Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.290793 - https://vuldb.com/?ctiid.290793 - https://vuldb.com/?submit.470902 - https://github.com/wander-chu/SpringBoot-Blog/issues/4 - https://github.com/wander-chu/SpringBoot-Blog/issues/4#issue-2761636207
CVE ID: CVE-2024-13201 State: PUBLISHED Published: 2025-01-09T01:31:04.761Z Last Updated: 2025-01-09T16:00:39.122Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: wander-chu Products: SpringBoot-Blog Problem Types: CWE-434, CWE-284 Description: A vulnerability has been found in wander-chu SpringBoot-Blog 1.0 and classified as critical. This vulnerability affects the function upload of the file src/main/java/com/my/blog/website/controller/admin/AttachtController.java of the component Admin Attachment Handler. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The v
ricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.290794 - https://vuldb.com/?ctiid.290794 - https://vuldb.com/?submit.470910 - https://github.com/wander-chu/SpringBoot-Blog/issues/6 - https://github.com/wander-chu/SpringBoot-Blog/issues/6#issue-2761640788
CVE ID: CVE-2024-13202 State: PUBLISHED Published: 2025-01-09T01:31:06.386Z Last Updated: 2025-01-09T16:51:52.108Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: wander-chu Products: SpringBoot-Blog Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in wander-chu SpringBoot-Blog 1.0 and classified as problematic. This issue affects the function modifiyArticle of the file src/main/java/com/my/blog/website/controller/admin/PageController.java of the component Blog Article Handler. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional A
ipting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.290795 - https://vuldb.com/?ctiid.290795 - https://vuldb.com/?submit.470914 - https://github.com/wander-chu/SpringBoot-Blog/issues/7 - https://github.com/wander-chu/SpringBoot-Blog/issues/7#issue-2761643235
CVE ID: CVE-2024-13203 State: PUBLISHED Published: 2025-01-09T02:00:15.952Z Last Updated: 2025-01-09T16:31:24.978Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: kurniaramadhan Products: E-Commerce-PHP Problem Types: CWE-352, CWE-862 Description: A vulnerability was found in kurniaramadhan E-Commerce-PHP 1.0. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.290796 - https://vuldb.com/?ctiid
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.290796 - https://vuldb.com/?ctiid.290796 - https://www.websecurityinsights.my.id/2024/12/ecommerce-php-by-kurniaramadhan-sql.html?m=1
CVE ID: CVE-2024-13204 State: PUBLISHED Published: 2025-01-09T02:00:17.765Z Last Updated: 2025-01-10T12:58:47.618Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: kurniaramadhan Products: E-Commerce-PHP Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in kurniaramadhan E-Commerce-PHP 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /blog-details.php. The manipulation of the argument blog_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Addi
to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.290797 - https://vuldb.com/?ctiid.290797 - https://www.websecurityinsights.my.id/2024/12/ecommerce-php-by-kurniaramadhan-sql.html?m=1
CVE ID: CVE-2024-13205 State: PUBLISHED Published: 2025-01-09T02:31:04.629Z Last Updated: 2025-01-10T12:58:45.912Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: kurniaramadhan Products: E-Commerce-PHP Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in kurniaramadhan E-Commerce-PHP 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/create_product.php of the component Create Product Page. The manipulation of the argument Name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disc
d remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.290798 - https://vuldb.com/?ctiid.290798 - https://vuldb.com/?submit.471233 - https://www.websecurityinsights.my.id/2024/12/ecommerce-php-by-kurniaramadhan-sql.html?m=1 - https://youtu.be/YHaoqELPbBQ?si=egd2TedZ1F-i-Qae
CVE ID: CVE-2024-13206 State: PUBLISHED Published: 2025-01-09T03:00:09.484Z Last Updated: 2025-01-09T15:58:14.785Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: REVE Products: Antivirus Problem Types: CWE-276, CWE-266 Description: A vulnerability classified as critical has been found in REVE Antivirus 1.0.0.0 on Linux. This affects an unknown part of the file /usr/local/reveantivirus/tmp/reveinstall. The manipulation leads to incorrect default permissions. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Add
to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.290799 - https://vuldb.com/?ctiid.290799 - https://vuldb.com/?submit.471160 - https://github.com/hawkteam404/RnD_Public/blob/main/reve_av_multiple_vuln.md
CVE ID: CVE-2024-13207 State: PUBLISHED Published: 2025-04-15T06:00:06.042Z Last Updated: 2025-04-15T13:13:48.249Z Vendors: Unknown Products: Widget for Social Page Feeds Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Widget for Social Page Feeds WordPress plugin before 6.4.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/c3e27fa2-b6dd-48eb-83ec-99dc034eff38/
CVE ID: CVE-2024-13208 State: PUBLISHED Published: 2025-02-15T06:00:09.375Z Last Updated: 2025-02-18T20:40:01.038Z Vendors: Unknown Products: Maps Plugin using Google Maps for WordPress Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Maps Plugin using Google Maps for WordPress WordPress plugin before 1.9.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/f86d4f64-208f-407f-8d2c-a89b5e0ac777
lyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/f86d4f64-208f-407f-8d2c-a89b5e0ac777/
CVE ID: CVE-2024-13209 State: PUBLISHED Published: 2025-01-09T03:00:15.362Z Last Updated: 2025-01-09T15:50:00.953Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: Redaxo Products: CMS Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in Redaxo CMS 5.18.1. It has been classified as problematic. Affected is an unknown function of the file /index.php?page=structure&category_id=1&article_id=1&clang=1&function=edit_art&artstart=0 of the component Structure Management Page. The manipulation of the argument Article Name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor
. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.290814 - https://vuldb.com/?ctiid.290814 - https://vuldb.com/?submit.466396 - https://geochen.medium.com/redaxo-cms-5-18-1-cross-site-scripting-7c9a872c72f6
CVE ID: CVE-2024-13210 State: PUBLISHED Published: 2025-01-09T03:31:04.605Z Last Updated: 2025-01-09T15:47:47.154Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: donglight Products: bookstore电商书城系统说明 Problem Types: CWE-434, CWE-284 Description: A vulnerability was found in donglight bookstore电商书城系统说明 1.0. It has been declared as critical. Affected by this vulnerability is the function uploadPicture of the file src/main/java/org/zdd/bookstore/web/controller/admin/AdminBookController. java. The manipulation of the argument pictureFile leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst
d. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.290815 - https://vuldb.com/?ctiid.290815 - https://vuldb.com/?submit.469686 - https://github.com/donglight/bookstore/issues/10 - https://github.com/donglight/bookstore/issues/10#issue-2760923048
CVE ID: CVE-2024-13211 State: PUBLISHED Published: 2025-01-09T03:31:06.175Z Last Updated: 2025-01-09T15:46:38.557Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SingMR Products: HouseRent Problem Types: CWE-284, CWE-266 Description: A vulnerability was found in SingMR HouseRent 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file src/main/java/com/house/wym/controller/AdminController.java. The manipulation leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.290816
he public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.290816 - https://vuldb.com/?ctiid.290816 - https://vuldb.com/?submit.471427 - https://github.com/SingMR/HouseRent/issues/12 - https://github.com/SingMR/HouseRent/issues/12#issue-2762124045
CVE ID: CVE-2024-13212 State: PUBLISHED Published: 2025-01-09T04:00:12.875Z Last Updated: 2025-01-09T15:38:43.822Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SingMR Products: HouseRent Problem Types: CWE-434, CWE-284 Description: A vulnerability classified as critical has been found in SingMR HouseRent 1.0. This affects the function singleUpload/upload of the file src/main/java/com/house/wym/controller/AddHouseController.java. The manipulation of the argument file leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.290817 - https://vuldb.com/?ctiid.290817 - https://vuldb.com/?submit.471441 - https://github.com/SingMR/HouseRent/issues/13 - https://github.com/SingMR/HouseRent/issues/13#issue-2762125363
CVE ID: CVE-2024-13213 State: PUBLISHED Published: 2025-01-09T04:00:15.391Z Last Updated: 2025-01-09T15:38:07.338Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SingMR Products: HouseRent Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic was found in SingMR HouseRent 1.0. This vulnerability affects unknown code of the file /toAdminUpdateHousePage?hID=30. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.290818 - https://vuldb.com/?ctiid.290818 - https://vuldb.com
CISA ADP Vulnrichment: References: - https://vuldb.com/?id.290818 - https://vuldb.com/?ctiid.290818 - https://vuldb.com/?submit.471444 - https://github.com/SingMR/HouseRent/issues/15 - https://github.com/SingMR/HouseRent/issues/15#issue-2762127702
CVE ID: CVE-2024-13215 State: PUBLISHED Published: 2025-01-15T12:44:26.972Z Last Updated: 2025-01-15T14:30:01.993Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: webtechstreet Products: Elementor Addon Elements Problem Types: CWE-359 Description: The Elementor Addon Elements plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.13.10 via the 'render' function in modules/modal-popup/widgets/modal-popup.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, scheduled, and draft template data. Additional Analyst Notes: - CISA
s and above, to extract sensitive private, pending, scheduled, and draft template data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4feacb75-0533-4f53-8ce9-3e45ee8336e2?source=cve - https://plugins.trac.wordpress.org/browser/addon-elements-for-elementor-page-builder/trunk/modules/modal-popup/widgets/modal-popup.php#L1058 - https://plugins.trac.wordpress.org/changeset/3221982/
CVE ID: CVE-2024-13216 State: PUBLISHED Published: 2025-01-31T05:22:32.906Z Last Updated: 2025-02-10T22:07:42.735Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: devitemsllc Products: HT Event – WordPress Event Manager Plugin for Elementor Problem Types: CWE-359 Description: The HT Event – WordPress Event Manager Plugin for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.7 via the 'render' function in /includes/widgets/htevent_sponsor.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, scheduled, and d
uthenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, scheduled, and draft template data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/155f494b-be25-4269-9d3b-379309619bbe?source=cve - https://plugins.trac.wordpress.org/browser/ht-event/trunk/includes/widgets/htevent_sponsor.php#L443
CVE ID: CVE-2024-13217 State: PUBLISHED Published: 2025-02-27T11:13:32.762Z Last Updated: 2025-02-27T14:31:58.621Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: jegtheme Products: Jeg Elementor Kit Problem Types: CWE-359 Description: The Jeg Elementor Kit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.11 via the 'expired_data' and 'build_content' functions. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, scheduled, and draft template data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:/
e, pending, scheduled, and draft template data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/2136cad8-6b0b-4458-a357-6e98f1ac3e0b?source=cve - https://plugins.trac.wordpress.org/browser/jeg-elementor-kit/trunk/class/elements/views/class-countdown-view.php#L107 - https://plugins.trac.wordpress.org/browser/jeg-elementor-kit/trunk/class/elements/views/class-off-canvas-view.php#L25 - https://plugins.trac.wordpress.org/changeset/3246154/
CVE ID: CVE-2024-13218 State: PUBLISHED Published: 2025-01-31T06:00:15.134Z Last Updated: 2025-03-14T16:19:42.514Z Vendors: Unknown Products: Fast Tube Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Fast Tube WordPress plugin through 2.3.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/79eb9432-3e3c-4a23-88a8-05aa3146061c/
CVE ID: CVE-2024-13219 State: PUBLISHED Published: 2025-01-31T06:00:15.349Z Last Updated: 2025-01-31T15:14:57.369Z Vendors: Unknown Products: Privacy Policy Genius Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Privacy Policy Genius WordPress plugin through 2.0.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/3ad02238-dce1-48ce-986f-fef36b110b2d/
CVE ID: CVE-2024-13220 State: PUBLISHED Published: 2025-01-31T06:00:15.556Z Last Updated: 2025-03-20T14:35:39.859Z Vendors: Unknown Products: WordPress Google Map Professional (Map In Your Language) Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WordPress Google Map Professional (Map In Your Language) WordPress plugin through 1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/33ef27b4-e88f-46ec-9b3f-0a3e16d6f82e/
CVE ID: CVE-2024-13221 State: PUBLISHED Published: 2025-01-31T06:00:15.775Z Last Updated: 2025-03-14T15:15:10.009Z Vendors: Unknown Products: Fantastic ElasticSearch Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Fantastic ElasticSearch WordPress plugin through 4.1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/693f4cc4-a082-46bc-abc9-a08919f70157/
CVE ID: CVE-2024-13222 State: PUBLISHED Published: 2025-01-31T06:00:15.995Z Last Updated: 2025-03-19T13:54:40.038Z Vendors: Unknown Products: User Messages Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The User Messages WordPress plugin through 1.2.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/069e1f81-448d-4d27-b288-87111dade2f2/
CVE ID: CVE-2024-13223 State: PUBLISHED Published: 2025-01-31T06:00:16.215Z Last Updated: 2025-03-14T17:12:59.114Z Vendors: Unknown Products: Tabulate Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Tabulate WordPress plugin through 2.10.3 does not sanitise and escape some parameters before outputting them back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/e3a52af1-7cb6-4361-b1c7-a50e0cc62fb1/
CVE ID: CVE-2024-13224 State: PUBLISHED Published: 2025-01-31T06:00:16.447Z Last Updated: 2025-03-20T20:38:46.928Z Vendors: Unknown Products: SlideDeck 1 Lite Content Slider Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The SlideDeck 1 Lite Content Slider WordPress plugin through 1.4.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/32a90907-e82f-41b3-b20e-d10a722e2999/
CVE ID: CVE-2024-13225 State: PUBLISHED Published: 2025-01-31T06:00:16.734Z Last Updated: 2025-03-19T13:38:30.205Z Vendors: Unknown Products: ECT Home Page Products Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The ECT Home Page Products WordPress plugin through 1.9 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/8efd7d62-3f74-4108-970e-bd5ed24914ff/
CVE ID: CVE-2024-13226 State: PUBLISHED Published: 2025-01-31T06:00:17.007Z Last Updated: 2025-03-24T17:32:53.150Z Vendors: Unknown Products: A5 Custom Login Page Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The A5 Custom Login Page WordPress plugin through 2.8.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/dd09fe99-2334-4d6f-8a70-e1cd856b1486/
CVE ID: CVE-2024-13227 State: PUBLISHED Published: 2025-02-13T04:21:45.068Z Last Updated: 2025-02-13T19:40:03.999Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: rankmath Products: Rank Math SEO – AI SEO Tools to Dominate SEO Rankings Problem Types: CWE-79 Description: The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Rank Math API in all versions up to, and including, 1.0.235 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arb
d attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/24df10fb-5143-478e-90f0-27f604ad43ee?source=cve - https://plugins.trac.wordpress.org/browser/seo-by-rank-math/trunk/includes/rest/class-shared.php#L257 - https://wordpress.org/plugins/seo-by-rank-math/#developers - https://rankmath.com/changelog/free/page/2/ - https://plugins.trac.wordpress.org/changeset/3222905/