Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-3032 State: PUBLISHED Published: 2025-04-01T12:29:03.420Z Last Updated: 2025-04-02T03:55:32.945Z Vendors: Mozilla Products: Firefox, Thunderbird Problem Types: Leaking file descriptors from the fork server Description: Leaking of file descriptors from the fork server to web content processes could allow for privilege escalation attacks. This vulnerability affects Firefox < 137 and Thunderbird < 137. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1949987 - https://www.mozilla.org/security/advisories/mfsa2025-20/ - https://www.mozilla.org/security/advisories/mfsa2025-23/
CVE ID: CVE-2025-3033 State: PUBLISHED Published: 2025-04-01T12:29:04.495Z Last Updated: 2025-04-01T18:33:39.492Z Vendors: Mozilla Products: Firefox, Thunderbird Problem Types: Opening local .url files could lead to another file being opened Description: After selecting a malicious Windows `.url` shortcut from the local filesystem, an unexpected file could be uploaded. *This bug only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox < 137 and Thunderbird < 137. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1950056 - https://www.mozilla.org/security/advisories/mfsa2025-20/ - h
s: - https://bugzilla.mozilla.org/show_bug.cgi?id=1950056 - https://www.mozilla.org/security/advisories/mfsa2025-20/ - https://www.mozilla.org/security/advisories/mfsa2025-23/
CVE ID: CVE-2025-3034 State: PUBLISHED Published: 2025-04-01T12:29:05.582Z Last Updated: 2025-04-02T15:07:40.087Z Vendors: Mozilla Products: Firefox, Thunderbird Problem Types: Memory safety bugs fixed in Firefox 137 and Thunderbird 137 Description: Memory safety bugs present in Firefox 136 and Thunderbird 136. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 137 and Thunderbird < 137. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1894100%2C1934086%2C1950360 - https://www.mozilla.or
ment: References: - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1894100%2C1934086%2C1950360 - https://www.mozilla.org/security/advisories/mfsa2025-20/ - https://www.mozilla.org/security/advisories/mfsa2025-23/
CVE ID: CVE-2025-3035 State: PUBLISHED Published: 2025-04-01T12:29:06.641Z Last Updated: 2025-04-10T20:14:13.747Z Vendors: Mozilla Products: Firefox Problem Types: Tab title disclosure across pages when using AI chatbot Description: By first using the AI chatbot in one tab and later activating it in another tab, the document title of the previous tab would leak into the chat prompt. This vulnerability affects Firefox < 137. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1952268 - https://www.mozilla.org/security/advisories/mfsa2025-20/
CVE ID: CVE-2025-3036 State: PUBLISHED Published: 2025-03-31T22:00:10.200Z Last Updated: 2025-04-01T13:32:51.605Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: yzk2356911358 Products: StudentServlet-JSP Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, was found in yzk2356911358 StudentServlet-JSP cc0cdce25fbe43b6c58b60a77a2c85f52d2102f5/d4d7a0643f1dae908a4831206f2714b21820f991. This affects an unknown part of the component Student Management Handler. The manipulation of the argument Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Thi
pting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.302097 - https://vuldb.com/?ctiid.302097 - https://vuldb.com/?submit.524630 - https://github.com/yzk2356911358/StudentServlet-JSP/issues/2 - https://github.com/yzk2356911358/StudentServlet-JSP/issues/2#issue-2937740237
CVE ID: CVE-2025-3037 State: PUBLISHED Published: 2025-03-31T22:31:04.940Z Last Updated: 2025-04-01T03:57:31.845Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: yzk2356911358 Products: StudentServlet-JSP Problem Types: CWE-352, CWE-862 Description: A vulnerability has been found in yzk2356911358 StudentServlet-JSP cc0cdce25fbe43b6c58b60a77a2c85f52d2102f5/d4d7a0643f1dae908a4831206f2714b21820f991 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this produc
ploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.302098 - https://vuldb.com/?ctiid.302098 - https://vuldb.com/?submit.524631 - https://github.com/yzk2356911358/StudentServlet-JSP/issues/3 - https://github.com/yzk2356911358/StudentServlet-JSP/issues/3#issue-2937762896
CVE ID: CVE-2025-3038 State: PUBLISHED Published: 2025-03-31T22:31:06.673Z Last Updated: 2025-04-01T03:56:05.842Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Payroll Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Payroll Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /view_account.php. The manipulation of the argument salary_rate leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.3
to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.302099 - https://vuldb.com/?ctiid.302099 - https://vuldb.com/?submit.524636 - https://github.com/nabiland/cve/blob/main/cve.md - https://code-projects.org/
CVE ID: CVE-2025-3039 State: PUBLISHED Published: 2025-03-31T23:00:10.116Z Last Updated: 2025-04-01T03:54:09.565Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Payroll Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Payroll Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /add_employee.php. The manipulation of the argument lname/fname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP V
closed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.302100 - https://vuldb.com/?ctiid.302100 - https://vuldb.com/?submit.524676 - https://github.com/xuzhuojia22/cve/blob/main/cvexuzhoujia.md - https://code-projects.org/
CVE ID: CVE-2025-3040 State: PUBLISHED Published: 2025-03-31T23:00:11.861Z Last Updated: 2025-04-01T03:51:50.285Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Project Worlds Products: Online Time Table Generator Problem Types: CWE-434, CWE-284 Description: A vulnerability was found in Project Worlds Online Time Table Generator 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/add_student.php. The manipulation of the argument pic leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
ploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.302102 - https://vuldb.com/?ctiid.302102 - https://vuldb.com/?submit.524934 - https://github.com/ydnd/cve/issues/11
CVE ID: CVE-2025-3041 State: PUBLISHED Published: 2025-03-31T23:31:04.411Z Last Updated: 2025-04-01T03:50:36.470Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Project Worlds Products: Online Time Table Generator Problem Types: CWE-434, CWE-284 Description: A vulnerability classified as critical has been found in Project Worlds Online Time Table Generator 1.0. This affects an unknown part of the file /admin/updatestudent.php. The manipulation of the argument pic leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb
disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.302103 - https://vuldb.com/?ctiid.302103 - https://vuldb.com/?submit.524935 - https://github.com/ydnd/cve/issues/12
CVE ID: CVE-2025-3042 State: PUBLISHED Published: 2025-04-01T00:00:10.967Z Last Updated: 2025-04-01T03:48:37.446Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Project Worlds Products: Online Time Table Generator Problem Types: CWE-434, CWE-284 Description: A vulnerability classified as critical was found in Project Worlds Online Time Table Generator 1.0. This vulnerability affects unknown code of the file /student/updateprofile.php. The manipulation of the argument pic leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.c
isclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.302104 - https://vuldb.com/?ctiid.302104 - https://vuldb.com/?submit.524936 - https://github.com/ydnd/cve/issues/13
CVE ID: CVE-2025-3043 State: PUBLISHED Published: 2025-04-01T00:31:04.410Z Last Updated: 2025-04-01T03:46:36.828Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: GuoMinJim Products: PersonManage Problem Types: CWE-22 Description: A vulnerability, which was classified as critical, has been found in GuoMinJim PersonManage 1.0. This issue affects the function preHandle of the file /login/. The manipulation of the argument Request leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details
be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.302105 - https://vuldb.com/?ctiid.302105 - https://vuldb.com/?submit.524949 - https://github.com/GuoMinJim/PersonManage/issues/7 - https://github.com/GuoMinJim/PersonManage/issues/7#issue-2939940887
CVE ID: CVE-2025-3044 State: PUBLISHED Published: 2025-07-07T09:54:22.506Z Last Updated: 2025-07-07T15:23:18.518Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: run-llama Products: run-llama/llama_index Problem Types: CWE-440 Description: A vulnerability in the ArxivReader class of the run-llama/llama_index repository, versions up to v0.12.22.post1, allows for MD5 hash collisions when generating filenames for downloaded papers. This can lead to data loss as papers with identical titles but different contents may overwrite each other, preventing some papers from being processed for AI model training. The issue is resolved in version 0.12.28. Additional Analy
nting some papers from being processed for AI model training. The issue is resolved in version 0.12.28. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/80182c3a-876f-422f-8bac-38267e0345d6 - https://github.com/run-llama/llama_index/commit/0008041e8dde8e519621388e5d6f558bde6ef42e
CVE ID: CVE-2025-3045 State: PUBLISHED Published: 2025-04-01T00:31:06.646Z Last Updated: 2025-04-06T05:29:29.689Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: oretnom23, SourceCodester Products: Apartment Visitor Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in oretnom23/SourceCodester Apartment Visitor Management System 1.0. Affected is an unknown function of the file /remove-apartment.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrich
ck remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.302106 - https://vuldb.com/?ctiid.302106 - https://vuldb.com/?submit.524983 - https://github.com/byxs0x0/SQL/blob/main/SQL2.md
CVE ID: CVE-2025-3046 State: PUBLISHED Published: 2025-07-07T09:54:50.409Z Last Updated: 2025-07-07T14:00:59.560Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: run-llama Products: run-llama/llama_index Problem Types: CWE-22 Description: A vulnerability in the `ObsidianReader` class of the run-llama/llama_index repository, versions 0.12.23 to 0.12.28, allows for arbitrary file read through symbolic links. The `ObsidianReader` fails to resolve symlinks to their real paths and does not validate whether the resolved paths lie within the intended directory. This flaw enables attackers to place symlinks pointing to files outside the vault directory, which are then
d directory. This flaw enables attackers to place symlinks pointing to files outside the vault directory, which are then processed as valid Markdown files, potentially exposing sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/90a1f1b2-bb82-4d66-9fc1-856ed5f904da - https://github.com/run-llama/llama_index/commit/0008041e8dde8e519621388e5d6f558bde6ef42e
CVE ID: CVE-2025-3047 State: PUBLISHED Published: 2025-03-31T15:21:11.290Z Last Updated: 2025-10-14T19:22:56.059Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: AWS Products: AWS Serverless Application Model Command Line Interface Problem Types: CWE-61 Description: When running the AWS Serverless Application Model Command Line Interface (SAM CLI) build process with Docker and symlinks are included in the build files, the container environment allows a user to access privileged files on the host by leveraging the elevated permissions granted to the tool. A user could leverage the elevated permissions to access restricted files via symlinks and copy them to a
d to the tool. A user could leverage the elevated permissions to access restricted files via symlinks and copy them to a more permissive location on the container. Users should upgrade to v1.133.0 or newer and ensure any forked or derivative code is patched to incorporate the new fixes. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://aws.amazon.com/security/security-bulletins/AWS-2025-008/ - https://github.com/aws/aws-sam-cli/security/advisories/GHSA-px37-jpqx-97q9 - https://github.com/aws/aws-sam-cli/releases/tag/v1.134.0
CVE ID: CVE-2025-3048 State: PUBLISHED Published: 2025-03-31T15:21:16.205Z Last Updated: 2025-10-14T19:23:20.481Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: AWS Products: AWS Serverless Application Model Command Line Interface Problem Types: CWE-61 Description: After completing a build with AWS Serverless Application Model Command Line Interface (SAM CLI) which include symlinks, the content of those symlinks are copied to the cache of the local workspace as regular files or directories. As a result, a user who does not have access to those symlinks outside of the Docker container would now have access via the local workspace. Users should upgrade to ver
hose symlinks outside of the Docker container would now have access via the local workspace. Users should upgrade to version 1.134.0 and ensure any forked or derivative code is patched to incorporate the new fixes. After upgrading, users must re-build their applications using the sam build --use-container to update the symlinks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://aws.amazon.com/security/security-bulletins/AWS-2025-008/ - https://github.com/aws/aws-sam-cli/security/advisories/GHSA-pp64-wj43-xqcr - https://github.com/aws/aws-sam-cli/releases/tag/v1.134.0
CVE ID: CVE-2025-3050 State: PUBLISHED Published: 2025-05-29T19:13:06.140Z Last Updated: 2025-08-26T14:56:06.206Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Db2 for Linux, UNIX and Windows Problem Types: CWE-770 Description: IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 could allow an authenticated user to cause a denial of service when using Q replication due to the improper allocation of CPU resources. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7235073
CVE ID: CVE-2025-3051 State: PUBLISHED Published: 2025-04-01T02:20:40.971Z Last Updated: 2025-04-01T18:30:09.318Z Vendors: RRWO Products: Linux::Statm::Tiny Problem Types: CWE-427 Description: Linux::Statm::Tiny for Perl before 0.0701 allows untrusted code from the current working directory ('.') to be loaded similar to CVE-2016-1238. If an attacker can place a malicious file in current working directory, it may be loaded instead of the intended file, potentially leading to arbitrary code execution. Linux::Statm::Tiny uses Mite to produce the affected code section due to CVE-2025-30672 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://metacpan.org/release/RRWO/Linux-St
E-2025-30672 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://metacpan.org/release/RRWO/Linux-Statm-Tiny-0.0701/changes - https://metacpan.org/release/RRWO/Linux-Statm-Tiny-0.0700/source/lib/Linux/Statm/Tiny/Mite.pm#L82 - https://blogs.perl.org/users/todd_rinaldo/2016/11/what-happened-to-dot-in-inc.html
CVE ID: CVE-2025-3052 State: PUBLISHED Published: 2025-06-10T19:19:54.775Z Last Updated: 2025-06-10T21:03:04.250Z Vendors: DT Research Products: BiosFlashShell, Dtbios Problem Types: CWE-123: Write-what-where Condition Description: An arbitrary write vulnerability in Microsoft signed UEFI firmware allows for code execution of untrusted software. This allows an attacker to control its value, leading to arbitrary memory writes, including modification of critical firmware settings stored in NVRAM. Exploiting this vulnerability could enable security bypasses, persistence mechanisms, or full system compromise. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References:
isms, or full system compromise. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://uefi.org/specs/UEFI/2.10/32_Secure_Boot_and_Driver_Signing.html - https://www.binarly.io/advisories/brly-dva-2025-001
CVE ID: CVE-2025-3053 State: PUBLISHED Published: 2025-05-15T04:21:49.507Z Last Updated: 2025-05-15T15:18:05.861Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: admintwentytwenty Products: UiPress lite | Effortless custom dashboards, admin themes and pages Problem Types: CWE-94 Description: The UiPress lite | Effortless custom dashboards, admin themes and pages plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.5.07 via the uip_process_form_input() function. This is due to the function taking user supplied inputs to execute arbitrary functions with arbitrary data, and does not have any sort of capability check.
user supplied inputs to execute arbitrary functions with arbitrary data, and does not have any sort of capability check. This makes it possible for authenticated attackers, with Subscriber-level access and above, to execute arbitrary code on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/6717adb0-27bc-4cd4-8c34-bea59bc0e016?source=cve - https://plugins.trac.wordpress.org/changeset/3292552/uipress-lite/trunk/admin/core/ajax-functions.php
CVE ID: CVE-2025-3054 State: PUBLISHED Published: 2025-06-05T05:23:00.228Z Last Updated: 2025-06-05T14:08:06.826Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: wedevs Products: WP User Frontend Pro Problem Types: CWE-434 Description: The WP User Frontend Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the upload_files() function in all versions up to, and including, 4.1.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. Please note that this requires the 'Pri
les on the affected site's server which may make remote code execution possible. Please note that this requires the 'Private Message' module to be enabled and the Business version of the PRO software to be in use. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/989f0e0b-8a57-4435-95b0-21fec215112d?source=cve - https://headwayapp.co/wp-user-frontend-changelog
CVE ID: CVE-2025-3055 State: PUBLISHED Published: 2025-06-05T05:23:00.826Z Last Updated: 2025-06-05T14:07:57.976Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: wedevs Products: WP User Frontend Pro Problem Types: CWE-22 Description: The WP User Frontend Pro plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_avatar_ajax() function in all versions up to, and including, 4.1.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-
rbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/eeb71c31-9e56-4b58-9cfc-a97f6892cc2b?source=cve - https://headwayapp.co/wp-user-frontend-changelog
CVE ID: CVE-2025-3056 State: PUBLISHED Published: 2025-04-18T08:21:37.036Z Last Updated: 2025-04-18T12:00:22.324Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: codename065 Products: Download Manager Problem Types: CWE-79 Description: The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 3.3.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Additional Analyst Notes: - CIS
arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/dd9e6ba7-f107-4d7c-a7da-35e603f3a1a8?source=cve - https://wordpress.org/plugins/download-manager/#developers - https://plugins.trac.wordpress.org/changeset/3275196/