deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-23387
Published: 2025-04-11
Description: A Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SUSE rancher allowed unauthenticated users to list all CLI authentication tokens and delete them before the CLI is able to get the token value.This issue affects rancher: from 2.8.0 before 2.8.13, from 2.9.0 before 2.9.7, from 2.10.0 before 2.10.3.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-23387; https://github.com/rancher/rancher/security/advisories/GHSA-5qmp-9x47-92q8
CVE: CVE-2025-23388
Published: 2025-04-11
Description: A Stack-based Buffer Overflow vulnerability in SUSE rancher allows for denial of service.This issue affects rancher: from 2.8.0 before 2.8.13, from 2.9.0 before 2.9.7, from 2.10.0 before 2.10.3.
CVSS Score: 8.2 (HIGH)
CWE: CWE-121
References: https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-23388; https://github.com/rancher/rancher/security/advisories/GHSA-xr9q-h9c7-xw8q
CVE: CVE-2025-23389
Published: 2025-04-11
Description: A Improper Access Control vulnerability in SUSE rancher allows a local user to impersonate other identities through SAML Authentication on first login.
This issue affects rancher: from 2.8.0 before 2.8.13, from 2.9.0 before 2.9.7, from 2.10.0 before 2.10.3.
CVSS Score: 8.4 (HIGH)
CWE: CWE-284
References: https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-23389; https://github.com/rancher/rancher/security/advisories/GHSA-mq23-vvg7-xfm4
CVE: CVE-2025-23391
Published: 2025-04-11
Description: A Incorrect Privilege Assignment vulnerability in SUSE rancher allows a Restricted Administrator to change the password of Administrators and take over their accounts.
This issue affects rancher: from 2.8.0 before 2.8.14, from 2.9.0 before 2.9.8, from 2.10.0 before 2.10.4.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-266
References: https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-23391; https://github.com/rancher/rancher/security/advisories/GHSA-8p83-cpfg-fj3g
CVE: CVE-2024-52280
Published: 2025-04-11
Description: A Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SUSE rancher  which allows users to watch resources they are not allowed to access, when they have at least some generic permissions on the type. 
This issue affects rancher: before 2175e09, before 6e30359, before c744f0b.
CVSS Score: 7.7 (HIGH)
CWE: CWE-200
References: https://bugzilla.suse.com/show_bug.cgi?id=CVE-2024-52280; https://github.com/rancher/steve/security/advisories/GHSA-j5hq-5jcr-xwx7
CVE: CVE-2025-2541
Published: 2025-04-11
Description: The WP Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.6.22 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/wedevs-project-manager/tags/2.6.20/core/WP/Frontend.php#L209; https://plugins.trac.wordpress.org/changeset/3268509/; https://wordpress.org/plugins/wedevs-project-manager/#developers
CVE: CVE-2025-2575
Published: 2025-04-11
Description: The Z Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Note: This requires Royal Shop theme to be installed.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/z-companion/trunk/import/importer/wxr-importer.php#L149; https://plugins.trac.wordpress.org/browser/z-companion/trunk/import/importer/wxr-importer.php#L63; https://plugins.trac.wordpress.org/browser/z-companion/trunk/import/inc/importer.php#L148
CVE: CVE-2024-13861
Published: 2025-04-11
Description: A code injection vulnerability in the Debian package component of Taegis Endpoint Agent (Linux) versions older than 1.3.10 allows local users arbitrary code execution as root. Redhat-based systems using RPM packages are not affected.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732, CWE-94
References: https://www.sophos.com/en-us/security-advisories/sophos-sa-20250411-taegis-agent-lpe
CVE: CVE-2025-3421
Published: 2025-04-11
Description: The Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'form_id' parameter in all versions up to, and including, 3.1.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/3268742/; https://plugins.trac.wordpress.org/changeset/3268742/everest-forms/tags/3.1.2/templates/form-preview/evf-form-preview-template.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/d55737a5-8aa5-4c26-bbb5-bbc5ea8be8d1?source=cve
CVE: CVE-2025-3422
Published: 2025-04-11
Description: The The Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.1.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for authenticated attackers, with Subscriber-level access and above, to execute arbitrary shortcodes.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-94
References: https://plugins.trac.wordpress.org/changeset/3268742/; https://www.wordfence.com/threat-intel/vulnerabilities/id/3db1d9a0-ea68-4979-a36d-864c649f7aca?source=cve
CVE: CVE-2025-3439
Published: 2025-04-11
Description: The Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1.1 via deserialization of untrusted input from the 'field_value' parameter. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://plugins.trac.wordpress.org/browser/everest-forms/trunk/includes/admin/views/html-admin-page-entries-view.php#L147; https://plugins.trac.wordpress.org/changeset/3268742/; https://www.wordfence.com/threat-intel/vulnerabilities/id/0e5617a2-5670-4d98-a36b-942f71634642?source=cve
CVE: CVE-2025-32426
Published: 2025-04-11
Description: Formie is a Craft CMS plugin for creating forms. Prior to version 2.1.44, it is possible to inject malicious code into the HTML content of an email notification, which is then rendered on the preview. There is no issue when rendering the email via normal means (a delivered email). This would require access to the form's email notification settings. This has been fixed in Formie 2.1.44.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79
References: https://github.com/verbb/formie/security/advisories/GHSA-2xm2-23ff-p8ww
CVE: CVE-2025-32427
Published: 2025-04-11
Description: Formie is a Craft CMS plugin for creating forms. Prior to 2.1.44, when importing a form from JSON, if the field label or handle contained malicious content, the output wasn't correctly escaped when viewing a preview of what was to be imported. As imports are undertaking primarily by users who have themselves exported the form from one environment to another, and would require direct manipulation of the JSON export, this is marked as moderate. This vulnerability will not occur unless someone deliberately tampers with the export. This vulnerability is fixed in 2.1.44.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/verbb/formie/security/advisories/GHSA-p9hh-mh5x-wvx3
CVE: CVE-2023-38614
Published: 2025-04-11
Description: A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to access sensitive user data.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-269
References: https://support.apple.com/en-us/120949; https://support.apple.com/en-us/120950
CVE: CVE-2023-41076
Published: 2025-04-11
Description: An app may be able to elevate privileges. This issue is fixed in macOS 14. This issue was addressed by removing the vulnerable code.
CVSS Score: 7.3 (HIGH)
CWE: CWE-269
References: https://support.apple.com/en-us/120950
CVE: CVE-2023-42875
Published: 2025-04-11
Description: Processing web content may lead to arbitrary code execution. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14, watchOS 10, tvOS 17, Safari 17. The issue was addressed with improved memory handling.
CVSS Score: 7.3 (HIGH)
CWE: CWE-94
References: https://support.apple.com/en-us/120330; https://support.apple.com/en-us/120947; https://support.apple.com/en-us/120948
CVE: CVE-2023-42961
Published: 2025-04-11
Description: A path handling issue was addressed with improved validation. This issue is fixed in iOS 17 and iPadOS 17, iOS 16.7 and iPadOS 16.7, macOS Sonoma 14, macOS Ventura 13.6, macOS Monterey 12.7. A sandboxed process may be able to circumvent sandbox restrictions.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-22
References: https://support.apple.com/en-us/120328; https://support.apple.com/en-us/120329; https://support.apple.com/en-us/120337
CVE: CVE-2023-42969
Published: 2025-04-11
Description: An app may be able to break out of its sandbox. This issue is fixed in iOS 17 and iPadOS 17, iOS 16.7 and iPadOS 16.7, macOS Sonoma 14, macOS Ventura 13.6, macOS Monterey 12.7. The issue was addressed with improved handling of caches.
CVSS Score: 3.3 (LOW)
CWE: CWE-284
References: https://support.apple.com/en-us/120328; https://support.apple.com/en-us/120329; https://support.apple.com/en-us/120337
CVE: CVE-2023-42970
Published: 2025-04-11
Description: A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14, watchOS 10, tvOS 17, Safari 17. Processing web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://support.apple.com/en-us/120330; https://support.apple.com/en-us/120947; https://support.apple.com/en-us/120948
CVE: CVE-2023-42973
Published: 2025-04-11
Description: Private Browsing tabs may be accessed without authentication. This issue is fixed in iOS 17 and iPadOS 17. The issue was addressed with improved UI.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-285
References: https://support.apple.com/en-us/120949
CVE: CVE-2023-42977
Published: 2025-04-11
Description: A path handling issue was addressed with improved validation. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to break out of its sandbox.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://support.apple.com/en-us/120949; https://support.apple.com/en-us/120950
CVE: CVE-2023-42981
Published: 2025-04-11
Description: Processing a file may lead to a denial-of-service or potentially disclose memory contents. This issue is fixed in macOS 14. The issue was addressed with improved checks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-20
References: https://support.apple.com/en-us/120950
CVE: CVE-2023-42982
Published: 2025-04-11
Description: Processing a file may lead to a denial-of-service or potentially disclose memory contents. This issue is fixed in macOS 14. The issue was addressed with improved checks.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/en-us/120950
CVE: CVE-2023-42983
Published: 2025-04-11
Description: Processing a file may lead to a denial-of-service or potentially disclose memory contents. This issue is fixed in macOS 14. The issue was addressed with improved checks.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-400
References: https://support.apple.com/en-us/120950
CVE: CVE-2025-31354
Published: 2025-04-11
Description: Subnet Solutions PowerSYSTEM Center's SMTPS notification service can be affected by importing an EC certificate with crafted F2m parameters, which can lead to excessive CPU consumption during the evaluation of the curve parameters.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-125
References: https://www.cisa.gov/news-events/ics-advisories/icsa-25-100-08
CVE: CVE-2025-31935
Published: 2025-04-11
Description: Subnet Solutions 

PowerSYSTEM Center is affected by a mishandling of exceptional conditions vulnerability. Crafted data that is passed to the API may trigger an exception, resulting in a denial-of-service condition.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-502
References: https://www.cisa.gov/news-events/ics-advisories/icsa-25-100-08
CVE: CVE-2025-32067
Published: 2025-04-11
Description: Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Growth Experiments Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - Growth Experiments Extension: from 1.39 through 1.43.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-20
References: https://gerrit.wikimedia.org/r/c/mediawiki/extensions/GrowthExperiments/+/1122163; https://phabricator.wikimedia.org/T386963
CVE: CVE-2025-32068
Published: 2025-04-11
Description: Incorrect Authorization vulnerability in The Wikimedia Foundation Mediawiki - OAuth Extension allows Authentication Bypass.This issue affects Mediawiki - OAuth Extension: from 1.39 through 1.43.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-863
References: https://gerrit.wikimedia.org/r/q/I27b61af2cdfb862a42432e7a87b863033d540cfc; https://phabricator.wikimedia.org/T336113
CVE: CVE-2025-32069
Published: 2025-04-11
Description: Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Wikibase Media Info Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - Wikibase Media Info Extension: from 1.39 through 1.43.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-20
References: https://gerrit.wikimedia.org/r/q/Ie969a8cfeab0d[PII_REDACTED]fa884e271968e5657; https://phabricator.wikimedia.org/T387691
CVE: CVE-2025-32070
Published: 2025-04-11
Description: Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - AJAX Poll Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - AJAX Poll Extension: from 1.39 through 1.43.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-20
References: https://gerrit.wikimedia.org/r/q/Ib59c59b2cd36928ab200149c851e2bfcf5cf920c; https://phabricator.wikimedia.org/T389590
CVE: CVE-2025-32071
Published: 2025-04-11
Description: Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Wikidata Extension allows Cross-Site Scripting (XSS) from widthheight message via ImageHandler::getDimensionsString()This issue affects Mediawiki - Wikidata Extension: from 1.39 through 1.43.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-20
References: https://gerrit.wikimedia.org/r/q/Iac1f1c27054bfd1a4a4251281ab8c72f59204a90; https://phabricator.wikimedia.org/T389369; https://phabricator.wikimedia.org/T389369
CVE: CVE-2025-32072
Published: 2025-04-11
Description: Improper Encoding or Escaping of Output vulnerability in The Wikimedia Foundation Mediawiki Core - Feed Utils allows WebView Injection.This issue affects Mediawiki Core - Feed Utils: from 1.39 through 1.43.
CWE: CWE-116
References: https://gerrit.wikimedia.org/r/c/mediawiki/core/+/1120134; https://phabricator.wikimedia.org/T386175; https://lists.debian.org/debian-lts-announce/2025/07/msg00012.html
CVE: CVE-2025-32073
Published: 2025-04-11
Description: Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - HTML Tags allows Cross-Site Scripting (XSS).This issue affects Mediawiki - HTML Tags: from 1.39 through 1.43.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-20
References: https://gerrit.wikimedia.org/r/c/mediawiki/extensions/HTMLTags/+/1121056; https://phabricator.wikimedia.org/T386337
CVE: CVE-2025-32074
Published: 2025-04-11
Description: Improper Encoding or Escaping of Output vulnerability in The Wikimedia Foundation Mediawiki - Confirm Account Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - Confirm Account Extension: from 1.39 through 1.43.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-116
References: https://gerrit.wikimedia.org/r/q/I86f47103ffb78c671890b44ccd59fcff6613975f; https://phabricator.wikimedia.org/T386908
CVE: CVE-2025-32075
Published: 2025-04-11
Description: Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Tabs Extension allows Code Injection.This issue affects Mediawiki - Tabs Extension: from 1.39 through 1.43.
CWE: CWE-20
References: https://gerrit.wikimedia.org/r/q/I03bec9528ee3ed05f35187458cde4e2fc4b51092; https://phabricator.wikimedia.org/T386887; https://phabricator.wikimedia.org/T386887
CVE: CVE-2025-32076
Published: 2025-04-11
Description: Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Visual Data Extension allows HTTP DoS.This issue affects Mediawiki - Visual Data Extension: from 1.39 through 1.43.
CWE: CWE-20
References: https://gerrit.wikimedia.org/r/c/mediawiki/extensions/VisualData/+/1121732; https://phabricator.wikimedia.org/T385935
CVE: CVE-2025-32077
Published: 2025-04-11
Description: Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Extension:SimpleCalendar allows Cross-Site Scripting (XSS).This issue affects Mediawiki - Extension:SimpleCalendar: from 1.39 through 1.43.
CWE: CWE-20
References: https://gerrit.wikimedia.org/r/q/Ic5b5ce8f7791026eff1aafffb32a68f3aab119be; https://phabricator.wikimedia.org/T383472
CVE: CVE-2025-32078
Published: 2025-04-11
Description: Improper Encoding or Escaping of Output vulnerability in The Wikimedia Foundation Mediawiki - Version Compare Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - Version Compare Extension: from 1.39 through 1.43.
CWE: CWE-116
References: https://gerrit.wikimedia.org/r/q/If901b3b98e615e1a4f4034d932d2d592000b51d0; https://phabricator.wikimedia.org/T384269
CVE: CVE-2025-32079
Published: 2025-04-11
Description: Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - GrowthExperiments allows HTTP DoS.This issue affects Mediawiki - GrowthExperiments: from 1.39 through 1.43.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://gerrit.wikimedia.org/r/c/mediawiki/extensions/GrowthExperiments/+/1114020; https://phabricator.wikimedia.org/T384244
CVE: CVE-2025-32080
Published: 2025-04-11
Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in The Wikimedia Foundation Mediawiki - Mobile Frontend Extension allows Shared Resource Manipulation.This issue affects Mediawiki - Mobile Frontend Extension: from 1.39 through 1.43.
CWE: CWE-200
References: https://gerrit.wikimedia.org/r/c/mediawiki/extensions/MobileFrontend/+/1123392; https://gerrit.wikimedia.org/r/q/Ia5c3be79db37240acbaa630834e430ec3147e61c; https://phabricator.wikimedia.org/T366402
CVE: CVE-2025-32367
Published: 2025-04-11
Description: The Oz Forensics face recognition application before 4.0.8 late 2023 allows PII retrieval via /statistic/list Insecure Direct Object Reference. NOTE: the number 4.0.8 was used for both the unpatched and patched versions.
CVSS Score: 8.6 (HIGH)
CWE: CWE-425
References: https://medium.com/@antonsimonyan7/idor-in-oz-forensics-face-recognition-application-cve-2025-32367-53684ee312ea; https://ozforensics.com/; https://medium.com/@antonsimonyan7/idor-in-oz-forensics-face-recognition-application-cve-2025-32367-53684ee312ea
CVE: CVE-2025-0119
Published: 2025-04-11
Description: A command injection vulnerability in the Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to execute arbitrary OS commands with root privileges on the host operating system running Broker VM.
CWE: CWE-78
References: https://security.paloaltonetworks.com/CVE-2025-0119
CVE: CVE-2025-0123
Published: 2025-04-11
Description: A vulnerability in the Palo Alto Networks PAN-OS® software enables unlicensed administrators to view clear-text data captured using the  packet capture feature https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/monitoring/take-packet-captures/take-a-custom-packet-capture  in decrypted HTTP/2 data streams traversing network interfaces on the firewall. HTTP/1.1 data streams are not impacted.

In normal conditions, decrypted packet captures are available to firewall administrators after they obtain and install a free Decryption Port Mirror license. The license requirement ensures that this feature can only be used after approved personnel purposefully activate the license. For more information, review how to  configure decryption port mirroring https://docs.paloaltonetworks.com/network-security/decryption/administration/monitoring-decryption/configure-decryption-port-mirroring .

The administrator must obtain network access to the management interface (web, SSH, console, or telnet) and successfully authenticate to exploit this issue. Risk of this issue can be greatly reduced by restricting access to the management interface to only trusted administrators and from only internal IP addresses according to our recommended  critical deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .

Customer firewall administrators do not have access to the packet capture feature in Cloud NGFW. This feature is available only to authorized Palo Alto Networks personnel permitted to perform troubleshooting.

Prisma® Access is not impacted by this vulnerability.
CWE: CWE-312
References: https://security.paloaltonetworks.com/CVE-2025-0123
CVE: CVE-2024-11679
Published: 2025-04-11
Description: An input validation weakness was reported in the TpmSetup module for some legacy System x server products that could allow a local attacker with elevated privileges to read the contents of memory.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://support.lenovo.com/us/en/product_security/LEN-193044
CVE: CVE-2025-0129
Published: 2025-04-11
Description: An improper exception check in Palo Alto Networks Prisma Access Browser allows a low privileged user to prevent Prisma Access Browser from applying it's Policy Rules. This enables the user to use Prisma Access Browser without any restrictions.
CWE: CWE-754, CWE-306
References: https://security.paloaltonetworks.com/PAN-SA-2025-0008
CVE: CVE-2025-2269
Published: 2025-04-12
Description: The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘image_id’ parameter in all versions up to, and including, 1.8.34 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick an administrative user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/photo-gallery/tags/1.8.34/admin/views/Editimage.php#L39; https://www.wordfence.com/threat-intel/vulnerabilities/id/ce261415-870c-4300-85e8-b15a02c7eec5?source=cve
CVE: CVE-2025-29803
Published: 2025-04-12
Description: Uncontrolled search path element in Visual Studio Tools for Applications and SQL Server Management Studio allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.3 (HIGH)
CWE: CWE-427
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29803