Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-5260 State: PUBLISHED Published: 2025-08-20T08:15:32.749Z Last Updated: 2025-08-20T18:50:22.435Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L) Vendors: Pik Online Yazılım Çözümleri A.Ş. Products: Pik Online Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in Pik Online Yazılım Çözümleri A.Ş. Pik Online allows Server Side Request Forgery.This issue affects Pik Online: before 3.1.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0201
CVE ID: CVE-2025-5261 State: PUBLISHED Published: 2025-08-20T08:31:52.452Z Last Updated: 2025-08-20T18:49:51.996Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Pik Online Yazılım Çözümleri A.Ş. Products: Pik Online Problem Types: CWE-639 Description: Authorization Bypass Through User-Controlled Key vulnerability in Pik Online Yazılım Çözümleri A.Ş. Pik Online allows Exploitation of Trusted Identifiers.This issue affects Pik Online: before 3.1.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0201
CVE ID: CVE-2025-5262 State: PUBLISHED Published: 2025-05-27T12:29:21.813Z Last Updated: 2025-08-25T18:18:53.632Z Vendors: Mozilla Products: Thunderbird Problem Types: Double-free in libvpx encoder Description: A double-free could have occurred in `vpx_codec_enc_init_multi` after a failed allocation when initializing the encoder for WebRTC. This could have caused memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 139 and Thunderbird < 128.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1962421 - https://www.mozilla.org/security/advisories/mfsa2025-45/ - https://www.mozilla.org/secur
a.org/show_bug.cgi?id=1962421 - https://www.mozilla.org/security/advisories/mfsa2025-45/ - https://www.mozilla.org/security/advisories/mfsa2025-46/
CVE ID: CVE-2025-5263 State: PUBLISHED Published: 2025-05-27T12:29:22.686Z Last Updated: 2025-11-03T20:05:56.273Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Description: Error handling for script execution was incorrectly isolated from web content, which could have allowed cross-origin leak attacks. This vulnerability affects Firefox < 139, Firefox ESR < 115.24, Firefox ESR < 128.11, Thunderbird < 139, and Thunderbird < 128.11. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1960745 - https://www.mozilla.org/security/advisories/mfsa2025-42/ - https://www.mozilla.org/security/advisories/mf
i?id=1960745 - https://www.mozilla.org/security/advisories/mfsa2025-42/ - https://www.mozilla.org/security/advisories/mfsa2025-43/ - https://www.mozilla.org/security/advisories/mfsa2025-44/ - https://www.mozilla.org/security/advisories/mfsa2025-45/ - https://www.mozilla.org/security/advisories/mfsa2025-46/
CVE ID: CVE-2025-5264 State: PUBLISHED Published: 2025-05-27T12:29:23.513Z Last Updated: 2025-11-03T20:05:59.028Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Description: Due to insufficient escaping of the newline character in the “Copy as cURL” feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This vulnerability affects Firefox < 139, Firefox ESR < 115.24, Firefox ESR < 128.11, Thunderbird < 139, and Thunderbird < 128.11. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1950001 - https://www.mozilla.org/secur
VE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1950001 - https://www.mozilla.org/security/advisories/mfsa2025-42/ - https://www.mozilla.org/security/advisories/mfsa2025-43/ - https://www.mozilla.org/security/advisories/mfsa2025-44/ - https://www.mozilla.org/security/advisories/mfsa2025-45/ - https://www.mozilla.org/security/advisories/mfsa2025-46/
CVE ID: CVE-2025-5265 State: PUBLISHED Published: 2025-05-27T12:29:24.338Z Last Updated: 2025-10-30T16:09:34.596Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Description: Due to insufficient escaping of the ampersand character in the “Copy as cURL” feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. *This bug only affects Firefox for Windows. Other versions of Firefox are unaffected.* This vulnerability affects Firefox < 139, Firefox ESR < 115.24, Firefox ESR < 128.11, Thunderbird < 139, and Thunderbird < 128.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.moz
d < 139, and Thunderbird < 128.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1962301 - https://www.mozilla.org/security/advisories/mfsa2025-42/ - https://www.mozilla.org/security/advisories/mfsa2025-43/ - https://www.mozilla.org/security/advisories/mfsa2025-44/ - https://www.mozilla.org/security/advisories/mfsa2025-45/ - https://www.mozilla.org/security/advisories/mfsa2025-46/
CVE ID: CVE-2025-5266 State: PUBLISHED Published: 2025-05-27T12:29:25.084Z Last Updated: 2025-11-03T20:06:04.324Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Description: Script elements loading cross-origin resources generated load and error events which leaked information enabling XS-Leaks attacks. This vulnerability affects Firefox < 139, Firefox ESR < 128.11, Thunderbird < 139, and Thunderbird < 128.11. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1965628 - https://www.mozilla.org/security/advisories/mfsa2025-42/ - https://www.mozilla.org/security/advisories/mfsa2025-44/ - https://w
/www.mozilla.org/security/advisories/mfsa2025-42/ - https://www.mozilla.org/security/advisories/mfsa2025-44/ - https://www.mozilla.org/security/advisories/mfsa2025-45/ - https://www.mozilla.org/security/advisories/mfsa2025-46/
CVE ID: CVE-2025-5267 State: PUBLISHED Published: 2025-05-27T12:29:25.942Z Last Updated: 2025-11-03T20:06:07.099Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Description: A clickjacking vulnerability could have been used to trick a user into leaking saved payment card details to a malicious page. This vulnerability affects Firefox < 139, Firefox ESR < 128.11, Thunderbird < 139, and Thunderbird < 128.11. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1954137 - https://www.mozilla.org/security/advisories/mfsa2025-42/ - https://www.mozilla.org/security/advisories/mfsa2025-44/ - https://www.m
.mozilla.org/security/advisories/mfsa2025-42/ - https://www.mozilla.org/security/advisories/mfsa2025-44/ - https://www.mozilla.org/security/advisories/mfsa2025-45/ - https://www.mozilla.org/security/advisories/mfsa2025-46/
CVE ID: CVE-2025-5268 State: PUBLISHED Published: 2025-05-27T12:29:26.941Z Last Updated: 2025-11-03T20:06:09.907Z Vendors: Mozilla Products: Firefox, Firefox ESR, Thunderbird Description: Memory safety bugs present in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 139, Firefox ESR < 128.11, Thunderbird < 139, and Thunderbird < 128.11. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/buglist.cgi?bug_id=195
tes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1950136%2C1958121%2C1960499%2C1962634 - https://www.mozilla.org/security/advisories/mfsa2025-42/ - https://www.mozilla.org/security/advisories/mfsa2025-44/ - https://www.mozilla.org/security/advisories/mfsa2025-45/ - https://www.mozilla.org/security/advisories/mfsa2025-46/
CVE ID: CVE-2025-5269 State: PUBLISHED Published: 2025-05-27T12:29:27.780Z Last Updated: 2025-11-03T20:06:12.724Z Vendors: Mozilla Products: Firefox ESR, Thunderbird Description: Memory safety bug present in Firefox ESR 128.10, and Thunderbird 128.10. This bug showed evidence of memory corruption and we presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 128.11 and Thunderbird < 128.11. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1924108 - https://www.mozilla.org/security/advisories/mfsa2025-44/ - https://www.mozilla.org/securit
org/show_bug.cgi?id=1924108 - https://www.mozilla.org/security/advisories/mfsa2025-44/ - https://www.mozilla.org/security/advisories/mfsa2025-46/
CVE ID: CVE-2025-5270 State: PUBLISHED Published: 2025-05-27T12:29:28.612Z Last Updated: 2025-10-30T16:13:06.323Z Vendors: Mozilla Products: Firefox, Thunderbird Description: In certain cases, SNI could have been sent unencrypted even when encrypted DNS was enabled. This vulnerability affects Firefox < 139 and Thunderbird < 139. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1910298 - https://www.mozilla.org/security/advisories/mfsa2025-42/ - https://www.mozilla.org/security/advisories/mfsa2025-45/
CVE ID: CVE-2025-5271 State: PUBLISHED Published: 2025-05-27T12:29:29.404Z Last Updated: 2025-10-30T16:13:11.961Z Vendors: Mozilla Products: Firefox, Thunderbird Description: Previewing a response in Devtools ignored CSP headers, which could have allowed content injection attacks. This vulnerability affects Firefox < 139 and Thunderbird < 139. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1920348 - https://www.mozilla.org/security/advisories/mfsa2025-42/ - https://www.mozilla.org/security/advisories/mfsa2025-45/
CVE ID: CVE-2025-5272 State: PUBLISHED Published: 2025-05-27T12:29:30.199Z Last Updated: 2025-10-30T16:13:15.534Z Vendors: Mozilla Products: Firefox, Thunderbird Description: Memory safety bugs present in Firefox 138 and Thunderbird 138. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 139 and Thunderbird < 139. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1726254%2C1742738%2C1960121 - https://www.mozilla.org/security/advisories/mfsa2025-42/ - https://www.mozilla.org/security/advis
%2C1742738%2C1960121 - https://www.mozilla.org/security/advisories/mfsa2025-42/ - https://www.mozilla.org/security/advisories/mfsa2025-45/
CVE ID: CVE-2025-5273 State: PUBLISHED Published: 2025-05-29T05:00:01.272Z Last Updated: 2025-05-29T13:16:22.499Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P) Vendors: n/a Products: mcp-markdownify-server Problem Types: CWE-552 Description: All versions of the package mcp-markdownify-server are vulnerable to Files or Directories Accessible to External Parties via the get-markdown-file tool. An attacker can craft a prompt that, once accessed by the MCP host, will allow it to read arbitrary files from the host running the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-JS-MCPMARKDOWNIFYSERVER-10249193 -
lyst Notes: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-JS-MCPMARKDOWNIFYSERVER-10249193 - https://github.com/zcaceres/markdownify-mcp/commit/3a6b202d088ef7acb8be84bc09515f41a2b1a9df - https://github.com/zcaceres/markdownify-mcp/blob/3667bd4765c0e49684ce22df268d02dd478a7f3b/src/Markdownify.ts%23L94
CVE ID: CVE-2025-5275 State: PUBLISHED Published: 2025-06-26T02:22:21.725Z Last Updated: 2025-06-26T13:23:40.397Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: smub Products: Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More Problem Types: CWE-79 Description: The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the privacy settings fields in all versions up to, and including, 1.8.6.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrat
nsufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. This issue was partially fixed in version 1.8.6.1 and fully fixed in version 1.8.6.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/453d8918-32dc-43d6-8969-71f719536891?source=cve - https://plugins.trac.wordpress.org/browser/charitable/tags/1.8.5.3/templates/form-fields/checkbox.ph
536891?source=cve - https://plugins.trac.wordpress.org/browser/charitable/tags/1.8.5.3/templates/form-fields/checkbox.php#L40
CVE ID: CVE-2025-5276 State: PUBLISHED Published: 2025-05-29T05:00:05.001Z Last Updated: 2025-05-29T13:15:39.177Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:P) Vendors: n/a Products: mcp-markdownify-server Problem Types: CWE-918 Description: All versions of the package mcp-markdownify-server are vulnerable to Server-Side Request Forgery (SSRF) via the Markdownify.get() function. An attacker can craft a prompt that, once accessed by the MCP host, can invoke the webpage-to-markdown, bing-search-to-markdown, and youtube-to-markdown tools to issue requests and read the responses to attacker-controlled URLs, potentially leaking sensitive information. Additional Analys
equests and read the responses to attacker-controlled URLs, potentially leaking sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-JS-MCPMARKDOWNIFYSERVER-10249387 - https://github.com/zcaceres/markdownify-mcp/commit/0284aa8f34d32c65e20d8cda2d429b7943c9af03 - https://github.com/zcaceres/markdownify-mcp/blob/224cf89f0d58616d2a5522f60f184e8391d1c9e3/src/server.ts%23L20C17-L20C29
CVE ID: CVE-2025-5277 State: PUBLISHED Published: 2025-05-28T13:14:26.863Z Last Updated: 2025-05-28T13:27:50.584Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: alexei-led Products: aws-mcp-server Problem Types: CWE-78 Description: aws-mcp-server MCP server is vulnerable to command injection. An attacker can craft a prompt that once accessed by the MCP client will run arbitrary commands on the host system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/alexei-led/aws-mcp-server/commit/94d20ae1798a43ac7e3a28e71900d774e5159c8a - https://github.com/alexei-led/aws-mcp-server/blob/94d20ae1798a43ac7e3a28e71900d774e5159c8a/sr
7e3a28e71900d774e5159c8a - https://github.com/alexei-led/aws-mcp-server/blob/94d20ae1798a43ac7e3a28e71900d774e5159c8a/src/aws_mcp_server/cli_executor.py#L92
CVE ID: CVE-2025-5278 State: PUBLISHED Published: 2025-05-27T20:52:58.545Z Last Updated: 2025-11-20T21:12:31.268Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 Problem Types: CWE-121 Description: A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lea
side the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-5278 - https://bugzilla.redhat.com/show_bug.cgi?id=2368764 - https://cgit.git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8c9602e3a145e9596dc1a63c6ed67865814b6633
CVE ID: CVE-2025-5279 State: PUBLISHED Published: 2025-05-27T20:17:21.228Z Last Updated: 2025-10-14T18:13:08.938Z Vendors: Amazon Products: Redshift Problem Types: CWE-295 Description: When the Amazon Redshift Python Connector is configured with the BrowserAzureOAuth2CredentialsProvider plugin, the driver skips the SSL certificate validation step for the Identity Provider. An insecure connection could allow an actor to intercept the token exchange process and retrieve an access token. This issue has been addressed in driver version 2.1.7. Users should upgrade to address this issue and ensure any forked or derivative code is patched to incorporate the new fixes. Additional Analyst Notes: - CI
s issue and ensure any forked or derivative code is patched to incorporate the new fixes. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://aws.amazon.com/security/security-bulletins/AWS-2025-011/ - https://github.com/aws/amazon-redshift-python-driver/releases/tag/v2.1.7 - https://github.com/aws/amazon-redshift-python-driver/security/advisories/GHSA-r244-wg5g-6w2r
CVE ID: CVE-2025-5280 State: PUBLISHED Published: 2025-05-27T20:43:03.111Z Last Updated: 2025-05-29T03:55:44.840Z Vendors: Google Products: Chrome Problem Types: CWE-787 Description: Out of bounds write in V8 in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/05/stable-channel-update-for-desktop_27.html - https://issues.chromium.org/issues/417169470
CVE ID: CVE-2025-5281 State: PUBLISHED Published: 2025-05-27T20:43:04.542Z Last Updated: 2025-05-28T14:20:00.940Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in BFCache in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially obtain user information via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/05/stable-channel-update-for-desktop_27.html - https://issues.chromium.org/issues/417215501
CVE ID: CVE-2025-5282 State: PUBLISHED Published: 2025-06-13T03:41:45.148Z Last Updated: 2025-06-13T19:06:11.826Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: wptravelengine Products: WP Travel Engine – Tour Booking Plugin – Tour Operator Software Problem Types: CWE-862 Description: The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the delete_package() function in all versions up to, and including, 6.5.1. This makes it possible for unauthenticated attackers to delete arbitrary posts. Additional Analyst Notes: - CISA ADP Vulnrichment: Refere
sible for unauthenticated attackers to delete arbitrary posts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ebc8d724-3936-42d8-8850-bc330c5221dc?source=cve - https://plugins.trac.wordpress.org/changeset/3305447/wp-travel-engine/tags/6.5.2/includes/classes/Core/Controllers/RestAPI/V2/Trip.php
CVE ID: CVE-2025-5283 State: PUBLISHED Published: 2025-05-27T20:43:04.737Z Last Updated: 2025-11-03T20:06:15.509Z Vendors: Google Products: Chrome Problem Types: CWE-416 Description: Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2025/05/stable-channel-update-for-desktop_27.html - https://issues.chromium.org/issues/419467315
CVE ID: CVE-2025-5284 State: PUBLISHED Published: 2025-07-16T09:22:55.999Z Last Updated: 2025-07-18T14:48:27.255Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: litonice13 Products: Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations Problem Types: CWE-79 Description: The Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom JS extension in all versions up to, and including, 2.0.8.2 due to insufficient capability restriction, and insufficient input sanitization and output esc
o, and including, 2.0.8.2 due to insufficient capability restriction, and insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0e1982bd-3ea8-48cd-8b89-39910567525c?source=cve - https://plugins.trac.wordpress.org/browser/master-addons/trunk/inc/modules/custom-js/custom-js.php - https://plugins.trac.wordpress.org/changeset/3325322/
CVE ID: CVE-2025-5285 State: PUBLISHED Published: 2025-05-31T06:40:57.464Z Last Updated: 2025-06-02T15:49:20.289Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: spiderwares Products: Product Subtitle for WooCommerce Problem Types: CWE-79 Description: The Product Subtitle for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘htmlTag’ parameter in all versions up to, and including, 1.3.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an
ntributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b276b1f7-e618-491f-beb4-675228632fa0?source=cve - https://plugins.trac.wordpress.org/browser/product-subtitle-for-woocommerce/tags/1.3.9/includes/plugins/class-pswc-guternburg-block.php#L82 - https://wordpress.org/plugins/product-subtitle-for-woocommerce/#developers
CVE ID: CVE-2025-5286 State: PUBLISHED Published: 2025-05-29T08:22:03.639Z Last Updated: 2025-05-29T14:04:16.426Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: boldthemes Products: Bold Page Builder Problem Types: CWE-79 Description: The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘additional_settings’ parameter in all versions up to, and including, 5.3.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Add