deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-1964
Published: 2023-04-09
Description: A vulnerability classified as critical has been found in PHPGurukul Bank Locker Management System 1.0. Affected is an unknown function of the file recovery.php of the component Password Reset. The manipulation of the argument uname/mobile leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225360.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/vsdwef/Bank-locker-Managament-System/blob/main/password-recovery.php_SQL_English.pdf; https://vuldb.com/?ctiid.225360; https://vuldb.com/?id.225360
CVE: CVE-2023-27727
Published: 2023-04-09
Description: Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njs_function_frame at src/njs_function.h.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-125
References: https://github.com/nginx/njs/issues/617; https://github.com/nginx/njs/issues/617
CVE: CVE-2023-27728
Published: 2023-04-09
Description: Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njs_dump_is_recursive at src/njs_vmcode.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-125
References: https://github.com/nginx/njs/issues/618; https://github.com/nginx/njs/issues/618
CVE: CVE-2023-27729
Published: 2023-04-09
Description: Nginx NJS v0.7.10 was discovered to contain an illegal memcpy via the function njs_vmcode_return at src/njs_vmcode.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://github.com/nginx/njs/issues/619; https://github.com/nginx/njs/issues/619
CVE: CVE-2023-27730
Published: 2023-04-09
Description: Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njs_lvlhsh_find at src/njs_lvlhsh.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-125
References: https://github.com/nginx/njs/issues/615; https://github.com/nginx/njs/issues/615
CVE: CVE-2023-27718
Published: 2023-04-09
Description: D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_498308 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/HolyTruth/DIR_878-1.30B08/blob/main/1.md; https://www.dlink.com/en/security-bulletin/; https://github.com/HolyTruth/DIR_878-1.30B08/blob/main/1.md
CVE: CVE-2023-27719
Published: 2023-04-09
Description: D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_478360 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/HolyTruth/DIR_878-1.30B08/blob/main/2.md; https://www.dlink.com/en/security-bulletin/; https://github.com/HolyTruth/DIR_878-1.30B08/blob/main/2.md
CVE: CVE-2023-27720
Published: 2023-04-09
Description: D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_48d630 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/HolyTruth/DIR_878-1.30B08/blob/main/4.md; https://www.dlink.com/en/security-bulletin/; https://github.com/HolyTruth/DIR_878-1.30B08/blob/main/4.md
CVE: CVE-2012-10011
Published: 2023-04-09
Description: A vulnerability was found in HD FLV PLayer Plugin up to 1.7 on WordPress. It has been rated as critical. Affected by this issue is the function hd_add_media/hd_update_media of the file functions.php. The manipulation of the argument name leads to sql injection. The attack may be launched remotely. Upgrading to version 1.8 is able to address this issue. The patch is identified as 34d66b9f3231a0e2dc0e536a6fe615d736e863f7. It is recommended to upgrade the affected component. VDB-225350 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/wp-plugins/contus-hd-flv-player/commit/34d66b9f3231a0e2dc0e536a6fe615d736e863f7; https://vuldb.com/?ctiid.225350; https://vuldb.com/?id.225350
CVE: CVE-2009-10004
Published: 2023-04-10
Description: A vulnerability was found in Turante Sandbox Theme up to 1.5.2. It has been classified as problematic. This affects the function sandbox_body_class of the file functions.php. The manipulation of the argument page leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.6.1 is able to address this issue. The identifier of the patch is 8045b1e10970342f558b2c5f360e0bd135af2b10. It is recommended to upgrade the affected component. The identifier VDB-225357 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/Turante/sandbox-theme/commit/8045b1e10970342f558b2c5f360e0bd135af2b10; https://github.com/Turante/sandbox-theme/releases/tag/1.6.1; https://vuldb.com/?ctiid.225357
CVE: CVE-2012-10012
Published: 2023-04-10
Description: A vulnerability has been found in BestWebSoft Facebook Like Button up to 2.13 and classified as problematic. Affected by this vulnerability is the function fcbk_bttn_plgn_settings_page of the file facebook-button-plugin.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The patch is named 33144ae5a45ed07efe7fceca901d91365fdbf7cb. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-225355.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://github.com/wp-plugins/facebook-button-plugin/commit/33144ae5a45ed07efe7fceca901d91365fdbf7cb; https://vuldb.com/?ctiid.225355; https://vuldb.com/?id.225355
CVE: CVE-2023-30456
Published: 2023-04-10
Description: An issue was discovered in arch/x86/kvm/vmx/nested.c in the Linux kernel before 6.2.8. nVMX on x86_64 lacks consistency checks for CR0 and CR4.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-754
References: http://packetstormsecurity.com/files/173757/Kernel-Live-Patch-Security-Notice-LSN-0096-1.html; https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.8; https://github.com/torvalds/linux/commit/112e66017bff7f2837030f34c2bc19501e9212d5
CVE: CVE-2014-125096
Published: 2023-04-10
Description: A vulnerability was found in Fancy Gallery Plugin 1.5.12 on WordPress. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file class.options.php of the component Options Page. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading to version 1.5.13 is able to address this issue. The identifier of the patch is fdf1f9e5a1ec738900f962e69c6fa4ec6055ed8d. It is recommended to upgrade the affected component. The identifier VDB-225349 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/wp-plugins/fancy-gallery/commit/fdf1f9e5a1ec738900f962e69c6fa4ec6055ed8d; https://vuldb.com/?ctiid.225349; https://vuldb.com/?id.225349
CVE: CVE-2014-125097
Published: 2023-04-10
Description: A vulnerability, which was classified as problematic, was found in BestWebSoft Facebook Like Button up to 2.33. Affected is the function fcbkbttn_settings_page of the file facebook-button-plugin.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 2.34 is able to address this issue. The patch is identified as b766da8fa100779409a953f0e46c2a2448cbe99c. It is recommended to upgrade the affected component. VDB-225354 is the identifier assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/wp-plugins/facebook-button-plugin/commit/b766da8fa100779409a953f0e46c2a2448cbe99c; https://vuldb.com/?ctiid.225354; https://vuldb.com/?id.225354
CVE: CVE-2014-125098
Published: 2023-04-10
Description: A vulnerability was found in Dart http_server up to 0.9.5 and classified as problematic. Affected by this issue is the function VirtualDirectory of the file lib/src/virtual_directory.dart of the component Directory Listing Handler. The manipulation of the argument request.uri.path leads to cross site scripting. The attack may be launched remotely. Upgrading to version 0.9.6 is able to address this issue. The name of the patch is 27c1cbd8125bb0369e675eb72e48218496e48ffb. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-225356.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: https://codereview.chromium.org/225813002; https://github.com/dart-archive/http_server/commit/27c1cbd8125bb0369e675eb72e48218496e48ffb; https://github.com/dart-archive/http_server/releases/tag/0.9.6
CVE: CVE-2023-26120
Published: 2023-04-10
Description: This affects all versions of the package com.xuxueli:xxl-job. HTML uploaded payload executed successfully through /xxl-job-admin/user/add and /xxl-job-admin/user/update.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79, CWE-79
References: https://security.snyk.io/vuln/SNYK-JAVA-COMXUXUELI-3248764; https://security.snyk.io/vuln/SNYK-JAVA-COMXUXUELI-3248764
CVE: CVE-2023-27602
Published: 2023-04-10
Description: In Apache Linkis <=1.3.1, The PublicService module uploads files without restrictions on the path to the uploaded files, and file types.


We recommend users upgrade the version of Linkis to version 1.3.2. 

For versions 

<=1.3.1, we suggest turning on the file path check switch in linkis.properties

`wds.linkis.workspace.filesystem.owner.check=true`
`wds.linkis.workspace.filesystem.path.check=true`
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://www.openwall.com/lists/oss-security/2023/04/10/1; http://www.openwall.com/lists/oss-security/2023/04/18/4; http://www.openwall.com/lists/oss-security/2023/04/19/3
CVE: CVE-2023-27603
Published: 2023-04-10
Description: 


In Apache Linkis <=1.3.1, due to the Manager module engineConn material upload does not check the zip path, This is a Zip Slip issue, which will lead to a potential RCE vulnerability.


We recommend users upgrade the version of Linkis to version 1.3.2.




CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-22
References: https://lists.apache.org/thread/6n1vlvnyn441rm02zdqc0wnpckj8ltn8; https://www.openwall.com/lists/oss-security/2023/04/10/2; https://lists.apache.org/thread/6n1vlvnyn441rm02zdqc0wnpckj8ltn8
CVE: CVE-2023-27987
Published: 2023-04-10
Description: 
In Apache Linkis <=1.3.1, due to the default token generated by Linkis Gateway deployment being too simple, it is easy for attackers to obtain the default token for the attack. Generation rules should add random values.




We recommend users upgrade the version of Linkis to version 1.3.2 And modify the default token value. You can refer to Token authorization[1]
 https://linkis.apache.org/docs/latest/auth/token https://linkis.apache.org/docs/latest/auth/token 





CVSS Score: 9.1 (CRITICAL)
CWE: CWE-326, CWE-326
References: https://lists.apache.org/thread/3cr1cz3210wzwngldwrqzm43vwhghp0p; https://www.openwall.com/lists/oss-security/2023/04/10/3; https://lists.apache.org/thread/3cr1cz3210wzwngldwrqzm43vwhghp0p
CVE: CVE-2023-29215
Published: 2023-04-10
Description: In Apache Linkis <=1.3.1, due to the lack of effective filtering
of parameters, an attacker configuring malicious Mysql JDBC parameters in JDBC EengineConn Module will trigger a
deserialization vulnerability and eventually lead to remote code execution. Therefore, the parameters in the Mysql JDBC URL should be blacklisted. Versions of Apache Linkis <= 1.3.0 will be affected.
We recommend users upgrade the version of Linkis to version 1.3.2.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://www.openwall.com/lists/oss-security/2023/04/10/4; https://lists.apache.org/thread/o682wz1ggq491ybvjwokxvcdtnzo76ls; http://www.openwall.com/lists/oss-security/2023/04/10/4
CVE: CVE-2023-29216
Published: 2023-04-10
Description: In Apache Linkis <=1.3.1, because the parameters are not
effectively filtered, the attacker uses the MySQL data source and malicious parameters to
configure a new data source to trigger a deserialization vulnerability, eventually leading to
remote code execution.
 Versions of Apache Linkis <= 1.3.0 will be affected.
We recommend users upgrade the version of Linkis to version 1.3.2.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://www.openwall.com/lists/oss-security/2023/04/10/5; https://lists.apache.org/thread/18vv0m32oy51nzk8tbz13qdl5569y55l; http://www.openwall.com/lists/oss-security/2023/04/10/5
CVE: CVE-2021-45985
Published: 2023-04-10
Description: In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: http://lua-users.org/lists/lua-l/2021-12/msg00019.html; https://github.com/lua/lua/commit/cf613cdc6fa367257fc61c256f63d917350858b5; https://www.lua.org/bugs.html#5.4.3-11
CVE: CVE-2015-10099
Published: 2023-04-10
Description: A vulnerability classified as critical has been found in CP Appointment Calendar Plugin up to 1.1.5 on WordPress. This affects the function dex_process_ready_to_go_appointment of the file dex_appointments.php. The manipulation of the argument itemnumber leads to sql injection. It is possible to initiate the attack remotely. The patch is named e29a9cdbcb0f37d887dd302a05b9e8bf213da01d. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-225351.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/wp-plugins/cp-appointment-calendar/commit/e29a9cdbcb0f37d887dd302a05b9e8bf213da01d; https://vuldb.com/?ctiid.225351; https://vuldb.com/?id.225351
CVE: CVE-2023-26774
Published: 2023-04-10
Description: An issue found in Sales Tracker Management System v.1.0 allows a remote attacker to access sensitive information via sales.php component of the admin/reports endpoint.
CVSS Score: 7.5 (HIGH)
References: https://packetstormsecurity.com/files/171692/Sales-Tracker-Management-System-1.0-Insecure-Direct-Object-Reference.html; https://twitter.com/retrymp3; https://www.sourcecodester.com/download-code?nid=16061&title=Sales+Tracker+Management+System+using+PHP+Free+Source+Code
CVE: CVE-2020-36077
Published: 2023-04-10
Description: SQL injection vulnerability found in Tailor Mangement System v.1 allows a remote attacker to execute arbitrary code via the customer parameter of the orderadd.php file
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/Abdallah-Fouad-X/CVE-s/blob/main/README.md; https://www.linkedin.com/in/abdallah-fouad/; https://github.com/Abdallah-Fouad-X/CVE-s/blob/main/README.md
CVE: CVE-2022-37462
Published: 2023-04-10
Description: A stored Cross-Site Scripting (XSS) vulnerability in the Chat gadget in Upstream Works Agent Desktop for Cisco Finesse through 4.2.12 and 5.0 allows remote attackers to inject arbitrary web script or HTML via AttachmentId in the file-upload details.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.campusguard.com/post/going-beyond-pen-testing-to-identify-zero-day-exploits; https://www.upstreamworks.com/support/notifications/; https://www.campusguard.com/post/going-beyond-pen-testing-to-identify-zero-day-exploits
CVE: CVE-2023-26788
Published: 2023-04-10
Description: Veritas Appliance v4.1.0.1 is affected by Host Header Injection attacks. HTTP host header can be manipulated and cause the application to behave in unexpected ways. Any changes made to the header would just cause the request to be sent to a completely different Domain/IP address.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/IthacaLabs/Veritas-Technologies; https://github.com/IthacaLabs/Veritas-Technologies/blob/main/Veritas%20Appliance%20v4.1.0.1/HHI/HHI_CVE-2023-26788.txt; https://github.com/IthacaLabs/Veritas-Technologies
CVE: CVE-2023-26860
Published: 2023-04-10
Description: SQL injection vulnerability found in PrestaShop Igbudget v.1.0.3 and before allow a remote attacker to gain privileges via the LgBudgetBudgetModuleFrontController::displayAjaxGenerateBudget component.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://addons.prestashop.com/en/order-management/45282-save-your-carts-and-buy-later-or-send-it.html; https://friends-of-presta.github.io/security-advisories/modules/2023/04/04/lgbudget.html; https://addons.prestashop.com/en/order-management/45282-save-your-carts-and-buy-later-or-send-it.html
CVE: CVE-2022-39048
Published: 2023-04-10
Description: A XSS vulnerability was identified in the ServiceNow UI page assessment_redirect. To exploit this vulnerability, an attacker would need to persuade an authenticated user to click a maliciously crafted URL. Successful exploitation potentially could be used to conduct various client-side attacks, including, but not limited to, phishing, redirection, theft of CSRF tokens, and use of an authenticated user's browser or session to attack other systems.


CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://support.servicenow.com/; https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1221892; https://support.servicenow.com/
CVE: CVE-2022-4827
Published: 2023-04-10
Description: The WP Tiles WordPress plugin through 1.1.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/f2a922ac-6bc9-4caa-b1cc-9ca9cff4bd51; https://wpscan.com/vulnerability/f2a922ac-6bc9-4caa-b1cc-9ca9cff4bd51
CVE: CVE-2023-0156
Published: 2023-04-10
Description: The All-In-One Security (AIOS) WordPress plugin before 5.1.5 does not limit what log files to display in it's settings pages, allowing an authorized user (admin+) to view the contents of arbitrary files and list directories anywhere on the server (to which the web server has access). The plugin only displays the last 50 lines of the file.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-22
References: https://wpscan.com/vulnerability/caf1dbb5-197e-41e9-8f48-ba1f2360a759; https://wpscan.com/vulnerability/caf1dbb5-197e-41e9-8f48-ba1f2360a759
CVE: CVE-2023-0157
Published: 2023-04-10
Description: The All-In-One Security (AIOS) WordPress plugin before 5.1.5 does not escape the content of log files before outputting it to the plugin admin page, allowing an authorized user (admin+) to plant bogus log files containing malicious JavaScript code that will be executed in the context of any administrator visiting this page.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/8248b550-6485-4108-a701-8446ffa35f06; https://wpscan.com/vulnerability/8248b550-6485-4108-a701-8446ffa35f06
CVE: CVE-2023-0363
Published: 2023-04-10
Description: The Scheduled Announcements Widget WordPress plugin before 1.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/6d332a47-e96c-455b-9e8f-db6dbb59b518; https://wpscan.com/vulnerability/6d332a47-e96c-455b-9e8f-db6dbb59b518
CVE: CVE-2023-0422
Published: 2023-04-10
Description: The Article Directory WordPress plugin through 1.3 does not properly sanitize the `publish_terms_text` setting before displaying it in the administration panel, which may enable administrators to conduct Stored XSS attacks in multisite contexts.
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/d57f2fb2-5251-4069-8c9a-a4af269c5e62; https://wpscan.com/vulnerability/d57f2fb2-5251-4069-8c9a-a4af269c5e62
CVE: CVE-2023-0423
Published: 2023-04-10
Description: The WordPress Amazon S3 Plugin WordPress plugin before 1.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/73d588d7-26ae-42e2-8282-aa02bcb109b6; https://wpscan.com/vulnerability/73d588d7-26ae-42e2-8282-aa02bcb109b6
CVE: CVE-2023-0546
Published: 2023-04-10
Description: The Contact Form Plugin WordPress plugin before 4.3.25 does not properly sanitize and escape the srcdoc attribute in iframes in it's custom HTML field type, allowing a logged in user with roles as low as contributor to inject arbitrary javascript into a form which will trigger for any visitor to the form or admins previewing or editing the form.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/078f33cd-0f5c-46fe-b858-2107a09c6b69; https://wpscan.com/vulnerability/078f33cd-0f5c-46fe-b858-2107a09c6b69
CVE: CVE-2023-0605
Published: 2023-04-10
Description: The Auto Rename Media On Upload WordPress plugin before 1.1.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/57267c3c-d55e-4b37-a6d0-c5cd8569625c; https://wpscan.com/vulnerability/57267c3c-d55e-4b37-a6d0-c5cd8569625c
CVE: CVE-2023-0874
Published: 2023-04-10
Description: The Klaviyo WordPress plugin before 3.0.10 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/495e39db-793d-454b-9ef1-dd91cae2c49b; https://wpscan.com/vulnerability/495e39db-793d-454b-9ef1-dd91cae2c49b
CVE: CVE-2023-0893
Published: 2023-04-10
Description: The Time Sheets WordPress plugin before 1.29.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/fd6ef6ee-15e9-44ac-a2db-976393a3b71a; https://wpscan.com/vulnerability/fd6ef6ee-15e9-44ac-a2db-976393a3b71a
CVE: CVE-2023-0983
Published: 2023-04-10
Description: The stylish-cost-calculator-premium WordPress plugin before 7.9.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Stored Cross-Site Scripting which could be used against admins when viewing submissions submitted through the Email Quote Form.
CVSS Score: 6.1 (MEDIUM)
References: https://wpscan.com/vulnerability/73353221-3e6d-44e8-bf41-55a0fe57d81f; https://wpscan.com/vulnerability/73353221-3e6d-44e8-bf41-55a0fe57d81f
CVE: CVE-2023-1120
Published: 2023-04-10
Description: The Simple Giveaways WordPress plugin before 2.45.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/c2defd30-7e4c-4a28-8a68-282429061f3f; https://wpscan.com/vulnerability/c2defd30-7e4c-4a28-8a68-282429061f3f
CVE: CVE-2023-1121
Published: 2023-04-10
Description: The Simple Giveaways WordPress plugin before 2.45.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/7ead9fb9-d81f-47c6-a1b4-21f29183cc15; https://wpscan.com/vulnerability/7ead9fb9-d81f-47c6-a1b4-21f29183cc15