Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-1332 State: PUBLISHED Published: 2025-02-16T00:31:08.897Z Last Updated: 2025-02-18T21:31:50.636Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: n/a Products: FastCMS Problem Types: CWE-79, CWE-94 Description: A vulnerability has been found in FastCMS up to 0.1.5 and classified as problematic. This vulnerability affects unknown code of the file /fastcms.html#/template/menu of the component Template Menu. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor u
used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295942 - https://vuldb.com/?ctiid.295942 - https://gitee.com/xjd2020/fastcms/issues/IBKJ1W
CVE ID: CVE-2025-1333 State: PUBLISHED Published: 2025-05-01T22:07:08.697Z Last Updated: 2025-08-28T15:00:22.174Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: IBM Products: MQ Operator Problem Types: CWE-214 Description: IBM MQ Container when used with the IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, and MQ Operator SC2 3.2.0 through 3.2.10 and configured with Cloud Pak for Integration Keycloak could disclose sensitive information to a privileged user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7232272
CVE ID: CVE-2025-1334 State: PUBLISHED Published: 2025-06-03T15:18:40.596Z Last Updated: 2025-08-24T11:59:40.522Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: QRadar Suite Software, Cloud Pak for Security Problem Types: CWE-525 Description: IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 allows web pages to be stored locally which can be read by another user on the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7235432
CVE ID: CVE-2025-1335 State: PUBLISHED Published: 2025-02-16T04:00:15.125Z Last Updated: 2025-02-18T21:32:38.225Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: n/a Products: CmsEasy Problem Types: CWE-22 Description: A vulnerability, which was classified as problematic, was found in CmsEasy 7.7.7.9. Affected is the function deleteimg_action in the library lib/admin/file_admin.php. The manipulation of the argument imgname leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst No
may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295950 - https://vuldb.com/?ctiid.295950 - https://vuldb.com/?submit.493682 - https://github.com/Sinon2003/cve/blob/main/CmsEasy/CmsEasy-v7.7.7.9-PathTraversal-2-2-1.md
CVE ID: CVE-2025-1336 State: PUBLISHED Published: 2025-02-16T09:00:14.232Z Last Updated: 2025-02-18T16:12:03.784Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: n/a Products: CmsEasy Problem Types: CWE-22 Description: A vulnerability has been found in CmsEasy 7.7.7.9 and classified as problematic. Affected by this vulnerability is the function deleteimg_action in the library lib/admin/image_admin.php. The manipulation of the argument imgname leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional
public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295951 - https://vuldb.com/?ctiid.295951 - https://vuldb.com/?submit.493685 - https://github.com/Sinon2003/cve/blob/main/CmsEasy/CmsEasy-v7.7.7.9-PathTraversal-2-2-2.md
CVE ID: CVE-2025-1337 State: PUBLISHED Published: 2025-02-16T10:31:05.198Z Last Updated: 2025-04-09T12:06:21.874Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Eastnets Products: PaymentSafe Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in Eastnets PaymentSafe 2.5.26.0. It has been classified as problematic. This affects an unknown part of the component BIC Search. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 2.5.27.0 is able to address this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295953 - https://vuldb.com/?ctiid.295953 - https://v
Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295953 - https://vuldb.com/?ctiid.295953 - https://vuldb.com/?submit.493686 - https://drive.google.com/file/d/1uTRLoCnOGcXtSpoZO8xyPakhIO4MbCMk/view?usp=sharing
CVE ID: CVE-2025-1338 State: PUBLISHED Published: 2025-02-16T11:00:20.737Z Last Updated: 2025-02-18T16:10:54.724Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: NUUO Products: Camera Problem Types: CWE-77, CWE-74 Description: A vulnerability was found in NUUO Camera up to 20250203. It has been declared as critical. This vulnerability affects the function print_file of the file /handle_config.php. The manipulation of the argument log leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP
he vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295954 - https://vuldb.com/?ctiid.295954 - https://vuldb.com/?submit.493912 - https://pan.baidu.com/s/1YW52iM0ehUfFKa_CiTHBjQ?from=init&pwd=kqec
CVE ID: CVE-2025-1339 State: PUBLISHED Published: 2025-02-16T12:00:19.638Z Last Updated: 2025-02-18T21:33:39.631Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: TOTOLINK Products: X18 Problem Types: CWE-78, CWE-77 Description: A vulnerability was found in TOTOLINK X18 9.1.0cu.2024_B20220329. It has been rated as critical. This issue affects the function setL2tpdConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument enable leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes:
be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295955 - https://vuldb.com/?ctiid.295955 - https://vuldb.com/?submit.495367 - https://github.com/stevenchen0x01/CVE2/blob/main/cve1.md - https://www.totolink.net/
CVE ID: CVE-2025-1340 State: PUBLISHED Published: 2025-02-16T13:31:05.705Z Last Updated: 2025-02-19T14:09:44.434Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: TOTOLINK Products: X18 Problem Types: CWE-121, CWE-119 Description: A vulnerability classified as critical has been found in TOTOLINK X18 9.1.0cu.2024_B20220329. Affected is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi. The manipulation as part of String leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes:
be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295956 - https://vuldb.com/?ctiid.295956 - https://vuldb.com/?submit.495368 - https://github.com/stevenchen0x01/CVE2/blob/main/stack_overflow.md - https://www.totolink.net/
CVE ID: CVE-2025-1341 State: PUBLISHED Published: 2025-02-16T14:00:13.853Z Last Updated: 2025-02-18T21:36:40.348Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: n/a Products: PMWeb Problem Types: CWE-521 Description: A vulnerability, which was classified as problematic, was found in PMWeb 7.2.0. This affects an unknown part of the component Setting Handler. The manipulation leads to weak password requirements. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to change the configuration settings.
. The exploit has been disclosed to the public and may be used. It is recommended to change the configuration settings. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295959 - https://vuldb.com/?ctiid.295959 - https://vuldb.com/?submit.495635 - https://mega.nz/file/yY0BnAgK#08RcRH8c8D4zMhKLEqQwMenHV65lnHsOSuV4eQkdcxY
CVE ID: CVE-2025-1348 State: PUBLISHED Published: 2025-06-18T16:19:48.515Z Last Updated: 2025-08-24T11:50:32.968Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Sterling B2B Integrator Problem Types: CWE-525 Description: IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 could allow a local user to obtain sensitive information from a user’s web browser cache due to not using a suitable caching policy. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7237068
CVE ID: CVE-2025-1349 State: PUBLISHED Published: 2025-06-18T16:20:51.025Z Last Updated: 2025-08-24T11:50:52.809Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: IBM Products: Sterling B2B Integrator Problem Types: CWE-79 Description: IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http
o credentials disclosure within a trusted session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7237109
CVE ID: CVE-2025-1351 State: PUBLISHED Published: 2025-07-07T16:41:23.342Z Last Updated: 2025-08-24T11:32:40.044Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: IBM Products: Storage Virtualize Problem Types: CWE-362 Description: IBM Storage Virtualize 8.5, 8.6, and 8.7 products could allow a user to escalate their privileges to that of another user logging in at the same time due to a race condition in the login function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7237157
CVE ID: CVE-2025-1352 State: PUBLISHED Published: 2025-02-16T14:31:14.650Z Last Updated: 2025-02-18T21:38:08.792Z Severity: N/A (CVSS 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P) Vendors: GNU Products: elfutils Problem Types: CWE-119 Description: A vulnerability has been found in GNU elfutils 0.192 and classified as critical. This vulnerability affects the function __libdw_thread_tail in the library libdw_alloc.c of the component eu-readelf. The manipulation of the argument w leads to memory corruption. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the pa
e exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 2636426a091bd6c6f7f02e49ab20d4cdc6bfc753. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295960 - https://vuldb.com/?ctiid.295960 - https://vuldb.com/?submit.495965 - https://sourceware.org/bugzilla/show_bug.cgi?id=32650 - https://sourceware.org/bugzilla/attachment.cgi?id=15923 - https://sourceware.org/bugzilla/show_bug.cgi?id=32650#c2 - https://www.gnu.org/
CVE ID: CVE-2025-1353 State: PUBLISHED Published: 2025-02-16T15:00:12.621Z Last Updated: 2025-02-26T01:20:10.591Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Kong Products: Insomnia Problem Types: CWE-426 Description: A vulnerability was found in Kong Insomnia up to 10.3.0 and classified as critical. This issue affects some unknown processing in the library profapi.dll. The manipulation leads to untrusted search path. An attack has to be approached locally. The complexity of an attack is rather high. The exploitation is known to be difficult. The real existence of this vulnerability is still doubted at the moment. The vendor is not able to reproduce the issu
t. The real existence of this vulnerability is still doubted at the moment. The vendor is not able to reproduce the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295961 - https://vuldb.com/?ctiid.295961 - https://vuldb.com/?submit.496010
CVE ID: CVE-2025-1354 State: PUBLISHED Published: 2025-02-16T15:31:03.637Z Last Updated: 2025-03-13T06:58:15.313Z Vendors: ASUS Products: RT-N12E, RT-N10E Problem Types: CWE-79 Description: A cross-site scripting (XSS) vulnerability in the RT-N10E/ RT-N12E 2.0.0.x firmware . This vulnerability caused by improper input validation and can be triggered via the manipulation of the SSID argument in the sysinfo.asp file, leading to disclosure of sensitive information. Note: All versions of RT-N10E and RT-N12E are unsupported (End-of-Life, EOL). Consumers can mitigate this vulnerability by disabling the remote access features from WAN Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
bility by disabling the remote access features from WAN Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295962 - https://vuldb.com/?ctiid.295962 - https://vuldb.com/?submit.496013 - https://www.asus.com/supportonly/rt-n10e/helpdesk_bios/ - https://www.asus.com/supportonly/rt-n12e/helpdesk_bios/
CVE ID: CVE-2025-1355 State: PUBLISHED Published: 2025-02-16T17:00:09.104Z Last Updated: 2025-02-19T14:08:06.770Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: needyamin Products: Library Card System Problem Types: CWE-434, CWE-284 Description: A vulnerability was found in needyamin Library Card System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /signup.php of the component Add Picture. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way
losed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295963 - https://vuldb.com/?ctiid.295963 - https://vuldb.com/?submit.496075 - https://www.websecurityinsights.my.id/2025/02/library-card-system-shell-by-maloyroyorko.html
CVE ID: CVE-2025-1356 State: PUBLISHED Published: 2025-02-16T17:31:05.312Z Last Updated: 2025-02-18T21:42:32.115Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: needyamin Products: Library Card System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in needyamin Library Card System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file card.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: -
used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295964 - https://vuldb.com/?ctiid.295964 - https://vuldb.com/?submit.496087 - https://www.websecurityinsights.my.id/2025/02/needyamin-library-card-system-10.html
CVE ID: CVE-2025-1357 State: PUBLISHED Published: 2025-02-16T18:31:03.713Z Last Updated: 2025-02-18T19:35:36.970Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Seventh Products: D-Guard Problem Types: CWE-22 Description: A vulnerability classified as problematic has been found in Seventh D-Guard up to 20250206. This affects an unknown part of the component HTTP GET Request Handler. The manipulation leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnr
dor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295965 - https://vuldb.com/?ctiid.295965 - https://vuldb.com/?submit.496137
CVE ID: CVE-2025-1358 State: PUBLISHED Published: 2025-02-16T19:31:04.131Z Last Updated: 2025-02-18T17:06:21.340Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: Pix Software Products: Vivaz Problem Types: CWE-352, CWE-862 Description: A vulnerability classified as problematic was found in Pix Software Vivaz 6.0.10. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.2959
did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295966 - https://vuldb.com/?ctiid.295966 - https://vuldb.com/?submit.496141
CVE ID: CVE-2025-1359 State: PUBLISHED Published: 2025-02-16T20:00:05.893Z Last Updated: 2025-02-18T21:43:37.125Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: SIAM Industria de Automação e Monitoramento Products: SIAM Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, has been found in SIAM Industria de Automação e Monitoramento SIAM 2.0. This issue affects some unknown processing of the file /qrcode.jsp. The manipulation of the argument url leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did no
xploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295967 - https://vuldb.com/?ctiid.295967 - https://vuldb.com/?submit.496171
CVE ID: CVE-2025-1360 State: PUBLISHED Published: 2025-02-16T20:31:03.417Z Last Updated: 2025-02-18T16:10:29.757Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Internet Web Solutions Products: Sublime CRM Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, was found in Internet Web Solutions Sublime CRM up to 20250207. Affected is an unknown function of the file /crm/inicio.php of the component HTTP POST Request Handler. The manipulation of the argument msg_to leads to cross site scripting. It is possible to launch the attack remotely. Other parameters might be affected as well. The vendor was contacted early about this disclosure but
he attack remotely. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295968 - https://vuldb.com/?ctiid.295968 - https://vuldb.com/?submit.496469
CVE ID: CVE-2025-1361 State: PUBLISHED Published: 2025-02-22T08:22:06.982Z Last Updated: 2025-02-24T16:16:32.367Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: ip2location Products: IP2Location Country Blocker Problem Types: CWE-285 Description: The IP2Location Country Blocker plugin for WordPress is vulnerable to Regular Information Exposure in all versions up to, and including, 2.38.8 due to missing capability checks on the admin_init() function. This makes it possible for unauthenticated attackers to view the plugin's settings. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b63bc2
l Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b63bc2b6-1abc-4cfa-a7e5-3995640f66a7?source=cve - https://wordpress.org/plugins/ip2location-country-blocker/#developers - https://plugins.trac.wordpress.org/browser/ip2location-country-blocker/trunk/ip2location-country-blocker.php#L114 - https://plugins.trac.wordpress.org/changeset/3244193/
CVE ID: CVE-2025-1362 State: PUBLISHED Published: 2025-03-09T06:00:04.051Z Last Updated: 2025-03-11T19:21:38.686Z Vendors: Unknown Products: URL Shortener | Conversion Tracking | AB Testing | WooCommerce Problem Types: CWE-79 Cross-Site Scripting (XSS), CWE-352 Cross-Site Request Forgery (CSRF) Description: The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting customers via CSRF attacks Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/035cc502-a514-440f-8808-
ditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/035cc502-a514-440f-8808-5655c8c915e2/
CVE ID: CVE-2025-1363 State: PUBLISHED Published: 2025-03-09T06:00:04.772Z Last Updated: 2025-03-12T19:26:18.806Z Vendors: Unknown Products: URL Shortener | Conversion Tracking | AB Testing | WooCommerce Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The URL Shortener | Conversion Tracking | AB Testing | WooCommerce WordPress plugin through 9.0.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerabilit
le in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/16b08e77-3562-4506-9b28-abd1b1128b0a/