Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-10685 State: PUBLISHED Published: 2024-11-12T03:24:58.666Z Last Updated: 2024-11-12T11:20:42.158Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: scottpaterson Products: Contact Form 7 Redirect & Thank You Page Problem Types: CWE-79 Description: The Contact Form 7 Redirect & Thank You Page plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter in all versions up to, and including, 1.0.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing
d attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f52285e0-e78d-4231-8ff9-53fbe568fcc2?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3184638%40cf7-redirect-thank-you-page&new=3184638%40cf7-redirect-thank-you-page&sfp_email=&sfph_mail=
CVE ID: CVE-2024-10686 State: REJECTED Published: 2024-11-13T02:02:37.172Z Last Updated: 2024-11-14T17:12:44.694Z Description: No description available.
CVE ID: CVE-2024-10687 State: PUBLISHED Published: 2024-11-05T09:30:59.421Z Last Updated: 2024-11-05T15:15:26.423Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: contest-gallery Products: Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons Problem Types: CWE-89 Description: The Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons plugin for WordPress is vulnerable to time-based SQL Injection via the $collectedIds parameter in all versions up to, and including, 24.0.3 due to insufficient escaping on
Injection via the $collectedIds parameter in all versions up to, and including, 24.0.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/fd3b4c44-d47a-45de-bcb2-0820e475b331?source=cve - https://plugins.trac.wordpress.org/browser/contest-gallery/tags/24.0.1/v10/v10-frontend/ecommerce/ecommerce-get-raw-data-from-galler
ins.trac.wordpress.org/browser/contest-gallery/tags/24.0.1/v10/v10-frontend/ecommerce/ecommerce-get-raw-data-from-galleries.php#L61 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3175299%40contest-gallery%2Ftags%2F24.0.3&new=3180268%40contest-gallery%2Ftags%2F24.0.4
CVE ID: CVE-2024-10688 State: PUBLISHED Published: 2024-11-09T06:41:30.876Z Last Updated: 2024-11-11T11:55:17.825Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: crestaproject Products: Attesa Extra Problem Types: CWE-639 Description: The Attesa Extra plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.4.2 via the 'attesa-template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from password protected, private, or draft posts that they should not have access to. Additional Ana
ve, to extract data from password protected, private, or draft posts that they should not have access to. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a3374f89-ae63-45bb-b6a6-9689e2513e69?source=cve - https://plugins.trac.wordpress.org/changeset/3184563/attesa-extra/tags/attesa-extra/panel/attesa-custom-templates.php?old=3181839&old_path=attesa-extra%2Ftags%2Fattesa-extra%2Fpanel%2Fattesa-custom-templates.php
CVE ID: CVE-2024-10689 State: PUBLISHED Published: 2024-12-06T08:24:58.598Z Last Updated: 2024-12-06T14:18:27.770Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: webangon Products: XLTab – Accordions and Tabs for Elementor Page Builder Problem Types: CWE-639 Description: The XLTab – Accordions and Tabs for Elementor Page Builder plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.4 via the 'XLTAB_INSERT_TPL' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from private or draft
it possible for authenticated attackers, with Contributor-level access and above, to extract data from private or draft posts created by Elementor that they should not have access to. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/dbf8c216-aedd-4db9-aaa4-61bc0d7850cb?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3190826%40xl-tab&new=3190826%40xl-tab&sfp_email=&sfph_mail=
CVE ID: CVE-2024-10690 State: PUBLISHED Published: 2024-12-14T05:34:14.548Z Last Updated: 2024-12-16T17:48:56.441Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: rstheme2017 Products: Shortcodes for Elementor Problem Types: CWE-639 Description: The Shortcodes for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.0.4 via the 'SHORTCODE_ELEMENTOR' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from private and draft posts created with Elementor that they should not h
butor-level access and above, to extract data from private and draft posts created with Elementor that they should not have access to. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/5debe121-6373-4b56-8441-f0d4a5920089?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3207001%40shortcode-elementor&new=3207001%40shortcode-elementor&sfp_email=&sfph_mail=
CVE ID: CVE-2024-10691 State: REJECTED Published: N/A Last Updated: 2024-11-15T14:16:14.396Z Description: No description available.
CVE ID: CVE-2024-10692 State: PUBLISHED Published: 2024-12-06T08:24:58.199Z Last Updated: 2024-12-06T14:18:27.882Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: ideaboxcreations Products: PowerPack Elementor Addons (Free Widgets, Extensions and Templates) Problem Types: CWE-639 Description: The PowerPack Elementor Addons (Free Widgets, Extensions and Templates) plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.8.1 via the Content Reveal widget due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extrac
can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from password protected, private, or draft posts that they should not have access to. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d073d9df-0636-4884-b5d0-e2da779e5edf?source=cve - https://plugins.trac.wordpress.org/changeset/3203205/powerpack-lite-for-elementor/tags/2.8.2/modules/content-reveal/widgets/content-reveal.php
CVE ID: CVE-2024-10693 State: PUBLISHED Published: 2024-11-09T03:30:48.261Z Last Updated: 2024-11-11T11:56:52.669Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: sonalsinha21 Products: SKT Addons for Elementor Problem Types: CWE-639 Description: The SKT Addons for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.3 via the Unfold widget due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from private or draft posts created by Elementor that they should not have access to. Additio
and above, to extract data from private or draft posts created by Elementor that they should not have access to. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/8accf552-f235-46dd-857b-330eef7765a0?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3183804%40skt-addons-for-elementor&new=3183804%40skt-addons-for-elementor&sfp_email=&sfph_mail=
CVE ID: CVE-2024-10694 State: REJECTED Published: N/A Last Updated: 2024-11-11T20:53:13.242Z Description: No description available.
CVE ID: CVE-2024-10695 State: PUBLISHED Published: 2024-11-12T03:24:57.460Z Last Updated: 2024-11-12T11:20:22.999Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: futuriowp Products: Futurio Extra Problem Types: CWE-639 Description: The Futurio Extra plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.0.13 via the 'elementor-template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from private or draft posts that they should not have access to. Additional Analyst Notes: - CISA
bove, to extract data from private or draft posts that they should not have access to. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/53871750-6437-459f-97e1-5cf524160f09?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3184380%40futurio-extra&new=3184380%40futurio-extra&sfp_email=&sfph_mail=#file3
CVE ID: CVE-2024-10696 State: PUBLISHED Published: 2024-11-21T02:06:36.161Z Last Updated: 2024-11-21T11:40:11.365Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: codersaiful Products: UltraAddons – Elementor Addons (Header Footer Builder, Custom Font, Custom CSS,Woo Widget, Menu Builder, Anywhere Elementor Shortcode) Problem Types: CWE-639 Description: The UltraAddons – Elementor Addons (Header Footer Builder, Custom Font, Custom CSS,Woo Widget, Menu Builder, Anywhere Elementor Shortcode) plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.1.8 via the show_template due to missing validation on a use
ct Object Reference in all versions up to, and including, 1.1.8 via the show_template due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Contributor-level access and above, to expose the contents of draft, private, and pending posts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/719de6e5-29c5-4303-981d-81840939a0b1?source=cve - https://plugins.trac.wordpress.org/browser/ultraaddons-elementor-lite/trunk/inc/wp/shortcode.php#L16
CVE ID: CVE-2024-10697 State: PUBLISHED Published: 2024-11-02T12:00:08.397Z Last Updated: 2025-04-05T06:48:36.830Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Tenda Products: AC6 Problem Types: CWE-77, CWE-74 Description: A vulnerability has been found in Tenda AC6 15.03.05.19 and classified as critical. Affected by this vulnerability is the function formWriteFacMac of the file /goform/WriteFacMac of the component API Endpoint. The manipulation of the argument mac leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.
d to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282865 - https://vuldb.com/?ctiid.282865 - https://vuldb.com/?submit.434934 - https://github.com/theRaz0r/iot-mycve/blob/main/tenda_ac6_rce_WriteFacMac/tenda_ac6_rce_WriteFacMac.md - https://www.tenda.com.cn/
CVE ID: CVE-2024-10698 State: PUBLISHED Published: 2024-11-02T13:31:07.358Z Last Updated: 2024-11-05T15:20:38.088Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Tenda Products: AC6 Problem Types: CWE-121 Description: A vulnerability was found in Tenda AC6 15.03.05.19 and classified as critical. Affected by this issue is the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282866 - https://vuldb.com/?cti
. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282866 - https://vuldb.com/?ctiid.282866 - https://vuldb.com/?submit.434935 - https://github.com/theRaz0r/iot-mycve/blob/main/tenda_ac6_stackflow_formSetDeviceName/tenda_ac6_stackflow_formSetDeviceName.md - https://www.tenda.com.cn/
CVE ID: CVE-2024-10699 State: PUBLISHED Published: 2024-11-02T14:31:04.716Z Last Updated: 2024-11-05T15:19:09.697Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: Wazifa System Problem Types: CWE-89 Description: A vulnerability was found in code-projects Wazifa System 1.0. It has been classified as critical. This affects an unknown part of the file /controllers/logincontrol.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282867 - https://v
d may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282867 - https://vuldb.com/?ctiid.282867 - https://vuldb.com/?submit.435048 - https://github.com/lan041221/cve/blob/main/sql9.md - https://code-projects.org/
CVE ID: CVE-2024-10700 State: PUBLISHED Published: 2024-11-02T16:00:07.332Z Last Updated: 2024-11-05T15:18:01.547Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: University Event Management System Problem Types: CWE-89, CWE-74, CWE-707 Description: A vulnerability was found in code-projects University Event Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file submit.php. The manipulation of the argument name/email/title/Year/gender/fromdate/todate/people leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The initial researcher
attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory only mentions the parameter "name" to be affected. But it must be assumed that a variety of other parameters is affected too. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282868 - https://vuldb.com/?ctiid.282868 - https://vuldb.com/?submit.435051 - https://github.com/aa1928992772/CVE/blob/main/sqlInjection.md - https://code-projects.org/
CVE ID: CVE-2024-10701 State: PUBLISHED Published: 2024-11-02T17:31:05.058Z Last Updated: 2024-11-05T15:16:44.364Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: PHPGurukul Products: Car Rental Portal Problem Types: CWE-79 Description: A vulnerability was found in PHPGurukul Car Rental Portal 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /search.php. The manipulation of the argument searchdata leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282869 - https://vuldb.co
e used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282869 - https://vuldb.com/?ctiid.282869 - https://vuldb.com/?submit.435179 - https://github.com/secuserx/CVE/blob/main/%5BXSS%20vulnerability%5D%20found%20in%20Car%20Rental%20Portal%203.0%20-%20(search.php).md - https://phpgurukul.com/
CVE ID: CVE-2024-10702 State: PUBLISHED Published: 2024-11-02T18:00:11.570Z Last Updated: 2024-11-05T15:15:34.853Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: Simple Car Rental System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in code-projects Simple Car Rental System 1.0. Affected is an unknown function of the file /signup.php. The manipulation of the argument fname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282870 - https://vuldb.c
be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.282870 - https://vuldb.com/?ctiid.282870 - https://vuldb.com/?submit.435233 - https://github.com/imTedCao/cve/issues/1 - https://code-projects.org/
CVE ID: CVE-2024-10703 State: PUBLISHED Published: 2025-03-25T06:00:09.599Z Last Updated: 2025-03-25T13:58:01.298Z Vendors: Unknown Products: Registrations for the Events Calendar Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Registrations for the Events Calendar WordPress plugin before 2.13.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/5601ac03-09e4-4b4e-b03e-98323bd36dba/
CVE ID: CVE-2024-10704 State: PUBLISHED Published: 2024-11-29T06:00:07.129Z Last Updated: 2024-11-29T14:51:23.442Z Vendors: Unknown Products: Photo Gallery by 10Web Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Photo Gallery by 10Web WordPress plugin before 1.8.31 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/6c115117-11c0-4c9e-9988-8547c9364c01/
CVE ID: CVE-2024-10705 State: PUBLISHED Published: 2025-01-26T06:41:21.568Z Last Updated: 2025-01-27T15:32:39.374Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: themeisle Products: Multiple Page Generator Plugin – MPG Problem Types: CWE-918 Description: The Multiple Page Generator Plugin – MPG plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.0.5 via the 'mpg_download_file_by_link' function. This makes it possible for authenticated attackers, with editor-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify informat
ke web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/7b3446e5-ca01-4468-927a-86e951e662ab?source=cve - https://plugins.trac.wordpress.org/changeset/3205550/multiple-pages-generator-by-porthas
CVE ID: CVE-2024-10706 State: PUBLISHED Published: 2024-12-20T06:00:03.975Z Last Updated: 2024-12-20T16:13:51.124Z Vendors: Unknown Products: Download Manager Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Download Manager WordPress plugin before 3.3.03 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/01193420-9a4c-4961-93b6-aa2e37e36be1/
CVE ID: CVE-2024-10707 State: PUBLISHED Published: 2025-03-20T10:09:56.842Z Last Updated: 2025-10-15T12:49:24.414Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: gaizhenbiao Products: gaizhenbiao/chuanhuchatgpt Problem Types: CWE-22 Description: gaizhenbiao/chuanhuchatgpt version git d4ec6a3 is affected by a local file inclusion vulnerability due to the use of the gradio component gr.JSON, which has a known issue (CVE-2024-4941). This vulnerability allows unauthenticated users to access arbitrary files on the server by uploading a specially crafted JSON file and exploiting the improper input validation in the handle_dataset_selection function. Additional An
y crafted JSON file and exploiting the improper input validation in the handle_dataset_selection function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/98fdedea-6ad0-4157-b7d2-ae71c9786ee8
CVE ID: CVE-2024-10708 State: PUBLISHED Published: 2024-12-10T06:00:01.931Z Last Updated: 2024-12-10T15:27:29.260Z Vendors: Unknown Products: System Dashboard Problem Types: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Description: The System Dashboard WordPress plugin before 2.8.15 does not validate user input used in a path, which could allow high privilege users such as admin to perform path traversal attacks an read arbitrary files on the server Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/61d750a5-8c2c-4c94-a1a9-6a254c2a0d03/
CVE ID: CVE-2024-10709 State: PUBLISHED Published: 2024-11-25T06:00:01.883Z Last Updated: 2024-11-25T20:41:38.302Z Vendors: Unknown Products: YaDisk Files Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The YaDisk Files WordPress plugin through 1.2.5 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/114aeaf7-32a5-4510-a497-92cc0951b022/
CVE ID: CVE-2024-10710 State: PUBLISHED Published: 2024-11-25T06:00:05.600Z Last Updated: 2024-11-25T16:59:09.523Z Vendors: Unknown Products: YaDisk Files Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The YaDisk Files WordPress plugin through 1.2.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/165ab698-c8b5-4412-a621-c5365d621fc5/