurricula_activities.php. The manipulation of the argument id leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-266279. Additional Analyst Notes:
to the public and may be used. The associated identifier of this vulnerability is VDB-266279. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.266279 - https://vuldb.com/?ctiid.266279 - https://vuldb.com/?submit.343447 - https://github.com/E1CHO/cve_hub/blob/main/College%20Management%20System%20-%20xss/College%20Management%20System%20-%20vuln%201.pdf
CVE ID: CVE-2024-5368 State: PUBLISHED Published: 2024-05-26T16:00:04.890Z Last Updated: 2024-08-01T21:11:12.434Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Kashipara Products: College Management System Problem Types: CWE-79 Description: A vulnerability was found in Kashipara College Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file delete_faculty.php. The manipulation of the argument id leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-266280. Additional Analyst Notes: - CISA ADP Vulnrichm
blic and may be used. The identifier of this vulnerability is VDB-266280. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.266280 - https://vuldb.com/?ctiid.266280 - https://vuldb.com/?submit.343448 - https://github.com/E1CHO/cve_hub/blob/main/College%20Management%20System%20-%20xss/College%20Management%20System%20-%20vuln%202.pdf
CVE ID: CVE-2024-5369 State: PUBLISHED Published: 2024-05-26T16:31:04.196Z Last Updated: 2024-08-01T21:11:12.499Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Kashipara Products: College Management System Problem Types: CWE-79 Description: A vulnerability was found in Kashipara College Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file submit_admin.php. The manipulation of the argument admin_name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-266281 was assigned to this vulnerability. Additional Ana
en disclosed to the public and may be used. The identifier VDB-266281 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.266281 - https://vuldb.com/?ctiid.266281 - https://vuldb.com/?submit.343449 - https://github.com/E1CHO/cve_hub/blob/main/College%20Management%20System%20-%20xss/College%20Management%20System%20-%20vuln%203.pdf
CVE ID: CVE-2024-5370 State: PUBLISHED Published: 2024-05-26T17:31:04.308Z Last Updated: 2024-08-01T21:11:12.718Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Kashipara Products: College Management System Problem Types: CWE-79 Description: A vulnerability was found in Kashipara College Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file submit_enroll_staff.php. The manipulation of the argument class_name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-266282 is the identifier assigned to this vulnerability. Additional Analys
disclosed to the public and may be used. VDB-266282 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.266282 - https://vuldb.com/?ctiid.266282 - https://vuldb.com/?submit.343450 - https://github.com/E1CHO/cve_hub/blob/main/College%20Management%20System%20-%20xss/College%20Management%20System%20-%20vuln%204.pdf