Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ific-popup.js - https://plugins.trac.wordpress.org/browser/essential-addons-for-elementor-lite/trunk/assets/front-end/js/lib-view/magnific-popup/jquery.magnific-popup.js - https://plugins.trac.wordpress.org/browser/bold-page-builder/trunk/content_elements_misc/js/jquery.magnific-popup.js - https://plugins.trac.wordpress.org/changeset/3154460/happy-elementor-addons - https://plugins.trac.wordpress.org/changeset/3153781/bold-page-builder - https://plugins.trac.wordpress.org/browser/robo-gallery/trunk/js/robo_gallery.js#L56 - https://www.elegantthemes.com/api/changelog/divi.txt - https://www.elegantthemes.com/api/changelog/extra.txt - https://www.elegantthemes.com/api/changelog/divi-builder.txt
t - https://www.elegantthemes.com/api/changelog/extra.txt - https://www.elegantthemes.com/api/changelog/divi-builder.txt - https://themes.trac.wordpress.org/changeset/244604/oceanwp - https://plugins.trac.wordpress.org/changeset/3153700/essential-addons-for-elementor-lite - https://plugins.trac.wordpress.org/changeset/3184626/addons-for-divi - https://plugins.trac.wordpress.org/changeset/3201991/robo-gallery - https://plugins.trac.wordpress.org/changeset/3166204/carousel-slider - https://github.com/dimsemenov/Magnific-Popup/releases/tag/1.2.0
CVE ID: CVE-2024-5648 State: PUBLISHED Published: 2024-07-09T08:33:06.762Z Last Updated: 2024-08-01T21:18:06.579Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: stellarwp Products: LearnDash LMS – Reports Problem Types: CWE-862 Missing Authorization Description: The LearnDash LMS – Reports plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 1.8.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update various plugin settings. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container:
nd above, to update various plugin settings. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/7fbbd0d7-882f-4bc8-a67a-4d6dc05cb796?source=cve - https://plugins.trac.wordpress.org/browser/wisdm-reports-for-learndash/trunk/includes/admin/class-admin-functions.php#L52 - https://plugins.trac.wordpress.org/browser/wisdm-reports-for-learndash/trunk/includes/admin/class-admin-functions.php#L261 - https://plugins.trac.wordpress.org/browser/wisdm-reports-for-learndash/trunk/includes/admin/class-admin-functions.php#L284 - https://plugins.trac.wordpress.org/browser/wisdm-reports-for-learndash/trunk/includ
min/class-admin-functions.php#L284 - https://plugins.trac.wordpress.org/browser/wisdm-reports-for-learndash/trunk/includes/admin/class-admin-functions.php#L423 - https://plugins.trac.wordpress.org/browser/wisdm-reports-for-learndash/trunk/includes/admin/class-admin-functions.php#L455
CVE ID: CVE-2024-5649 State: PUBLISHED Published: 2024-06-19T03:12:31.577Z Last Updated: 2024-08-01T21:18:06.778Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: webhuntinfotech Products: Universal Slider Problem Types: CWE-502 Deserialization of Untrusted Data Description: The Universal Slider plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.6.5 via deserialization of untrusted input 'fsl_get_gallery_value' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is p
access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/8f8bd107-5459-4093-8593-deedec6ffcd6?source=cve - https://plugins.trac.wordpress.org/browser/fusion-slider/trunk/fusion-slider.php#L692
CVE ID: CVE-2024-5650 State: PUBLISHED Published: 2024-06-17T06:21:31.387Z Last Updated: 2024-08-01T21:18:06.883Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Yokogawa Electric Corporation Products: CENTUM CS 3000, CENTUM VP Problem Types: CWE-284 Description: DLL Hijacking vulnerability has been found in CENTUM CAMS Log server provided by Yokogawa Electric Corporation. If an attacker is somehow able to intrude into a computer that installed affected product or access to a shared folder, by replacing the DLL file with a tampered one, it is possible to execute arbitrary programs with the authority of the SYSTEM account. The affected products and versions are
possible to execute arbitrary programs with the authority of the SYSTEM account. The affected products and versions are as follows: CENTUM CS 3000 R3.08.10 to R3.09.50 CENTUM VP R4.01.00 to R4.03.00, R5.01.00 to R5.04.20, R6.01.00 to R6.11.10. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://web-material3.yokogawa.com/1/36044/files/YSAR-24-0002-E.pdf
CVE ID: CVE-2024-5651 State: PUBLISHED Published: 2024-08-12T05:46:16.035Z Last Updated: 2025-11-06T20:54:54.038Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Fence Agents Remediation 0.4 for RHEL 8 Problem Types: CWE-94 Description: A flaw was found in the Fence Agents Remediation operator. This vulnerability can allow a Remote Code Execution (RCE) primitive by supplying an arbitrary command to execute in the --ssh-path/--telnet-path arguments. A low-privilege user, for example, a user with developer access, can create a specially crafted FenceAgentsRemediation for a fence agent supporting --ssh-path/--telnet-path arguments to execute arb
specially crafted FenceAgentsRemediation for a fence agent supporting --ssh-path/--telnet-path arguments to execute arbitrary commands on the operator's pod. This RCE leads to a privilege escalation, first as the service account running the operator, then to another service account with cluster-admin privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2024:5453 - https://access.redhat.com/security/cve/CVE-2024-5651 - https://bugzilla.redhat.com/show_bug.cgi?id=2290540
CVE ID: CVE-2024-5652 State: PUBLISHED Published: 2024-07-09T17:07:08.691Z Last Updated: 2025-03-19T15:47:03.640Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H) Vendors: Docker Inc. Products: Docker Desktop Description: In Docker Desktop on Windows before v4.31.0 allows a user in the docker-users group to cause a Windows Denial-of-Service through the exec-path Docker daemon config option in Windows containers mode. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.docker.com/desktop/release-notes/#4310
CVE ID: CVE-2024-5653 State: PUBLISHED Published: 2024-06-05T21:00:05.422Z Last Updated: 2024-08-01T21:18:06.802Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Chanjet Products: Smooth T+system Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in Chanjet Smooth T+system 3.5. This issue affects some unknown processing of the file /tplus/UFAQD/keyEdit.aspx. The manipulation of the argument KeyID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-267185 was assigned to this vulnerability. NOTE: The vendor was contacted early about this dis
used. The identifier VDB-267185 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.267185 - https://vuldb.com/?ctiid.267185 - https://vuldb.com/?submit.345311 - https://github.com/vulreport3r/cve-reports/blob/main/There_is_a_SQL_injection_vulnerability_in_the_Changjietong_T%2Bsystem/report.md
CVE ID: CVE-2024-5654 State: PUBLISHED Published: 2024-06-08T08:39:38.552Z Last Updated: 2024-08-01T21:18:06.813Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: westerndeal Products: CF7 Google Sheets Connector Problem Types: CWE-862 Missing Authorization Description: The CF7 Google Sheets Connector plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'execute_post_data_cg7_free' function in all versions up to, and including, 5.0.9. This makes it possible for unauthenticated attackers to toggle site configuration settings, including WP_DEBUG, WP_DEBUG_LOG, SCRIPT_DEBUG, and SAVEQUERIES. Additional
kers to toggle site configuration settings, including WP_DEBUG, WP_DEBUG_LOG, SCRIPT_DEBUG, and SAVEQUERIES. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c0da4d55-5025-47cf-9f45-377d8943fc94?source=cve - https://plugins.trac.wordpress.org/browser/cf7-google-sheets-connector/trunk/includes/class-gs-service.php#L52 - https://plugins.trac.wordpress.org/changeset/3099184/
CVE ID: CVE-2024-5655 State: PUBLISHED Published: 2024-06-26T23:30:55.421Z Last Updated: 2024-09-17T15:33:21.131Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-284 Description: An issue was discovered in GitLab CE/EE affecting all versions starting from 15.8 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows an attacker to trigger a pipeline as another user under certain circumstances. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/465862 - https://hackerone.com/reports
VE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/465862 - https://hackerone.com/reports/2536320
CVE ID: CVE-2024-5656 State: REJECTED Published: 2024-06-06T04:33:03.554Z Last Updated: 2024-06-13T13:32:06.111Z Description: No description available.
CVE ID: CVE-2024-5657 State: PUBLISHED Published: 2024-06-06T10:29:40.393Z Last Updated: 2025-09-03T07:13:32.028Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Born05 Products: CraftCMS Plugin - Two-Factor Authentication Problem Types: CWE-499 Description: The CraftCMS plugin Two-Factor Authentication in versions 3.3.1, 3.3.2 and 3.3.3 discloses the password hash of the currently authenticated user after submitting a valid TOTP. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/sbaresearch/advisories/tree/public/2024/SBA-ADV-20240202-01_CraftCMS_Plugin_Two-Factor_Authentication_Password_Hash_Disclosur
search/advisories/tree/public/2024/SBA-ADV-20240202-01_CraftCMS_Plugin_Two-Factor_Authentication_Password_Hash_Disclosure - https://plugins.craftcms.com/two-factor-authentication?craft4 - https://github.com/born05/craft-twofactorauthentication/releases/tag/3.3.4 - http://www.openwall.com/lists/oss-security/2024/06/06/1
CVE ID: CVE-2024-5658 State: PUBLISHED Published: 2024-06-06T10:32:07.239Z Last Updated: 2025-09-03T07:08:56.470Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N) Vendors: Born05 Products: CraftCMS Plugin - Two-Factor Authentication Problem Types: CWE-303 Description: The CraftCMS plugin Two-Factor Authentication through 3.3.3 allows reuse of TOTP tokens multiple times within the validity period. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/sbaresearch/advisories/tree/public/2024/SBA-ADV-20240202-02_CraftCMS_Plugin_Two-Factor_Authentication_TOTP_Valid_After_Use - https://plugins.craftcms.com/two-factor-au
-20240202-02_CraftCMS_Plugin_Two-Factor_Authentication_TOTP_Valid_After_Use - https://plugins.craftcms.com/two-factor-authentication?craft4 - https://github.com/born05/craft-twofactorauthentication/releases/tag/3.3.4 - http://www.openwall.com/lists/oss-security/2024/06/06/2
CVE ID: CVE-2024-5659 State: PUBLISHED Published: 2024-06-14T16:42:20.699Z Last Updated: 2024-08-01T21:18:06.865Z Vendors: Rockwell Automation Products: ControlLogix® 5580, GuardLogix 5580, 1756-EN4, CompactLogix 5380, Compact GuardLogix 5380, CompactLogix 5480 Problem Types: CWE-670 Description: Rockwell Automation was made aware of a vulnerability that causes all affected controllers on the same network to result in a major nonrecoverable fault(MNRF/Assert). This vulnerability could be exploited by sending abnormal packets to the mDNS port. If exploited, the availability of the device would be compromised. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Referenc
of the device would be compromised. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1673.html
CVE ID: CVE-2024-5660 State: PUBLISHED Published: 2024-12-10T13:55:44.488Z Last Updated: 2024-12-16T13:10:13.630Z Vendors: Arm Products: Cortex-A77, Neoverse V1, Cortex-A78AE, Cortex-78C, Cortex-X1C, Cortex-A78, Cortex-X1, Neoverse N2, Cortex-A710, Cortex-X2, Neoverse V2, Cortex-X3, Neoverse V3AE, Neoverse V3, Cortex-X4, Cortex-X925 Problem Types: CWE-668 Description: Use of Hardware Page Aggregation (HPA) and Stage-1 and/or Stage-2 translation on Cortex-A77, Cortex-A78, Cortex-A78C, Cortex-A78AE, Cortex-A710, Cortex-X1, Cortex-X1C, Cortex-X2, Cortex-X3, Cortex-X4, Cortex-X925, Neoverse V1, Neoverse V2, Neoverse V3, Neoverse V3AE, Neoverse N2 may permit bypass of Stage-2 translation and/or G
925, Neoverse V1, Neoverse V2, Neoverse V3, Neoverse V3AE, Neoverse N2 may permit bypass of Stage-2 translation and/or GPT protection. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://developer.arm.com/Arm%20Security%20Center/Arm%20CPU%20Vulnerability%20CVE-2024-5660
CVE ID: CVE-2024-5661 State: PUBLISHED Published: 2024-06-13T05:58:45.694Z Last Updated: 2024-10-28T19:54:43.633Z Vendors: Citrix Products: Citrix Hypervisor, XenServer Description: An issue has been identified in both XenServer 8 and Citrix Hypervisor 8.2 CU1 LTSR which may allow a malicious administrator of a guest VM to cause the host to become slow and/or unresponsive. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.citrix.com/article/CTX677100/xenserver-and-citrix-hypervisor-security-update-for-cve20245661
CVE ID: CVE-2024-5662 State: PUBLISHED Published: 2024-06-28T08:33:29.351Z Last Updated: 2024-08-01T21:18:06.722Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: bdthemes Products: Ultimate Post Kit Addons For Elementor – (Post Grid, Post Carousel, Post Slider, Category List, Post Tabs, Timeline, Post Ticker, Tag Cloud) Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Ultimate Post Kit Addons For Elementor – (Post Grid, Post Carousel, Post Slider, Category List, Post Tabs, Timeline, Post Ticker, Tag Cloud) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’
Tabs, Timeline, Post Ticker, Tag Cloud) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter within the Social Count (Static) widget in all versions up to, and including, 3.11.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/be9d977d-d7b2-4946-b107-35df176fbdf3?source=cve - https://plugins.trac.wordpress.
ce.com/threat-intel/vulnerabilities/id/be9d977d-d7b2-4946-b107-35df176fbdf3?source=cve - https://plugins.trac.wordpress.org/browser/ultimate-post-kit/tags/3.11.5/modules/static-social-count/widgets/static-social-count.php#L800 - https://plugins.trac.wordpress.org/changeset/3106395/#file526 - https://wordpress.org/plugins/ultimate-post-kit/#developers
CVE ID: CVE-2024-5663 State: PUBLISHED Published: 2024-06-08T02:35:20.761Z Last Updated: 2024-08-01T21:18:06.840Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: brainstormforce Products: Cards for Beaver Builder Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Cards for Beaver Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Cards widget in all versions up to, and including, 1.1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level a
utput escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/55ff923e-9d04-4ce7-b6d6-165fa4fc5433?source=cve - https://plugins.trac.wordpress.org/browser/bb-bootstrap-cards/trunk/bb-bootstrap-cards-module/includes/frontend.php#L13 - https://wordpress.org/plugins/bb-bootstrap-cards/#developers - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&o
/plugins/bb-bootstrap-cards/#developers - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3099081%40bb-bootstrap-cards&new=3099081%40bb-bootstrap-cards&sfp_email=&sfph_mail=#file4
CVE ID: CVE-2024-5664 State: PUBLISHED Published: 2024-07-10T07:36:44.303Z Last Updated: 2024-08-01T21:18:06.879Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: sonaar Products: MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' attribute within the plugin's sonaar_audioplayer shortcode in all versions up to, and including, 5.5 due to insufficient input sanitization and output e
naar_audioplayer shortcode in all versions up to, and including, 5.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c14783d3-68de-49c6-9c54-eb7fc4a7bf94?source=cve - https://plugins.trac.wordpress.org/browser/mp3-music-player-by-sonaar/tags/5.4.0.2/includes/class-sonaar-music-widget.php#L1853 - https://plugins.trac
.org/browser/mp3-music-player-by-sonaar/tags/5.4.0.2/includes/class-sonaar-music-widget.php#L1853 - https://plugins.trac.wordpress.org/changeset/3115110/mp3-music-player-by-sonaar/trunk/includes/class-sonaar-music-widget.php - https://wordpress.org/plugins/mp3-music-player-by-sonaar/#developers
CVE ID: CVE-2024-5665 State: PUBLISHED Published: 2024-06-06T07:37:11.794Z Last Updated: 2024-08-01T21:18:06.828Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: xootix Products: Login/Signup Popup ( Inline Form + Woocommerce ) Problem Types: CWE-862 Missing Authorization Description: The Login/Signup Popup ( Inline Form + Woocommerce ) plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ‘export_settings’ function in versions 2.7.1 to 2.7.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read arbitrary options on affected sites. Additional Analyst Notes: -
ckers, with Subscriber-level access and above, to read arbitrary options on affected sites. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/1a304e9a-9518-4a6a-b36a-963cb329f5c3?source=cve - https://plugins.trac.wordpress.org/browser/easy-login-woocommerce/trunk/includes/xoo-framework/admin/class-xoo-admin-settings.php?rev=3084943#L69 - https://plugins.trac.wordpress.org/changeset/3093994/
CVE ID: CVE-2024-5666 State: PUBLISHED Published: 2024-06-29T07:05:38.149Z Last Updated: 2024-08-01T21:18:06.866Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: petesheppard84 Products: Extensions for Elementor Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Extensions for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter within the EE Button widget in all versions up to, and including, 2.0.30 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access
put sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/63306df3-4972-426f-bfda-6af75a09971c?source=cve - https://plugins.trac.wordpress.org/browser/extensions-for-elementor/trunk/modules/button/widgets/ee-button.php#L88 - https://plugins.trac.wordpress.org/changeset/3104024/ - https://wordpress.org/plugins/extensions-for-elementor/#developers
CVE ID: CVE-2024-5667 State: PUBLISHED Published: 2025-03-05T09:21:46.075Z Last Updated: 2025-03-05T14:49:25.969Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: cipherdevgroup, dfactory Products: WP Featherlight – A Simple jQuery Lightbox, Responsive Lightbox & Gallery Problem Types: CWE-79 Description: Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled Featherlight.js JavaScript library (versions 1.7.13 to 1.7.14) in various versions due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and a
ing on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/44b173da-a6b9-424c-95a1-a87a9b8ee4af?source=cve - https://plugins.trac.wordpress.org/changeset/3137531/responsive-lightbox - https://plugins.trac.wordpress.org/browser/wp-featherlight/trunk/js/wpFeatherlight.pkgd.js