Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
akes it possible for authenticated attackers, with subscriber-level access and above, to update arbitrary options to a fixed value of '1' which can activate certain options (e.g., enable user registration) or modify certain options in a way that leads to a denial of service condition. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/1e1b06d0-f348-4a8b-8730-a87d8e2ba2a1?source=cve - https://plugins.trac.wordpress.org/changeset/3211235/nitropack
CVE ID: CVE-2024-11849 State: PUBLISHED Published: 2025-01-06T06:00:07.626Z Last Updated: 2025-01-06T13:38:20.972Z Vendors: Unknown Products: Pods Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Pods WordPress plugin before 3.2.8.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/85b25a5b-c30b-4a2a-96c1-f05b4eba8a9b/
CVE ID: CVE-2024-11850 State: PUBLISHED Published: 2025-03-20T10:10:55.421Z Last Updated: 2025-03-20T18:14:58.033Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N) Vendors: langgenius Products: langgenius/dify Problem Types: CWE-79 Description: A stored cross-site scripting (XSS) vulnerability exists in the latest version of langgenius/dify. The vulnerability is due to improper validation and sanitization of user input in SVG markdown support within the chatbot feature. An attacker can exploit this vulnerability by injecting malicious SVG content, which can execute arbitrary JavaScript code when viewed by an admin, potentially leading to credential theft. Additional A
ich can execute arbitrary JavaScript code when viewed by an admin, potentially leading to credential theft. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/893da115-028d-4718-b586-a2b77897a470
CVE ID: CVE-2024-11851 State: PUBLISHED Published: 2025-01-15T11:29:52.770Z Last Updated: 2025-01-15T14:33:45.465Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: nitropack Products: NitroPack – Caching & Speed Optimization for Core Web Vitals, Defer CSS & JS, Lazy load Images and CDN Problem Types: CWE-862 Description: The NitroPack plugin for WordPress is vulnerable to unauthorized arbitrary transient update due to a missing capability check on the nitropack_rml_notification function in all versions up to, and including, 1.17.0. This makes it possible for authenticated attackers, with subscriber access or higher, to update arbitrary transients. Note, that
s it possible for authenticated attackers, with subscriber access or higher, to update arbitrary transients. Note, that these transients can only be updated to integers and not arbitrary values. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/8945bae7-2224-4d9f-b693-10c94c94dea0?source=cve - https://plugins.trac.wordpress.org/changeset/3211235/nitropack
CVE ID: CVE-2024-11852 State: PUBLISHED Published: 2024-12-22T01:41:59.748Z Last Updated: 2024-12-28T00:48:32.681Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: bdthemes Products: Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) Problem Types: CWE-862 Description: The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the get_layouts() function in all versions up to, and including, 5.10.12. This makes it possible for authenticated attackers, wit
ayouts() function in all versions up to, and including, 5.10.12. This makes it possible for authenticated attackers, with Subscriber-level access and above, to obtain a detailed listing of layout templates. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d2d23e6f-d48f-4734-95f8-12bd58eb1c2f?source=cve - https://plugins.trac.wordpress.org/browser/bdthemes-element-pack-lite/trunk/includes/template-library/editor/manager/api.php#L100 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3208986%40bdthemes-element-pack-lite%2Ftrunk&old=3204020%40bdthemes-element-pack-lite%2Ftrunk&sfp_email=&sf
eponame=&new=3208986%40bdthemes-element-pack-lite%2Ftrunk&old=3204020%40bdthemes-element-pack-lite%2Ftrunk&sfp_email=&sfph_mail=
CVE ID: CVE-2024-11853 State: PUBLISHED Published: 2024-12-03T07:34:59.481Z Last Updated: 2024-12-03T11:23:42.360Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: mlaza Products: jAlbum Bridge Problem Types: CWE-79 Description: The jAlbum Bridge plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘ar’ parameter in all versions up to, and including, 2.0.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CIS
itrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/72b50c83-7128-4e38-9a5e-0954928ff002?source=cve - https://plugins.trac.wordpress.org/browser/jalbum-bridge/tags/2.0.15/jalbum-bridge.php#L41 - https://wordpress.org/plugins/jalbum-bridge/#developers - https://plugins.trac.wordpress.org/changeset/3198794/
CVE ID: CVE-2024-11854 State: PUBLISHED Published: 2024-12-04T11:08:25.872Z Last Updated: 2024-12-04T14:09:08.756Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: webilia Products: Listdom – Business Directory and Classified Ads Listings WordPress Plugin Problem Types: CWE-79 Description: The Listdom – Business Directory and Classified Ads Listings WordPress Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘shortcode’ parameter in all versions up to, and including, 3.7.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to in
and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9ccb47c2-5f4b-45ea-9c48-0a9042a2fce6?source=cve - https://plugins.trac.wordpress.org/browser/listdom/tags/3.6.0/templates/search/tpl.php#L22 - https://wordpress.org/plugins/listdom/#developers - https://plugins.trac.wordpress.org/changeset/3200502/
CVE ID: CVE-2024-11855 State: PUBLISHED Published: 2024-12-14T04:23:46.088Z Last Updated: 2024-12-16T20:06:03.051Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: koalendar Products: Koalendar – Events & Appointments Booking Calendar Problem Types: CWE-79 Description: The Koalendar – Events & Appointments Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘height’ parameter in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will e
r authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/cbbbf5fe-0369-4de6-9b2f-957286b6f394?source=cve - https://plugins.trac.wordpress.org/browser/koalendar-free-booking-widget/trunk/koa-wordpress.php#L29 - https://wordpress.org/plugins/koalendar-free-booking-widget/#developers
CVE ID: CVE-2024-11856 State: PUBLISHED Published: 2024-12-02T02:43:51.554Z Last Updated: 2024-12-02T22:13:39.635Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Hewlett Packard Enterprise Products: HPE IceWall Problem Types: CWE-522 Description: A security vulnerability in HPE IceWall products could be exploited remotely to cause Unauthorized Data Modification. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbmu04762en_us&docLocale=en_US
CVE ID: CVE-2024-11857 State: PUBLISHED Published: 2025-06-02T03:24:16.905Z Last Updated: 2025-06-02T03:46:40.908Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Realtek Products: Bluetooth HCI Adaptor Problem Types: CWE-59 Description: Bluetooth HCI Adaptor from Realtek has a Link Following vulnerability. Local attackers with regular privileges can create a symbolic link with the same name as a specific file, causing the product to delete arbitrary files pointed to by the link. Subsequently, attackers can leverage arbitrary file deletion to privilege escalation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-
privilege escalation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-10160-76012-1.html - https://www.twcert.org.tw/en/cp-139-10161-fa1b5-2.html
CVE ID: CVE-2024-11858 State: PUBLISHED Published: 2024-12-15T13:57:32.889Z Last Updated: 2024-12-16T16:39:35.500Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Problem Types: CWE-78 Description: A flaw was found in Radare2, which contains a command injection vulnerability caused by insufficient input validation when handling Pebble Application files. Maliciously crafted inputs can inject shell commands during command parsing, leading to unintended behavior during file processing​ Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2329102
CVE ID: CVE-2024-11859 State: PUBLISHED Published: 2025-04-07T08:08:22.127Z Last Updated: 2025-04-16T10:52:29.591Z Vendors: ESET, spol. s r.o. Products: ESET NOD32 Antivirus, ESET Internet Security, ESET Smart Security Premium, ESET Security Ultimate, ESET Endpoint Antivirus for Windows, ESET Endpoint Security for Windows, ESET Small Business Security, ESET Safe Server, ESET Server Security for Windows Server, ESET Mail Security for Microsoft Exchange Server, ESET Security for Microsoft SharePoint Server Problem Types: CWE-427 Description: DLL Search Order Hijacking vulnerability potentially allowed an attacker with administrator privileges to load a malicious dynamic-link library and execut
bility potentially allowed an attacker with administrator privileges to load a malicious dynamic-link library and execute its code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.eset.com/en/ca8810-dll-search-order-hijacking-vulnerability-in-eset-products-for-windows-fixed
CVE ID: CVE-2024-11860 State: PUBLISHED Published: 2024-11-27T16:31:05.325Z Last Updated: 2024-11-28T06:47:46.222Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: SourceCodester Products: Best House Rental Management System Problem Types: CWE-285, CWE-266 Description: A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. This affects an unknown part of the file /rental/ajax.php?action=delete_tenant of the component POST Request Handler. The manipulation of the argument id leads to improper authorization. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and
mproper authorization. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.286245 - https://vuldb.com/?ctiid.286245 - https://vuldb.com/?submit.449684 - https://github.com/YasserREED/YasserREED-CVEs/blob/main/Best%20house%20rental%20management%20system%20project%20in%20php/Unauthorized%20Tenant%20Deletion.md - https://drive.google.com/file/d/1CyjtknGVqn5QO_R1WZX-hoGH8ae5DjRq/view - https://www.sourcecodester.com/
CVE ID: CVE-2024-11861 State: PUBLISHED Published: 2025-05-09T13:51:37.212Z Last Updated: 2025-05-12T22:08:59.414Z Vendors: EnerSys Products: AMPA Problem Types: CWE-77 Description: EnerSys AMPA 22.09 and prior versions are vulnerable to command injection leading to privileged remote shell access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2025/MNDT-2025-0001.md - https://www.enersys.com/4996bf/globalassets/documents/corporate/cve/enersys_cve-2024-11861-final.pdf
CVE ID: CVE-2024-11862 State: PUBLISHED Published: 2024-11-27T14:35:01.734Z Last Updated: 2024-11-27T14:53:57.448Z Vendors: Devolutions Products: XTS.NET Problem Types: CWE-385 Description: Non constant time cryptographic operation in Devolutions.XTS.NET 2024.11.19 and earlier allows an attacker to render half of the encryption key obsolete via a timing attacks Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Devolutions/XTS.NET/security/advisories/GHSA-j6vm-4r7g-x4gr
CVE ID: CVE-2024-11863 State: PUBLISHED Published: 2025-01-14T13:45:54.241Z Last Updated: 2025-01-14T17:13:04.905Z Vendors: Arm Products: SCP-Firmware Problem Types: CWE-755 Description: Specifically crafted SCMI messages sent to an SCP running SCP-Firmware release versions up to and including 2.15.0 may lead to a Usage Fault and crash the SCP Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://developer.arm.com/Arm%20Security%20Center/SCP-Firmware%20Vulnerability%20CVE-2024-11863-11864
CVE ID: CVE-2024-11864 State: PUBLISHED Published: 2025-01-14T13:46:22.071Z Last Updated: 2025-01-14T15:50:42.542Z Vendors: Arm Products: SCP-Firmware Problem Types: CWE-755 Description: Specifically crafted SCMI messages sent to an SCP running SCP-Firmware release versions up to and including 2.15.0 may lead to a Usage Fault and crash the SCP Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://developer.arm.com/Arm%20Security%20Center/SCP-Firmware%20Vulnerability%20CVE-2024-11863-11864
CVE ID: CVE-2024-11865 State: PUBLISHED Published: 2024-12-14T04:23:39.394Z Last Updated: 2024-12-16T20:07:09.231Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: html5maps Products: Tabs Maker Problem Types: CWE-79 Description: The Tabs Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on tab descriptions. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnri
cripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/284c5646-7728-45bd-9479-483c806ca804?source=cve - https://wordpress.org/plugins/tabs-maker/
CVE ID: CVE-2024-11866 State: PUBLISHED Published: 2024-12-03T08:32:26.978Z Last Updated: 2024-12-03T11:23:41.696Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: paulnagle Products: BMLT Tabbed Map Problem Types: CWE-79 Description: The BMLT Tabbed Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bmlt_tabbed_map' shortcode in all versions up to, and including, 1.1.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user a
s, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/49958e9e-7f9b-48fb-bfe2-5b1b437171d6?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3198537%40bmlt-tabbed-map&new=3198537%40bmlt-tabbed-map&sfp_email=&sfph_mail=
CVE ID: CVE-2024-11867 State: PUBLISHED Published: 2024-12-14T04:23:39.030Z Last Updated: 2024-12-16T17:50:52.771Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: papin Products: Companion Portfolio – Responsive Portfolio Plugin Problem Types: CWE-79 Description: The Companion Portfolio – Responsive Portfolio Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'companion-portfolio' shortcode in all versions up to, and including, 2.4.0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inj
supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/21df75e6-1f3e-4a08-a620-92b44fb48899?source=cve - https://plugins.trac.wordpress.org/browser/companion-portfolio/tags/2.4.0.1/companion_portfolio.php#L322
CVE ID: CVE-2024-11868 State: PUBLISHED Published: 2024-12-10T12:24:59.516Z Last Updated: 2024-12-10T14:56:15.813Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: thimpress Products: LearnPress – WordPress LMS Plugin Problem Types: CWE-284 Description: The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.2.7.3 via class-lp-rest-material-controller.php. This makes it possible for unauthenticated attackers to extract potentially sensitive paid course material. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulne
material. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/7bd43980-9193-4a63-adba-720dd1b11699?source=cve - https://plugins.trac.wordpress.org/changeset/3200780/learnpress
CVE ID: CVE-2024-11869 State: PUBLISHED Published: 2024-12-14T04:23:47.526Z Last Updated: 2024-12-16T20:05:20.986Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: uvstudio Products: Buk for WordPress Problem Types: CWE-79 Description: The Buk for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'buk' shortcode in all versions up to, and including, 1.0.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses a
ontributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/dc1ebc34-d728-42b4-92b4-9e1a4ebd88b2?source=cve - https://plugins.trac.wordpress.org/browser/buk-appointments/trunk/buk.php#L18 - https://wordpress.org/plugins/buk-appointments/
CVE ID: CVE-2024-11870 State: PUBLISHED Published: 2025-01-15T07:10:46.770Z Last Updated: 2025-01-15T15:04:27.040Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: vcita Products: Event Registration Calendar By vcita Problem Types: CWE-79 Description: The Event Registration Calendar By vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 1.4.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will exec
uthenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e8cadb97-2f3e-4b00-ad00-118cf23d1592?source=cve - https://plugins.trac.wordpress.org/browser/event-registration-calendar-by-vcita/trunk/core/shortcodes.php#L22 - https://plugins.trac.wordpress.org/browser/event-registration-calendar-by-vcita/trunk/core/shortcodes.php#L50 - https://plugins.trac.wordpress.org/browser/event-registration-calendar-by-vcita/trunk/core/shortcodes.php#L91 - https://plugins.trac.wor
trac.wordpress.org/browser/event-registration-calendar-by-vcita/trunk/core/shortcodes.php#L91 - https://plugins.trac.wordpress.org/browser/event-registration-calendar-by-vcita/trunk/core/shortcodes.php#L129
CVE ID: CVE-2024-11871 State: PUBLISHED Published: 2024-12-12T05:24:22.953Z Last Updated: 2024-12-12T16:04:39.031Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: tw2113 Products: Social Media Shortcodes Problem Types: CWE-79 Description: The Social Media Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'patreon' shortcode in all versions up to, and including, 1.3.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a u
ackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/96f63469-d05d-4c7a-8fc6-165c361a7c82?source=cve - https://plugins.trac.wordpress.org/browser/social-media-shortcodes/tags/1.3.0/social_media_shortcode_plugin.php#L189 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3206023%40social-media-shortcodes&new=3206023%40social-media-shortcodes&sfp_email=&sfph_mail=
CVE ID: CVE-2024-11872 State: PUBLISHED Published: 2024-12-11T21:55:34.552Z Last Updated: 2024-12-12T15:55:34.523Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Epic Games Products: Epic Games Launcher Problem Types: CWE-276 Description: Epic Games Launcher Incorrect Default Permissions Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Epic Games Launcher. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the product installer. The product applies incorrect de
r to exploit this vulnerability. The specific flaw exists within the product installer. The product applies incorrect default permissions to a sensitive folder. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-24329. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-24-1646/ - https://trello.com/c/tcS6Jcfy/578-epic-games-launcher-1720