Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-24847 State: PUBLISHED Published: 2024-02-05T06:15:10.900Z Last Updated: 2024-08-01T23:28:12.864Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: jgadbois Products: CalculatorPro Calculators Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jgadbois CalculatorPro Calculators allows Reflected XSS.This issue affects CalculatorPro Calculators: from n/a through 1.1.7. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/calculatorpro-calculators/wordpress-calculatorpro-calculators
eferences: - https://patchstack.com/database/vulnerability/calculatorpro-calculators/wordpress-calculatorpro-calculators-plugin-1-1-7-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-24848 State: PUBLISHED Published: 2024-02-05T06:11:26.580Z Last Updated: 2024-08-01T23:28:12.849Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: MJS Software Products: PT Sign Ups – Beautiful volunteer sign ups and management made easy Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MJS Software PT Sign Ups – Beautiful volunteer sign ups and management made easy allows Stored XSS.This issue affects PT Sign Ups – Beautiful volunteer sign ups and management made easy: from n/a through 1.0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program C
ups and management made easy: from n/a through 1.0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/ptoffice-sign-ups/wordpress-pt-sign-ups-plugin-1-0-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-24849 State: PUBLISHED Published: 2024-02-21T07:04:20.233Z Last Updated: 2024-08-01T23:28:12.844Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Mark Stockton Products: Quicksand Post Filter jQuery Plugin Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Mark Stockton Quicksand Post Filter jQuery Plugin.This issue affects Quicksand Post Filter jQuery Plugin: from n/a through 3.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/quicksand-jquery-post-filter/wordpress-quicksand-post-filter-jquery-plugin-3-1-1-cross-sit
ck.com/database/vulnerability/quicksand-jquery-post-filter/wordpress-quicksand-post-filter-jquery-plugin-3-1-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-24850 State: PUBLISHED Published: 2024-03-21T17:49:24.197Z Last Updated: 2024-08-01T23:28:12.933Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Mark Stockton Products: Quicksand Post Filter jQuery Plugin Problem Types: CWE-862 Description: Missing Authorization vulnerability in Mark Stockton Quicksand Post Filter jQuery Plugin.This issue affects Quicksand Post Filter jQuery Plugin: from n/a through 3.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/quicksand-jquery-post-filter/wordpress-quicksand-post-filter-jquery-plugin-3-1-1-broken-access-control
ase/vulnerability/quicksand-jquery-post-filter/wordpress-quicksand-post-filter-jquery-plugin-3-1-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2024-24851 State: PUBLISHED Published: 2024-05-28T15:30:18.716Z Last Updated: 2025-02-13T17:40:31.857Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: AutomationDirect Products: P3-550E Problem Types: CWE-805 Description: A heap-based buffer overflow vulnerability exists in the Programming Software Connection FiBurn functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to a buffer overflow. An attacker can send an unauthenticated packet to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/
es: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-1936 - https://community.automationdirect.com/s/internal-database-security-advisory/a4GPE0000003y1F2AQ/sa00025 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1936
CVE ID: CVE-2024-24852 State: PUBLISHED Published: 2025-02-12T21:19:09.556Z Last Updated: 2025-02-13T20:18:43.149Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Ethernet Adapter Complete Driver Pack Problem Types: Escalation of Privilege, CWE-427 Description: Uncontrolled search path in some Intel(R) Ethernet Adapter Complete Driver Pack install before versions 29.1 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01144.html
CVE ID: CVE-2024-24853 State: PUBLISHED Published: 2024-08-14T13:45:31.607Z Last Updated: 2024-08-16T04:01:35.677Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Processor Problem Types: escalation of privilege, CWE-696 Description: Incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some Intel(R) Processor may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01083.html
CVE ID: CVE-2024-24855 State: PUBLISHED Published: 2024-02-05T07:25:41.568Z Last Updated: 2025-11-03T19:29:24.275Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:H) Vendors: Linux Products: Linux kernel Problem Types: CWE-362 Description: A race condition was found in the Linux kernel's scsi device driver in lpfc_unregister_fcf_rescan() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.openanolis.cn/show_bug.cgi?id=8149
CVE ID: CVE-2024-24856 State: PUBLISHED Published: 2024-04-17T08:34:59.559Z Last Updated: 2024-08-01T23:28:12.874Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:H) Vendors: OpenAnolis Products: Anolis OS Problem Types: CWE-476 Description: The memory allocation function ACPI_ALLOCATE_ZEROED does not guarantee a successful allocation, but the subsequent code directly dereferences the pointer that receives it, which may lead to null pointer dereference. To fix this issue, a null pointer check should be added. If it is null, return exception code AE_NO_MEMORY. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.opena
MEMORY. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.openanolis.cn/show_bug.cgi?id=8764
CVE ID: CVE-2024-24857 State: PUBLISHED Published: 2024-02-05T07:31:31.308Z Last Updated: 2025-02-13T17:40:33.008Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:L) Vendors: Linux Products: Linux kernel Problem Types: CWE-362 Description: A race condition was found in the Linux kernel's net/bluetooth device driver in conn_info_{min,max}_age_set() function. This can result in integrity overflow issue, possibly leading to bluetooth connection abnormality or denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.openanolis.cn/show_bug.cgi?id=8155 - https://lists.debian.org/debian-lts-announce/2024/06/m
ferences: - https://bugzilla.openanolis.cn/show_bug.cgi?id=8155 - https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html - https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html
CVE ID: CVE-2024-24858 State: PUBLISHED Published: 2024-02-05T07:30:55.483Z Last Updated: 2025-02-13T17:40:33.665Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:H) Vendors: Linux Products: Linux kernel Problem Types: CWE-362 Description: A race condition was found in the Linux kernel's net/bluetooth in {conn,adv}_{min,max}_interval_set() function. This can result in I2cap connection or broadcast abnormality issue, possibly leading to denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.openanolis.cn/show_bug.cgi?id=8154 - https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html - https:
ugzilla.openanolis.cn/show_bug.cgi?id=8154 - https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html - https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html
CVE ID: CVE-2024-24859 State: PUBLISHED Published: 2024-02-05T07:28:06.115Z Last Updated: 2024-08-01T23:28:12.892Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:H) Vendors: Linux Products: Linux kernel Problem Types: CWE-362 Description: A race condition was found in the Linux kernel's net/bluetooth in sniff_{min,max}_interval_set() function. This can result in a bluetooth sniffing exception issue, possibly leading denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.openanolis.cn/show_bug.cgi?id=8153
CVE ID: CVE-2024-24860 State: PUBLISHED Published: 2024-02-05T07:27:31.042Z Last Updated: 2025-02-13T17:40:34.429Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:N) Vendors: Linux Products: Linux kernel Problem Types: CWE-362 Description: A race condition was found in the Linux kernel's bluetooth device driver in {min,max}_key_size_set() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.openanolis.cn/show_bug.cgi?id=8151 - https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html
CVE ID: CVE-2024-24861 State: PUBLISHED Published: 2024-02-05T07:26:43.824Z Last Updated: 2025-02-13T17:40:35.162Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:L) Vendors: Linux Products: Linux kernel Problem Types: CWE-362 Description: A race condition was found in the Linux kernel's media/xc4000 device driver in xc4000 xc4000_get_frequency() function. This can result in return value overflow issue, possibly leading to malfunction or denial of service issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.openanolis.cn/show_bug.cgi?id=8150 - https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html - h
s://bugzilla.openanolis.cn/show_bug.cgi?id=8150 - https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html - https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html
CVE ID: CVE-2024-24862 State: REJECTED Published: 2024-04-14T11:47:15.737Z Last Updated: 2024-05-29T07:03:04.751Z Description: No description available.
CVE ID: CVE-2024-24863 State: REJECTED Published: 2024-04-14T11:49:41.496Z Last Updated: 2024-05-29T07:06:09.361Z Description: No description available.
CVE ID: CVE-2024-24864 State: PUBLISHED Published: 2024-02-05T07:36:04.281Z Last Updated: 2024-08-01T23:28:12.940Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:H) Vendors: Linux Products: Linux kernel Problem Types: CWE-362 Description: A race condition was found in the Linux kernel's media/dvb-core in dvbdmx_write() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.openanolis.cn/show_bug.cgi?id=8178
CVE ID: CVE-2024-24865 State: PUBLISHED Published: 2024-02-05T06:08:13.495Z Last Updated: 2024-08-01T23:28:12.869Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Noah Kagan Products: Scroll Triggered Box Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noah Kagan Scroll Triggered Box allows Stored XSS.This issue affects Scroll Triggered Box: from n/a through 2.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/dreamgrow-scroll-triggered-box/wordpress-scroll-triggered-box-plugin-2-3-cr
ttps://patchstack.com/database/vulnerability/dreamgrow-scroll-triggered-box/wordpress-scroll-triggered-box-plugin-2-3-cross-site-scripting-vulnerability?_s_id=cve
CVE ID: CVE-2024-24866 State: PUBLISHED Published: 2024-02-05T06:02:19.427Z Last Updated: 2024-08-01T23:28:12.893Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Biteship Products: Biteship: Plugin Ongkos Kirim Kurir Instant, Reguler, Kargo Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Biteship Biteship: Plugin Ongkos Kirim Kurir Instant, Reguler, Kargo allows Reflected XSS.This issue affects Biteship: Plugin Ongkos Kirim Kurir Instant, Reguler, Kargo: from n/a through 2.2.24. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http
from n/a through 2.2.24. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/biteship/wordpress-biteship-plugin-2-2-24-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-24867 State: PUBLISHED Published: 2024-03-17T16:08:31.080Z Last Updated: 2024-08-01T23:28:12.875Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Osamaesh Products: WP Visitor Statistics (Real Time Traffic) Problem Types: CWE-200 Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Osamaesh WP Visitor Statistics (Real Time Traffic).This issue affects WP Visitor Statistics (Real Time Traffic): from n/a through 6.9.4. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/wp-stats-manager/wordpress-wp-stats-manager-plugin-6-9-4-
r: References: - https://patchstack.com/database/vulnerability/wp-stats-manager/wordpress-wp-stats-manager-plugin-6-9-4-sensitive-data-exposure-vulnerability?_s_id=cve
CVE ID: CVE-2024-24868 State: PUBLISHED Published: 2024-02-28T13:06:21.669Z Last Updated: 2024-08-02T17:31:26.703Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: Smartypants Products: SP Project & Document Manager Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Smartypants SP Project & Document Manager.This issue affects SP Project & Document Manager: from n/a through 4.69. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/sp-client-document-manager/wordpress-sp-project-document-manager-
ences: - https://patchstack.com/database/vulnerability/sp-client-document-manager/wordpress-sp-project-document-manager-plugin-4-69-contributor-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-24869 State: PUBLISHED Published: 2024-05-17T08:48:22.714Z Last Updated: 2024-08-01T23:28:12.942Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: BoldGrid Products: Total Upkeep Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in BoldGrid Total Upkeep allows Relative Path Traversal.This issue affects Total Upkeep: from n/a through 1.15.8. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/boldgrid-backup/wordpress-total-upkeep-plugin-1-15-8-arbitrary-file-download-vulnerability?_s_i
m/database/vulnerability/boldgrid-backup/wordpress-total-upkeep-plugin-1-15-8-arbitrary-file-download-vulnerability?_s_id=cve
CVE ID: CVE-2024-24870 State: PUBLISHED Published: 2024-02-05T05:45:57.645Z Last Updated: 2024-08-01T23:28:12.998Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Michael Dempfle Products: Advanced iFrame Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michael Dempfle Advanced iFrame allows Stored XSS.This issue affects Advanced iFrame: from n/a through 2023.10. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/advanced-iframe/wordpress-advanced-iframe-plugin-2023-10-cross-site-scriptin
tps://patchstack.com/database/vulnerability/advanced-iframe/wordpress-advanced-iframe-plugin-2023-10-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-24871 State: PUBLISHED Published: 2024-02-08T13:06:17.602Z Last Updated: 2024-08-01T23:28:12.871Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Creative Themes Products: Blocksy Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Creative Themes Blocksy allows Stored XSS.This issue affects Blocksy: from n/a through 2.0.19. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/blocksy/wordpress-blocksy-theme-2-0-19-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-24872 State: PUBLISHED Published: 2024-02-21T06:57:31.115Z Last Updated: 2024-08-01T23:28:12.873Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Themify Products: Themify Builder Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Themify Themify Builder.This issue affects Themify Builder: from n/a through 7.0.5. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/themify-builder/wordpress-themify-builder-plugin-7-0-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-24873 State: PUBLISHED Published: 2024-05-17T08:24:16.872Z Last Updated: 2024-08-01T23:28:12.795Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: CodePeople Products: CP Polls Problem Types: CWE-799 Description: : Improper Control of Interaction Frequency vulnerability in CodePeople CP Polls allows Flooding.This issue affects CP Polls: from n/a through 1.0.71. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/cp-polls/wordpress-polls-cp-plugin-1-0-71-polls-limitation-bypass-vulnerability?_s_id=cve
CVE ID: CVE-2024-24874 State: PUBLISHED Published: 2024-05-17T08:23:36.429Z Last Updated: 2024-08-01T23:28:12.865Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: CodePeople Products: CP Polls Problem Types: CWE-80 Description: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in CodePeople CP Polls allows Code Injection.This issue affects CP Polls: from n/a through 1.0.71. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/cp-polls/wordpress-polls-cp-plugin-1-0-71-content-injection-vulnerability?_s_id=cve
CVE ID: CVE-2024-24875 State: PUBLISHED Published: 2024-02-12T08:50:54.772Z Last Updated: 2024-08-16T15:35:14.323Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Yannick Lefebvre Products: Link Library Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Yannick Lefebvre Link Library.This issue affects Link Library: from n/a through 7.5.13. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/link-library/wordpress-link-library-plugin-7-5-13-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-24876 State: PUBLISHED Published: 2024-02-21T06:54:42.013Z Last Updated: 2024-08-08T16:12:51.172Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Janis Elsts Products: Admin Menu Editor Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Janis Elsts Admin Menu Editor.This issue affects Admin Menu Editor: from n/a through 1.12. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/admin-menu-editor/wordpress-admin-menu-editor-plugin-1-12-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2024-24877 State: PUBLISHED Published: 2024-02-08T13:02:00.223Z Last Updated: 2024-08-01T23:28:13.038Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Magic Hills Pty Ltd Products: Wonder Slider Lite Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magic Hills Pty Ltd Wonder Slider Lite allows Reflected XSS.This issue affects Wonder Slider Lite: from n/a through 13.9. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/wonderplugin-slider-lite/wordpress-wonder-slider-lite-plugin-
eferences: - https://patchstack.com/database/vulnerability/wonderplugin-slider-lite/wordpress-wonder-slider-lite-plugin-13-9-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-24878 State: PUBLISHED Published: 2024-02-08T12:58:38.613Z Last Updated: 2024-08-27T20:17:39.311Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: PT Woo Plugins (by Webdados) Products: Portugal CTT Tracking for WooCommerce Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PT Woo Plugins (by Webdados) Portugal CTT Tracking for WooCommerce allows Reflected XSS.This issue affects Portugal CTT Tracking for WooCommerce: from n/a through 2.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/v
itional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/portugal-ctt-tracking-woocommerce/wordpress-portugal-ctt-tracking-for-woocommerce-plugin-2-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2024-24879 State: PUBLISHED Published: 2024-02-08T12:02:53.091Z Last Updated: 2024-08-01T23:28:13.191Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Yannick Lefebvre Products: Link Library Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Yannick Lefebvre Link Library allows Reflected XSS.This issue affects Link Library: from n/a through 7.5.13. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://patchstack.com/database/vulnerability/link-library/wordpress-link-library-plugin-7-5-13-reflected-cross-site-scripting-xs
atchstack.com/database/vulnerability/link-library/wordpress-link-library-plugin-7-5-13-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve