Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-10291 State: PUBLISHED Published: 2025-09-12T05:32:07.780Z Last Updated: 2025-09-12T16:39:03.224Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: linlinjava Products: litemall Problem Types: CWE-285, CWE-266 Description: A weakness has been identified in linlinjava litemall up to 1.8.0. This affects the function WxAftersaleController of the file /wx/aftersale/cancel. Executing manipulation of the argument ID can lead to improper authorization. The attack can be executed remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way. Addition
ic and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323717 - https://vuldb.com/?ctiid.323717 - https://vuldb.com/?submit.643390 - https://www.cnblogs.com/aibot/p/19063376
CVE ID: CVE-2025-10293 State: PUBLISHED Published: 2025-10-15T08:25:50.156Z Last Updated: 2025-10-15T15:28:36.069Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: nexist Products: Keyy Two Factor Authentication (like Clef) Problem Types: CWE-287 Description: The Keyy Two Factor Authentication (like Clef) plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.2.3. This is due to the plugin not properly validating a user's identity associated with a token generated. This makes it possible for authenticated attackers, with subscriber-level access and above, to generate valid auth tokens and leverage
possible for authenticated attackers, with subscriber-level access and above, to generate valid auth tokens and leverage that to auto-login as other accounts, including administrators, as long as the administrator has the 2FA set up. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/1850e6bd-04bc-4510-aba9-e51431363231?source=cve - https://wordpress.org/plugins/keyy/
CVE ID: CVE-2025-10294 State: PUBLISHED Published: 2025-10-15T08:26:01.063Z Last Updated: 2025-10-15T14:54:13.790Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: victornavarro Products: OwnID Passwordless Login Problem Types: CWE-288 Description: The OwnID Passwordless Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.3.4. This is due to the plugin not properly checking if the ownid_shared_secret value is empty prior to authenticating a user via JWT. This makes it possible for unauthenticated attackers to log in as other users, including administrators, on instances where the plugin has not been full
henticated attackers to log in as other users, including administrators, on instances where the plugin has not been fully configured yet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b8dd6008-e9b8-4a87-b1c7-0dc272850cbd?source=cve - https://wordpress.org/plugins/ownid-passwordless-login/
CVE ID: CVE-2025-10295 State: PUBLISHED Published: 2025-11-13T08:27:47.245Z Last Updated: 2025-11-13T18:44:35.798Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: kayapati Products: Angel – Fashion Model Agency WordPress CMS Theme Problem Types: CWE-79 Description: The Angel – Fashion Model Agency WordPress CMS Theme theme for WordPress is vulnerable to Stored Cross-Site Scripting the profile media uploader in all versions up to, and including, 3.2.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute
enticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This requires the user has access to the edit profile form with the media upload option. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ab747c34-219d-40c8-a73d-5b0dffba003b?source=cve - https://themeforest.net/item/angel-fashion-model-agency-wordpress-cms-theme/4251413
CVE ID: CVE-2025-10298 State: REJECTED Published: N/A Last Updated: 2025-09-11T20:44:50.895Z Description: No description available.
CVE ID: CVE-2025-10299 State: PUBLISHED Published: 2025-10-15T08:25:55.167Z Last Updated: 2025-10-15T14:45:52.224Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: hakik Products: WPBifröst – Instant Passwordless Temporary Login Links Problem Types: CWE-862 Description: The WPBifröst – Instant Passwordless Temporary Login Links plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the ctl_create_link AJAX action in all versions up to, and including, 1.0.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create new administrative user accounts and subsequently log in as thos
kers, with Subscriber-level access and above, to create new administrative user accounts and subsequently log in as those. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/50946bc7-8d31-4376-bdcc-de7aad700503?source=cve - https://wordpress.org/plugins/create-temporary-login/
CVE ID: CVE-2025-10300 State: PUBLISHED Published: 2025-10-15T08:25:57.866Z Last Updated: 2025-10-15T14:31:10.697Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: fmeaddons Products: TopBar Problem Types: CWE-352 Description: The TopBar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.0. This is due to missing or incorrect nonce validation on the fme_nb_topbar_save_settings() function. This makes it possible for unauthenticated attackers to update the plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Anal
equest granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/8e68cb68-45ab-4c2f-a105-1ef01da42453?source=cve - https://plugins.trac.wordpress.org/browser/topbar/trunk/admin/class-fme-nb-topbaradmin.php#L38 - https://plugins.trac.wordpress.org/browser/topbar/trunk/admin/class-fme-nb-topbaradmin.php#L131 - https://wordpress.org/plugins/topbar/
CVE ID: CVE-2025-10301 State: PUBLISHED Published: 2025-10-15T08:25:52.768Z Last Updated: 2025-10-15T19:40:33.174Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: flenskiproject Products: FunKItools Problem Types: CWE-352 Description: The FunKItools plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2. This is due to missing or incorrect nonce validation on the saveFields() function. This makes it possible for unauthenticated attackers to update plugin settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes:
nted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/36231136-58ec-4a6d-8cfc-d3d69c31037d?source=cve - https://plugins.trac.wordpress.org/browser/funkitools/trunk/includes/controllers/options/page.php#L59
CVE ID: CVE-2025-10302 State: PUBLISHED Published: 2025-10-03T11:17:24.011Z Last Updated: 2025-10-03T13:56:57.367Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: hameha Products: Ultimate Viral Quiz Problem Types: CWE-352 Description: The Ultimate Viral Quiz plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on thesave_options() function. This makes it possible for unauthenticated attackers to update the plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional
ged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/fbe32b9e-a6da-4257-b740-63a143cee42f?source=cve - https://plugins.trac.wordpress.org/browser/ultimate-viral-quiz/trunk/bestbugcore/classes/options.class.php#L28
CVE ID: CVE-2025-10303 State: PUBLISHED Published: 2025-10-15T08:25:58.588Z Last Updated: 2025-10-15T14:23:15.919Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: owthub Products: Library Management System Problem Types: CWE-862 Description: The Library Management System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the owt7_library_management_ajax_handler() function in all versions up to, and including, 3.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update and manipulate several of the plugin's settings and features. Additional Analyst Notes:
vel access and above, to update and manipulate several of the plugin's settings and features. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9e45feb6-5ffa-4ad3-9549-4414988f040e?source=cve - https://plugins.trac.wordpress.org/browser/library-management-system/trunk/admin/class-library-management-system-admin.php#L831
CVE ID: CVE-2025-10305 State: PUBLISHED Published: 2025-09-20T04:27:55.807Z Last Updated: 2025-09-22T15:08:40.911Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: endisha Products: Secure Passkeys Problem Types: CWE-862 Description: The Secure Passkeys plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the delete_passkey() and passkeys_list() function in all versions up to, and including, 1.2.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to view and delete passkeys. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-inte
delete passkeys. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c41651ce-ee9b-408f-a25f-113d71beb935?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3363280%40secure-passkeys&new=3363280%40secure-passkeys&sfp_email=&sfph_mail=#file2
CVE ID: CVE-2025-10306 State: PUBLISHED Published: 2025-10-03T11:17:13.538Z Last Updated: 2025-10-03T18:11:44.601Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N) Vendors: backupbolt Products: Backup Bolt Problem Types: CWE-73 Description: The Backup Bolt plugin for WordPress is vulnerable to arbitrary file downloads and backup location writes in all versions up to, and including, 1.4.1 via the process_backup_batch() function. This makes it possible for authenticated attackers, with Administrator-level access and above, to download directories outside of the webroot and write backup zip files to arbitrary locations. Additional Analyst Notes: - CISA ADP Vulnrichment: Ref
of the webroot and write backup zip files to arbitrary locations. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/63f38644-a021-407a-9882-2c8435849c08?source=cve - https://wordpress.org/plugins/backup-bolt/
CVE ID: CVE-2025-10307 State: PUBLISHED Published: 2025-09-26T06:43:28.060Z Last Updated: 2025-09-26T19:50:12.500Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: softaculous Products: Backuply – Backup, Restore, Migrate and Clone Problem Types: CWE-22 Description: The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete backup functionality in all versions up to, and including, 1.4.8. This makes it possible for authenticated attackers, with Administrator-level access and above, to delete arbitrary files on the server, which can easily lead to remote
ers, with Administrator-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0dd53fad-1bd7-41ed-95cb-205a9b421724?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3363283%40backuply&new=3363283%40backuply&sfp_email=&sfph_mail=
CVE ID: CVE-2025-10309 State: PUBLISHED Published: 2025-10-03T11:17:15.998Z Last Updated: 2025-10-03T18:12:45.691Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: bsmye Products: PayPal Forms Problem Types: CWE-352 Description: The PayPal Forms plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.3. This is due to missing nonce validation on the form creation and management functions. This makes it possible for unauthenticated attackers to create new PayPal forms and modify PayPal payment settings via a forged request granted they can trick a site administrator into performing an action such as clicking o
t settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/8cc25fe1-82f0-493b-a9d3-1a4892e35613?source=cve - https://plugins.trac.wordpress.org/browser/paypal-forms/trunk/paypal-forms.php#L533
CVE ID: CVE-2025-10310 State: PUBLISHED Published: 2025-10-15T08:25:51.504Z Last Updated: 2025-10-15T19:37:25.257Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: jayce53 Products: Rich Snippet Site Report Problem Types: CWE-89 Description: The Rich Snippet Site Report plugin for WordPress is vulnerable to SQL Injection via the 'last' parameter in all versions up to, and including, 2.0.0105 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensit
uthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. This can also be exploited via CSRF. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/2242c86e-c769-4104-b266-0cdcd90ccf63?source=cve - https://plugins.trac.wordpress.org/browser/easysnippet/tags/2.0.0105/lib/EasySnippet.php#L100 - https://wordpress.org/plugins/easysnippet/
CVE ID: CVE-2025-10311 State: PUBLISHED Published: 2025-10-03T11:17:07.156Z Last Updated: 2025-10-03T16:07:55.098Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: tom_riddle Products: Comment Info Detector Problem Types: CWE-352 Description: The Comment Info Detector plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.5. This is due to missing nonce validation on the options.php file when handling form submissions. This makes it possible for unauthenticated attackers to modify plugin settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a
ttings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/12bcc338-9e16-410f-bf3b-3756bc9b7024?source=cve - https://plugins.trac.wordpress.org/browser/comment-info-detector/trunk/options.php#L7
CVE ID: CVE-2025-10312 State: PUBLISHED Published: 2025-10-15T08:25:58.231Z Last Updated: 2025-10-15T14:29:27.032Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: steve-forster Products: Theme Importer Problem Types: CWE-352 Description: The Theme Importer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation when processing form submissions in the theme-importer.php file. This makes it possible for unauthenticated attackers to trigger arbitrary file downloads and potentially execute malicious operations via a forged request granted they can trick a site administrat
le downloads and potentially execute malicious operations via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9316796b-312f-4562-b92f-7de0129e4163?source=cve - https://plugins.trac.wordpress.org/browser/theme-importer/trunk/theme-importer.php#L71
CVE ID: CVE-2025-10313 State: PUBLISHED Published: 2025-10-15T08:26:02.685Z Last Updated: 2025-10-15T14:10:17.736Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: jankimoradiya Products: Find And Replace content for WordPress Problem Types: CWE-862 Description: The Find And Replace content for WordPress plugin for WordPress is vulnerable to unauthorized Stored Cross-Site Scripting and Arbitrary Content Replacement due to a missing capability check on the far_admin_ajax_fun() function in all versions up to, and including, 1.1. This makes it possible for unauthenticated attackers to inject arbitrary web scripts into pages that can make privilege escalation and m
ssible for unauthenticated attackers to inject arbitrary web scripts into pages that can make privilege escalation and malicious redirects possible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c0469ece-6f5f-4774-8094-f7f67702a775?source=cve - https://plugins.trac.wordpress.org/browser/find-and-replace-content/trunk/function.php?rev=1601465 - https://wordpress.org/plugins/find-and-replace-content/
CVE ID: CVE-2025-10316 State: PUBLISHED Published: 2025-09-16T09:09:33.130Z Last Updated: 2025-09-16T19:25:11.383Z Vendors: TYPO3 Products: Extension "Form to Database" (form_to_database) Problem Types: CWE-79 Description: The extension "Form to Database" is susceptible to Cross-Site Scripting. This issue affects the following versions: before 2.2.5, from 3.0.0 before 3.2.2, from 4.0.0 before 4.2.3, from 5.0.0 before 5.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://typo3.org/security/advisory/typo3-ext-sa-2025-012
CVE ID: CVE-2025-10317 State: PUBLISHED Published: 2025-10-30T11:48:43.747Z Last Updated: 2025-10-30T13:14:48.997Z Vendors: OpenSolution Products: Quick.Cart Problem Types: CWE-352 Description: Quick.Cart is vulnerable to Cross-Site Request Forgery in product creation functionality. Malicious attacker can craft special website, which when visited by the admin, will automatically send a POST request creating a malicious product with content defined by the attacker. This software does not implement any protection against this type of attack. All forms available in this software are potentially vulnerable. The vendor was notified early about this vulnerability, but didn't respond with the detai
re are potentially vulnerable. The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version 6.7 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/posts/2025/10/CVE-2025-10317 - https://opensolution.org/sklep-internetowy-quick-cart.html
CVE ID: CVE-2025-10318 State: PUBLISHED Published: 2025-09-12T12:32:08.175Z Last Updated: 2025-09-12T17:21:13.826Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: n/a Products: JeecgBoot Problem Types: CWE-285, CWE-266 Description: A vulnerability was identified in JeecgBoot up to 3.8.2. Affected by this vulnerability is an unknown functionality of the file /api/system/sendWebSocketMsg of the component WebSocket Message Handler. The manipulation of the argument userIds leads to improper authorization. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respon
exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323742 - https://vuldb.com/?ctiid.323742 - https://vuldb.com/?submit.643391 - https://www.cnblogs.com/aibot/p/19063341
CVE ID: CVE-2025-10319 State: PUBLISHED Published: 2025-09-12T15:02:07.197Z Last Updated: 2025-09-12T15:40:36.782Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: n/a Products: JeecgBoot Problem Types: CWE-285, CWE-266 Description: A security flaw has been discovered in JeecgBoot up to 3.8.2. Affected by this issue is some unknown functionality of the file /sys/tenant/exportLog of the component Tenant Log Export. The manipulation results in improper authorization. The attack can be launched remotely. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any
sed to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323743 - https://vuldb.com/?ctiid.323743 - https://vuldb.com/?submit.643839 - https://www.cnblogs.com/aibot/p/19063358
CVE ID: CVE-2025-10320 State: PUBLISHED Published: 2025-09-12T16:02:07.174Z Last Updated: 2025-09-12T16:55:07.071Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R) Vendors: iteachyou Products: Dreamer CMS Problem Types: CWE-521 Description: A vulnerability was detected in iteachyou Dreamer CMS up to 4.1.3.2. This issue affects some unknown processing of the file /admin/user/updatePwd. Performing manipulation results in weak password requirements. Remote exploitation of the attack is possible. A high degree of complexity is needed for the attack. The exploitability is assessed as difficult. The exploit is now public and may be used. The vendor was contacted
ttack. The exploitability is assessed as difficult. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323746 - https://vuldb.com/?ctiid.323746 - https://vuldb.com/?submit.643393 - https://www.cnblogs.com/aibot/p/19063320