Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
rs, with contributor-level access and above, to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/16f5a104-dce0-4249-91b9-67f99cce16d3?source=cve - https://www.convertplug.com/plus/
CVE ID: CVE-2024-4839 State: PUBLISHED Published: 2024-06-24T12:47:59.441Z Last Updated: 2024-08-01T20:55:10.037Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: parisneo Products: parisneo/lollms-webui Problem Types: CWE-352 Description: A Cross-Site Request Forgery (CSRF) vulnerability exists in the 'Servers Configurations' function of the parisneo/lollms-webui, versions 9.6 to the latest. The affected functions include Elastic search Service (under construction), XTTS service, Petals service, vLLM service, and Motion Ctrl service, which lack CSRF protection. This vulnerability allows attackers to deceive users into unwittingly installing the XTTS service
lack CSRF protection. This vulnerability allows attackers to deceive users into unwittingly installing the XTTS service among other packages by submitting a malicious installation request. Successful exploitation results in attackers tricking users into performing actions without their consent. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/dcfc5a07-0427-42b5-a623-8d943873d7ff
CVE ID: CVE-2024-4840 State: PUBLISHED Published: 2024-05-13T22:16:39.899Z Last Updated: 2025-11-20T19:15:50.057Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Red Hat Products: Red Hat OpenStack Platform 17.1 for RHEL 9, Red Hat OpenStack Platform 16.2 Problem Types: CWE-312 Description: An flaw was found in the OpenStack Platform (RHOSP) director, a toolset for installing and managing a complete RHOSP environment. Plaintext passwords may be stored in log files, which can expose sensitive information to anyone with access to the logs. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata
ditional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2024:9978 - https://access.redhat.com/security/cve/CVE-2024-4840 - https://bugzilla.redhat.com/show_bug.cgi?id=2280249
CVE ID: CVE-2024-4841 State: PUBLISHED Published: 2024-06-23T14:33:33.798Z Last Updated: 2024-08-01T20:55:10.099Z Severity: MEDIUM (CVSS 4 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: parisneo Products: parisneo/lollms-webui Problem Types: CWE-29 Description: A Path Traversal vulnerability exists in the parisneo/lollms-webui, specifically within the 'add_reference_to_local_mode' function due to the lack of input sanitization. This vulnerability affects versions v9.6 to the latest. By exploiting this vulnerability, an attacker can predict the folders, subfolders, and files present on the victim's computer. The vulnerability is present in the way the application handles the 'path' pa
nd files present on the victim's computer. The vulnerability is present in the way the application handles the 'path' parameter in HTTP requests to the '/add_reference_to_local_model' endpoint. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/740dda3e-7104-4ccf-9ac4-8870e4d6d602
CVE ID: CVE-2024-4842 State: REJECTED Published: N/A Last Updated: 2024-05-30T19:57:57.909Z Description: No description available.
CVE ID: CVE-2024-4843 State: PUBLISHED Published: 2024-05-16T06:04:05.471Z Last Updated: 2024-08-01T20:55:10.103Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Trellix Products: ePolicy Orchestrator Problem Types: CWE-639 Description: ePO doesn't allow a regular privileged user to delete tasks or assignments. Insecure direct object references that allow a least privileged user to manipulate the client task and client task assignments, hence escalating his/her privilege. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://thrive.trellix.com/s/article/000013505
CVE ID: CVE-2024-4844 State: PUBLISHED Published: 2024-05-16T06:19:47.418Z Last Updated: 2024-08-01T20:55:10.015Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Trellix Products: ePolicy Orchestrator Problem Types: CWE-798 Description: Hardcoded credentials vulnerability in Trellix ePolicy Orchestrator (ePO) on Premise prior to 5.10 Service Pack 1 Update 2 allows an attacker with admin privileges on the ePO server to read the contents of the orion.keystore file, allowing them to access the ePO database encryption key. This was possible through using a hard coded password for the keystore. Access Control restrictions on the file mean this would not be exploita
gh using a hard coded password for the keystore. Access Control restrictions on the file mean this would not be exploitable unless the user is the system admin for the server that ePO is running on. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://thrive.trellix.com/s/article/000013505
CVE ID: CVE-2024-4845 State: PUBLISHED Published: 2024-06-12T09:33:11.896Z Last Updated: 2024-08-01T20:55:10.037Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: icegram Products: Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce Problem Types: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Description: The Icegram Express plugin for WordPress is vulnerable to SQL Injection via the ‘options[list_id]’ parameter in all versions up to, and including, 5.7.22 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the exis
uding, 5.7.22 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/21be2215-8ce0-438e-94e0-6a350b8cc952?source=cve - https://plugins.trac.wordpress.org/changeset/3098321/email-subscribers
CVE ID: CVE-2024-4846 State: PUBLISHED Published: 2024-06-25T12:18:18.180Z Last Updated: 2024-11-20T21:35:56.186Z Vendors: Devolutions Products: Server Description: Authentication bypass in the 2FA feature in Devolutions Server 2024.1.14.0 and earlier allows an authenticated attacker to authenticate to another user without being asked for the 2FA via another browser tab. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://devolutions.net/security/advisories/DEVO-2024-0009
CVE ID: CVE-2024-4847 State: PUBLISHED Published: 2024-05-15T01:56:54.307Z Last Updated: 2024-08-01T20:55:10.175Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: alttextai Products: Alt Text AI – Automatically generate image alt text for SEO and accessibility Problem Types: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Description: The Alt Text AI – Automatically generate image alt text for SEO and accessibility plugin for WordPress is vulnerable to generic SQL Injection via the ‘last_post_id’ parameter in all versions up to, and including, 1.4.9 due to insufficient escaping on the user supplied parameter and lack
ameter in all versions up to, and including, 1.4.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3c192623-eb46-4f1d-b897-433ac80608cb?source=cve - https://plugins.trac.wordpress.org/browser/alttext-ai/trunk/includes/class-atai-attachment.php#L677 - htt
b?source=cve - https://plugins.trac.wordpress.org/browser/alttext-ai/trunk/includes/class-atai-attachment.php#L677 - https://plugins.trac.wordpress.org/changeset/3086107/ - https://wordpress.org/plugins/alttext-ai/#developers
CVE ID: CVE-2024-4848 State: REJECTED Published: N/A Last Updated: 2024-07-29T11:06:17.153Z Description: No description available.
CVE ID: CVE-2024-4849 State: PUBLISHED Published: 2024-05-18T05:40:01.841Z Last Updated: 2024-08-01T20:55:10.281Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: ValvePress Products: WordPress Automatic Plugin Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The WordPress Automatic Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘autoplay’ parameter in all versions up to, and including, 3.94.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject ar
tput escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4be58bfa-d489-45f5-9169-db8bab718175?source=cve - https://codecanyon.net/item/wordpress-automatic-plugin/1904470
CVE ID: CVE-2024-4851 State: PUBLISHED Published: 2024-06-06T18:39:58.505Z Last Updated: 2024-08-09T19:48:33.486Z Severity: HIGH (CVSS 7.7 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: stangirard Products: stangirard/quivr Problem Types: CWE-918 Description: A Server-Side Request Forgery (SSRF) vulnerability exists in the stangirard/quivr application, version 0.0.204, which allows attackers to access internal networks. The vulnerability is present in the crawl endpoint where the 'url' parameter can be manipulated to send HTTP requests to arbitrary URLs, thereby facilitating SSRF attacks. The affected code is located in the backend/routes/crawl_routes.py file, specifically within the
ilitating SSRF attacks. The affected code is located in the backend/routes/crawl_routes.py file, specifically within the crawl_endpoint function. This issue could allow attackers to interact with internal services that are accessible from the server hosting the application. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/b6011986-954a-47da-a60c-fc7aebc8005d
CVE ID: CVE-2024-4853 State: PUBLISHED Published: 2024-05-14T00:03:07.500Z Last Updated: 2025-11-03T22:22:00.562Z Severity: LOW (CVSS 3.6 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Wireshark Foundation Products: editcap Problem Types: CWE-762 Description: Memory handling issue in editcap could cause denial of service via crafted capture file Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wireshark.org/security/wnpa-sec-2024-08.html - https://gitlab.com/wireshark/wireshark/-/issues/19724
CVE ID: CVE-2024-4854 State: PUBLISHED Published: 2024-05-14T00:03:12.486Z Last Updated: 2025-11-03T22:22:02.062Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H) Vendors: Wireshark Foundation Products: Wireshark Problem Types: CWE-835 Description: MONGO and ZigBee TLV dissector infinite loops in Wireshark 4.2.0 to 4.2.4, 4.0.0 to 4.0.14, and 3.6.0 to 3.6.22 allow denial of service via packet injection or crafted capture file Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wireshark.org/security/wnpa-sec-2024-07.html - https://gitlab.com/wireshark/wireshark/-/issues/19726 - https://gitlab.com/wireshark/wireshark/-/
npa-sec-2024-07.html - https://gitlab.com/wireshark/wireshark/-/issues/19726 - https://gitlab.com/wireshark/wireshark/-/merge_requests/15047 - https://gitlab.com/wireshark/wireshark/-/merge_requests/15499
CVE ID: CVE-2024-4855 State: PUBLISHED Published: 2024-05-14T00:03:17.488Z Last Updated: 2024-08-29T15:04:58.873Z Severity: LOW (CVSS 3.6 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Wireshark Foundation Products: editcap Problem Types: CWE-416 Description: Use after free issue in editcap could cause denial of service via crafted capture file Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wireshark.org/security/wnpa-sec-2024-08.html - https://gitlab.com/wireshark/wireshark/-/issues/19782 - https://gitlab.com/wireshark/wireshark/-/issues/19783 - https://gitlab.com/wireshark/wireshark/-/issues/19784
CVE ID: CVE-2024-4856 State: PUBLISHED Published: 2024-06-04T06:00:03.200Z Last Updated: 2025-03-27T14:59:32.074Z Vendors: Unknown Products: FS Product Inquiry Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The FS Product Inquiry WordPress plugin through 1.1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin or unauthenticated users Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/6cf90a27-55e2-4b2c-9df1-5fa34c1bd9d1/
CVE ID: CVE-2024-4857 State: PUBLISHED Published: 2024-06-04T06:00:03.389Z Last Updated: 2025-03-28T19:37:43.493Z Vendors: Unknown Products: FS Product Inquiry Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The FS Product Inquiry WordPress plugin through 1.1.1 does not sanitise and escape some form submissions, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/bf1b8434-b361-4666-9058-d9f08c09d083/
CVE ID: CVE-2024-4858 State: PUBLISHED Published: 2024-05-25T02:50:07.385Z Last Updated: 2024-08-01T20:55:10.376Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: uapp Products: Testimonial Carousel For Elementor Problem Types: CWE-862 Missing Authorization Description: The Testimonial Carousel For Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'save_testimonials_option_callback' function in versions up to, and including, 10.2.0. This makes it possible for unauthenticated attackers to update the OpenAI API key, disabling the feature. Additional Analyst Notes: - CISA ADP Vulnrichment:
cated attackers to update the OpenAI API key, disabling the feature. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/1f589345-a081-4d27-ac4a-6edc44b96f91?source=cve - https://plugins.trac.wordpress.org/browser/testimonials-carousel-elementor/trunk/class-testimonials-carousel-elementor.php#L126 - https://plugins.trac.wordpress.org/changeset/3092154/testimonials-carousel-elementor/trunk/class-testimonials-carousel-elementor.php
CVE ID: CVE-2024-4859 State: PUBLISHED Published: 2024-05-14T09:05:41.255Z Last Updated: 2024-08-01T20:55:09.988Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N) Vendors: solidus Products: solidus Problem Types: CWE-79 Description: Solidus <= 4.3.4 is affected by a Stored Cross-Site Scripting vulnerability in the order tracking URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2024-15
CVE ID: CVE-2024-4860 State: PUBLISHED Published: 2024-05-14T09:11:39.233Z Last Updated: 2024-08-01T20:55:10.115Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Problem Types: CWE-79 Description: The 'WordPress RSS Aggregator' WordPress Plugin, versions < 4.23.9 are affected by a Cross-Site Scripting (XSS) vulnerability due to the lack of sanitization of the 'notice_id' GET parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2024-16
CVE ID: CVE-2024-4862 State: PUBLISHED Published: 2024-07-09T11:02:41.201Z Last Updated: 2024-08-01T20:55:10.291Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: wpbits Products: WPBITS Addons For Elementor Page Builder Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The WPBITS Addons For Elementor Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and including, 1.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contribu
ation and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/5f459033-1c95-4781-93f4-1ee5e310933a?source=cve - https://plugins.trac.wordpress.org/browser/wpbits-addons-for-elementor/trunk/includes/widgets/business_hours.php#L560 - https://plugins.trac.wordpress.org/browser/wpbits-addons-for-elementor/trunk/includes/widgets/accordion.php#L868 - https://plugins.t
ins.trac.wordpress.org/browser/wpbits-addons-for-elementor/trunk/includes/widgets/accordion.php#L868 - https://plugins.trac.wordpress.org/browser/wpbits-addons-for-elementor/trunk/includes/widgets/logo_grid.php#L716 - https://plugins.trac.wordpress.org/browser/wpbits-addons-for-elementor/trunk/includes/widgets/price_table.php#L2040 - https://plugins.trac.wordpress.org/browser/wpbits-addons-for-elementor/trunk/includes/widgets/tabs.php#L824 - https://plugins.trac.wordpress.org/changeset/3113578/wpbits-addons-for-elementor/trunk/includes/widgets/business_hours.php - https://plugins.trac.wordpress.org/changeset/3113578/wpbits-addons-for-elementor/trunk/includes/widgets/accordion.php - https://p
lugins.trac.wordpress.org/changeset/3113578/wpbits-addons-for-elementor/trunk/includes/widgets/accordion.php - https://plugins.trac.wordpress.org/changeset/3113578/wpbits-addons-for-elementor/trunk/includes/widgets/logo_grid.php - https://plugins.trac.wordpress.org/changeset/3113578/wpbits-addons-for-elementor/trunk/includes/widgets/price_table.php - https://plugins.trac.wordpress.org/changeset/3113578/wpbits-addons-for-elementor/trunk/includes/widgets/tabs.php
CVE ID: CVE-2024-4863 State: PUBLISHED Published: 2024-06-14T08:35:34.643Z Last Updated: 2024-08-01T20:55:10.258Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: britner Products: Gutenberg Blocks with AI by Kadence WP – Page Builder Features Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘titleFont’ parameter in all versions up to, and including, 3.2.38 due to insufficient input sanitization and output escaping. This makes it possible for authenti
o, and including, 3.2.38 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/2e0cde65-f75c-4602-bffe-97b391a428b4?source=cve - https://plugins.trac.wordpress.org/browser/kadence-blocks/trunk/includes/blocks/class-kadence-blocks-testimonial-block.php#L276 - https://plugins.trac.wordpress.org/changeset/3091170/kadence-blocks/trunk/includes/blocks/cl
estimonial-block.php#L276 - https://plugins.trac.wordpress.org/changeset/3091170/kadence-blocks/trunk/includes/blocks/class-kadence-blocks-testimonial-block.php
CVE ID: CVE-2024-4865 State: PUBLISHED Published: 2024-05-18T03:06:58.279Z Last Updated: 2024-08-01T20:55:10.259Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: thehappymonster Products: Happy Addons for Elementor Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘_id’ parameter in all versions up to, and including, 3.10.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject ar
tput escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/2fdf2020-ad80-44c3-89b6-fc2ba067cd33?source=cve - https://plugins.trac.wordpress.org/browser/happy-elementor-addons/trunk/widgets/skills/widget.php#L359 - https://plugins.trac.wordpress.org/changeset/3087575/happy-elementor-addons/trunk/widgets/skills/widget.php
CVE ID: CVE-2024-4866 State: PUBLISHED Published: 2024-07-10T02:02:43.365Z Last Updated: 2024-08-01T20:55:10.258Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: codersaiful Products: UltraAddons – Elementor Addons (Header Footer Builder, Custom Font, Custom CSS,Woo Widget, Menu Builder, Anywhere Elementor Shortcode) Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The UltraAddons – Elementor Addons (Header Footer Builder, Custom Font, Custom CSS,Woo Widget, Menu Builder, Anywhere Elementor Shortcode) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets i
, Anywhere Elementor Shortcode) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 1.1.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/544d7572-651f-45bb-b2ce-d768553c251a?source=cve - https://plugins.trac.wordpress.org/browser/ultraaddons-e