Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
nerability. The specific flaw exists within the configuration of OpenSSL. The product loads an OpenSSL configuration file from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-25041. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-25-182/
CVE ID: CVE-2025-2769 State: PUBLISHED Published: 2025-04-23T16:51:39.300Z Last Updated: 2025-04-23T17:59:45.711Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Bdrive Products: NetDrive Problem Types: CWE-427 Description: Bdrive NetDrive Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Bdrive NetDrive. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the configuration of OpenSSL. The product loads an OpenSSL configuration fil
nerability. The specific flaw exists within the configuration of OpenSSL. The product loads an OpenSSL configuration file from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-25295. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-25-183/
CVE ID: CVE-2025-2770 State: PUBLISHED Published: 2025-04-23T16:51:56.244Z Last Updated: 2025-04-23T17:59:22.164Z Severity: MEDIUM (CVSS 4.9 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: BEC Technologies Products: Multiple Routers Problem Types: CWE-256 Description: BEC Technologies Multiple Routers Cleartext Password Storage Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of BEC Technologies routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the web-based user interface. The issue results from storing credentials in a recoverable format. An at
aw exists within the web-based user interface. The issue results from storing credentials in a recoverable format. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-25986. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-25-186/
CVE ID: CVE-2025-2771 State: PUBLISHED Published: 2025-04-23T16:52:10.775Z Last Updated: 2025-04-23T17:50:26.583Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: BEC Technologies Products: Multiple Routers Problem Types: CWE-287 Description: BEC Technologies Multiple Routers Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of BEC Technologies routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web-based user interface. The issue results from the lack of authentication prior to allowing access to functionality. An attacker c
er interface. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-25894. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-25-184/
CVE ID: CVE-2025-2772 State: PUBLISHED Published: 2025-04-23T16:52:23.349Z Last Updated: 2025-04-23T17:49:13.439Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: BEC Technologies Products: Multiple Routers Problem Types: CWE-522 Description: BEC Technologies Multiple Routers Insufficiently Protected Credentials Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of BEC Technologies routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within /cgi-bin/tools_usermanage.asp. The issue results from transmitting a list of us
ability. The specific flaw exists within /cgi-bin/tools_usermanage.asp. The issue results from transmitting a list of users and their credentials to be handled on the client side. An attacker can leverage this vulnerability to disclose transported credentials, leading to further compromise. Was ZDI-CAN-25895. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-25-185/
CVE ID: CVE-2025-2773 State: PUBLISHED Published: 2025-04-23T16:52:32.478Z Last Updated: 2025-04-23T17:48:35.621Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: BEC Technologies Products: Multiple Routers Problem Types: CWE-78 Description: BEC Technologies Multiple Routers sys ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of BEC Technologies Multiple Routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the management interface, which listens on
ing authentication mechanism can be bypassed. The specific flaw exists within the management interface, which listens on TCP port 22 by default. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-25903. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-25-187/
CVE ID: CVE-2025-2775 State: PUBLISHED Published: 2025-05-07T14:43:23.817Z Last Updated: 2025-11-19T18:33:18.279Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: SysAid Products: SysAid On-Prem Problem Types: CWE-611 Description: SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Checkin processing functionality, allowing for administrator account takeover and file read primitives. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://documentation.sysaid.com/docs/24-40-60 - https://labs.watchtowr.com/sysowned-your-friendly-rce-support-ticket/
CVE ID: CVE-2025-2776 State: PUBLISHED Published: 2025-05-07T14:50:40.717Z Last Updated: 2025-11-19T18:33:05.781Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: SysAid Products: SysAid On-Prem Problem Types: CWE-611 Description: SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Server URL processing functionality, allowing for administrator account takeover and file read primitives. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://documentation.sysaid.com/docs/24-40-60 - https://labs.watchtowr.com/sysowned-your-friendly-rce-support-ticket/
CVE ID: CVE-2025-2777 State: PUBLISHED Published: 2025-05-07T14:53:00.712Z Last Updated: 2025-11-19T18:32:45.643Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: SysAid Products: SysAid On-Prem Problem Types: CWE-611 Description: SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the lshw processing functionality, allowing for administrator account takeover and file read primitives. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://documentation.sysaid.com/docs/24-40-60 - https://labs.watchtowr.com/sysowned-your-friendly-rce-support-ticket/
CVE ID: CVE-2025-2778 State: REJECTED Published: N/A Last Updated: 2025-05-07T14:54:59.732Z Description: No description available.
CVE ID: CVE-2025-2779 State: PUBLISHED Published: 2025-04-02T01:44:29.451Z Last Updated: 2025-04-02T16:08:58.876Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: htplugins Products: Insert Headers and Footers Code – HT Script Problem Types: CWE-862 Description: The Insert Headers and Footers Code – HT Script plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_dismiss function in all versions up to, and including, 1.1.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update option values to 1/true on the WordPress site. This can be leveraged to up
Subscriber-level access and above, to update option values to 1/true on the WordPress site. This can be leveraged to update an option that would create an error on the site and deny access to legitimate users or be used to set some values to true, such as registration. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/75bc2295-bf9a-430f-92b7-d380eed6df11?source=cve - https://plugins.trac.wordpress.org/browser/insert-headers-and-footers-script/tags/1.1.2/admin/class-rating-notice.php#L59
CVE ID: CVE-2025-2780 State: PUBLISHED Published: 2025-04-04T07:00:13.886Z Last Updated: 2025-06-09T19:26:00.765Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: WofficeIO Products: Woffice Core Problem Types: CWE-434 Description: The Woffice Core plugin for WordPress, used by the Woffice Theme, is vulnerable to arbitrary file uploads due to missing file type validation in the 'saveFeaturedImage' function in all versions up to, and including, 5.4.21. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. Additional Analyst
o upload arbitrary files on the affected site's server which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/7d057ac6-a341-4ec3-956c-2a2a5636155c?source=cve - https://hub.woffice.io/woffice/changelog#april-1st-2025-version-5422
CVE ID: CVE-2025-2781 State: PUBLISHED Published: 2025-03-28T22:23:50.752Z Last Updated: 2025-03-31T14:23:48.669Z Vendors: WatchGuard Products: Mobile VPN with SSL Client Problem Types: CWE-276 Description: The WatchGuard Mobile VPN with SSL Client on Windows does not properly configure directory permissions when installed in a non-default directory. This could allow an authenticated local attacker to escalate to SYSTEM privileges on a vulnerable system. This issue affects Mobile VPN with SSL Client: from 11.0 through 12.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00004
CVE ID: CVE-2025-2782 State: PUBLISHED Published: 2025-03-28T22:24:47.152Z Last Updated: 2025-03-31T13:24:07.246Z Vendors: WatchGuard Products: Terminal Services Agent Problem Types: CWE-276 Description: The WatchGuard Terminal Services Agent on Windows does not properly configure directory permissions when installed in a non-default directory. This could allow an authenticated local attacker to escalate to SYSTEM privileges on a vulnerable system. This issue affects Terminal Services Agent: from 12.0 through 12.10. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00005
CVE ID: CVE-2025-2783 State: PUBLISHED Published: 2025-03-26T16:07:51.034Z Last Updated: 2025-10-21T22:55:22.573Z Vendors: Google Products: Chrome Problem Types: Incorrect handle provided in unspecified circumstances Description: Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop_25.html - https://issues.chromium.org/issues/405143032
CVE ID: CVE-2025-2784 State: PUBLISHED Published: 2025-04-03T01:40:12.164Z Last Updated: 2025-11-18T08:36:15.526Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Extended Update Support,
, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 6 Problem Types: CWE-125 Description: A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_insight_whitespace() function. Libsoup clients may read one byte out-of-bounds in response to a crafted HTTP response by an HTTP server. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Progra
n response to a crafted HTTP response by an HTTP server. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2025:21657 - https://access.redhat.com/errata/RHSA-2025:7505 - https://access.redhat.com/errata/RHSA-2025:8126 - https://access.redhat.com/errata/RHSA-2025:8132 - https://access.redhat.com/errata/RHSA-2025:8139 - https://access.redhat.com/errata/RHSA-2025:8140 - https://access.redhat.com/errata/RHSA-2025:8252 - https://access.redhat.com/errata/RHSA-2025:8480 - https://access.redhat.com/errata/RHSA-2025:8481 - https://access.redhat.com/errata/RHSA-2025:8482 - https://access.redhat.com/errata/RHSA-2025:8663 - ht
/RHSA-2025:8481 - https://access.redhat.com/errata/RHSA-2025:8482 - https://access.redhat.com/errata/RHSA-2025:8663 - https://access.redhat.com/errata/RHSA-2025:9179 - https://access.redhat.com/security/cve/CVE-2025-2784 - https://bugzilla.redhat.com/show_bug.cgi?id=2354669 - https://gitlab.gnome.org/GNOME/libsoup/-/issues/422
CVE ID: CVE-2025-2786 State: PUBLISHED Published: 2025-04-02T11:07:43.285Z Last Updated: 2025-11-20T20:42:13.983Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Red Hat Products: Red Hat OpenShift distributed tracing 3.5.2, Red Hat OpenShift distributed tracing 3 Problem Types: CWE-200 Description: A flaw was found in Tempo Operator, where it creates a ServiceAccount, ClusterRole, and ClusterRoleBinding when a user deploys a TempoStack or TempoMonolithic instance. This flaw allows a user with full access to their namespace to extract the ServiceAccount token and use it to submit TokenReview and SubjectAccessReview requests, potentially revealing information
erviceAccount token and use it to submit TokenReview and SubjectAccessReview requests, potentially revealing information about other users' permissions. While this does not allow privilege escalation or impersonation, it exposes information that could aid in gathering information for further attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:3607 - https://access.redhat.com/errata/RHSA-2025:3740 - https://access.redhat.com/security/cve/CVE-2025-2786 - https://bugzilla.redhat.com/show_bug.cgi?id=2354811
CVE ID: CVE-2025-2787 State: PUBLISHED Published: 2025-03-26T21:08:08.461Z Last Updated: 2025-04-08T20:34:43.840Z Vendors: KNIME Products: KNIME Business Hub Description: KNIME Business Hub is affected by the Ingress-nginx CVE-2025-1974 ( a.k.a IngressNightmare ) vulnerability which affects the ingress-nginx component. In the worst case a complete takeover of the Kubernetes cluster is possible. Since the affected component is only reachable from within the cluster, i.e. requires an authenticated user, the severity in the context of KNIME Business Hub is slightly lower. Besides applying the publicly known workarounds, we strongly recommend updating to one of the following versions of KNIME Bu
des applying the publicly known workarounds, we strongly recommend updating to one of the following versions of KNIME Business Hub: * 1.13.3 or above * 1.12.4 or above * 1.11.4 or above * 1.10.4 or above * Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.knime.com/security-advisory-cve-2025-2787
CVE ID: CVE-2025-2789 State: PUBLISHED Published: 2025-04-05T05:32:14.306Z Last Updated: 2025-04-07T14:11:36.041Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: wcmp Products: MultiVendorX – Empower Your WooCommerce Store with a Dynamic Multivendor Marketplace – Build the Next Amazon, eBay, Etsy Problem Types: CWE-862 Description: The MultiVendorX – Empower Your WooCommerce Store with a Dynamic Multivendor Marketplace – Build the Next Amazon, eBay, Etsy plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the delete_table_rate_shipping_row function in all versions up to, and including, 4.2.19. This makes it po
lity check on the delete_table_rate_shipping_row function in all versions up to, and including, 4.2.19. This makes it possible for unauthenticated attackers to delete Table Rates that can impact the shipping cost calculations. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/bf4eca37-066f-428c-a4f7-061ce06e1142?source=cve - https://plugins.trac.wordpress.org/browser/dc-woocommerce-multi-vendor/tags/4.2.19/packages/mvx-tablerate/mvx-tablerate.php#L78 - https://plugins.trac.wordpress.org/browser/dc-woocommerce-multi-vendor/tags/4.2.19/packages/mvx-tablerate/mvx-tablerate.php#L211
CVE ID: CVE-2025-2793 State: PUBLISHED Published: 2025-07-08T14:59:15.632Z Last Updated: 2025-08-24T11:22:24.854Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Sterling B2B Integrator, Sterling File Gateway Problem Types: CWE-79 Description: IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.6, 6.2.0.0 through 6.2.0.4, IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6, and 6.2.0.0 through 6.2.0.4 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Ad
b UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7239092
CVE ID: CVE-2025-2794 State: PUBLISHED Published: 2025-03-31T16:22:48.521Z Last Updated: 2025-11-19T12:09:19.756Z Vendors: Kentico Products: Xperience Problem Types: CWE-470 Description: An unsafe reflection vulnerability in Kentico Xperience allows an unauthenticated attacker to kill the current process, leading to a Denial-of-Service condition. This issue affects Xperience: through 13.0.180. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://devnet.kentico.com/download/hotfixes - https://www.vulncheck.com/advisories/kentico-xperience-unsafe-reflection
CVE ID: CVE-2025-2796 State: PUBLISHED Published: 2025-05-27T22:16:53.489Z Last Updated: 2025-05-28T13:34:30.912Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Arista Networks Products: EOS Problem Types: cwe-284 Description: On affected platforms with hardware IPSec support running Arista EOS with IPsec enabled and anti-replay protection configured, EOS may exhibit unexpected behavior in specific cases. Received duplicate encrypted packets, which should be dropped under normal anti-replay protection, will instead be forwarded due to this vulnerability. Note: this issue does not affect VXLANSec or MACSec encryption functionality. Additional Analyst Notes:
vulnerability. Note: this issue does not affect VXLANSec or MACSec encryption functionality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.arista.com/en/support/advisories-notices/security-advisory/21413-security-advisory-0119
CVE ID: CVE-2025-2797 State: PUBLISHED Published: 2025-04-04T07:00:12.004Z Last Updated: 2025-06-09T19:27:42.586Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: WofficeIO Products: Woffice Core Problem Types: CWE-352 Description: The Woffice Core plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.4.21. This is due to missing or incorrect nonce validation on the 'woffice_handle_user_approval_actions' function. This makes it possible for unauthenticated attackers to approve registration for any user via a forged request granted they can trick a site administrator into performing an action such as clicking
or any user via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/1665f2d0-899b-4f9b-91b1-e5799c3b4d3d?source=cve - https://hub.woffice.io/woffice/changelog#april-1st-2025-version-5422
CVE ID: CVE-2025-2798 State: PUBLISHED Published: 2025-04-04T13:44:36.480Z Last Updated: 2025-06-09T19:28:27.176Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: XTENDIFY Products: Woffice CRM Problem Types: CWE-269 Description: The Woffice CRM theme for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.4.21. This is due to a misconfiguration of excluded roles during registration. This makes it possible for unauthenticated attackers to register with an Administrator role if a custom login form is being used. This can be combined with CVE-2025-2797 to bypass the user approval process if an Administrator can be tricked
ng used. This can be combined with CVE-2025-2797 to bypass the user approval process if an Administrator can be tricked into taking an action such as clicking a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/6dd6169b-bc94-4642-8975-2e96bc01576f?source=cve - https://hub.woffice.io/woffice/changelog#april-1st-2025-version-5422
CVE ID: CVE-2025-2799 State: PUBLISHED Published: 2025-07-16T05:23:51.188Z Last Updated: 2025-07-18T14:48:02.534Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: wpeventmanager Products: WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce Problem Types: CWE-79 Description: The WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘tag-name’ parameter in all versions up to, and including, 3.1.49 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level a
t input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a5cb5ab0-2110-49be-bc09-6847065a9dd9?source=cve - https://plugins.trac.wordpress.org/changeset/3309197/