deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-0472
Published: 2023-01-30
Description: Use after free in WebRTC in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop_24.html; https://crbug.com/1405256; https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop_24.html
CVE: CVE-2023-0473
Published: 2023-01-30
Description: Type Confusion in ServiceWorker API in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
CVSS Score: 8.8 (HIGH)
CWE: CWE-843, CWE-843
References: https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop_24.html; https://crbug.com/1404639; https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop_24.html
CVE: CVE-2023-0474
Published: 2023-01-30
Description: Use after free in GuestView in Google Chrome prior to 109.0.5414.119 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a Chrome web app. (Chromium security severity: Medium)
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop_24.html; https://crbug.com/1400841; https://chromereleases.googleblog.com/2023/01/stable-channel-update-for-desktop_24.html
CVE: CVE-2022-2988
Published: 2023-01-30
Description: A CWE-787: Out-of-bounds Write vulnerability exists that could cause sensitive information leakage when accessing a malicious web page from the commissioning software. Affected Products: SoMachine HVAC (Versions prior to V2.1.0), EcoStruxure Machine Expert – HVAC (Versions prior to V1.4.0)
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-787
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-010-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-010-01_EcoStruxure_Machine_Expert_Machine_HVAC_Security_Notification.pdf; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-010-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-010-01_EcoStruxure_Machine_Expert_Machine_HVAC_Security_Notification.pdf
CVE: CVE-2022-38451
Published: 2023-01-30
Description: A directory traversal vulnerability exists in the httpd update.cgi functionality of FreshTomato 2022.5. A specially crafted HTTP request can lead to arbitrary file read. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1642; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1642; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1642
CVE: CVE-2022-42484
Published: 2023-01-30
Description: An OS command injection vulnerability exists in the httpd logs/view.cgi functionality of FreshTomato 2022.5. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2022-1641; https://talosintelligence.com/vulnerability_reports/TALOS-2022-1641; https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1641
CVE: CVE-2022-45788
Published: 2023-01-30
Description: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when a malicious project file is loaded onto the controller. Affected Products: EcoStruxure Control Expert (All Versions), EcoStruxure Process Expert (All Versions), Modicon M340 CPU - part numbers BMXP34* (All Versions), Modicon M580 CPU - part numbers BMEP* and BMEH* (All Versions), Modicon M580 CPU Safety - part numbers BMEP58*S and BMEH58*S (All Versions), Modicon Momentum Unity M1E Processor - 171CBU* (All Versions), Modicon MC80 - BMKC80 (All Versions), Legacy Modicon Quantum - 140CPU65* and Premium CPUs - TSXP57* (All Versions)


CVSS Score: 7.5 (HIGH)
CWE: CWE-754
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-010-05&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-010-05_Modicon_Controllers_Security_Notification.pdf; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-010-05&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-010-05_Modicon_Controllers_Security_Notification.pdf
CVE: CVE-2023-0240
Published: 2023-01-30
Description: There is a logic error in io_uring's implementation which can be used to trigger a use-after-free vulnerability leading to privilege escalation.

In the io_prep_async_work function the assumption that the last io_grab_identity call cannot return false is not true, and in this case the function will use the init_cred or the previous linked requests identity to do operations instead of using the current identity. This can lead to reference counting issues causing use-after-free. We recommend upgrading past version 5.10.161.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/io_uring?h=linux-5.10.y&id=788d0824269bef539fe31a785b1517882eafed93; https://github.com/gregkh/linux/commit/1e6fa5216a0e59ef02e8b6b40d553238a3b81d49; https://kernel.dance/#788d0824269bef539fe31a785b1517882eafed93
CVE: CVE-2023-0266
Published: 2023-01-30
Description: A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be used in a use-after-free that can result in a priviledge escalation to gain ring0 access from the system user. We recommend upgrading past commit 56b88b50565cd8b946a2d00b0c83927b7ebb055e
CVSS Score: 7.9 (HIGH)
CWE: CWE-416, CWE-416
References: https://git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.git/tree/queue-5.10/alsa-pcm-move-rwsem-lock-inside-snd_ctl_elem_read-to-prevent-uaf.patch?id=72783cf35e6c55bca84c4bb7b776c58152856fd4; https://github.com/torvalds/linux/commit/56b88b50565cd8b946a2d00b0c83927b7ebb055e; https://github.com/torvalds/linux/commit/becf9e5d553c2389d857a3c178ce80fdb34a02e1
CVE: CVE-2022-46087
Published: 2023-01-30
Description: CloudSchool v3.0.1 is vulnerable to Cross Site Scripting (XSS). A normal user can steal session cookies of the admin users through notification received by the admin user.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/G37SYS73M/Advisory_G37SYS73M/blob/main/CVE-2022-46087/poc.md; https://github.com/hrshadhin/school-management-system; https://github.com/G37SYS73M/Advisory_G37SYS73M/blob/main/CVE-2022-46087/poc.md
CVE: CVE-2023-0581
Published: 2023-01-30
Description: The PrivateContent plugin for WordPress is vulnerable to protection mechanism bypass due to the use of client side validation in versions up to, and including, 8.4.3. This is due to the plugin checking if an IP had been blocklist via client-side scripts rather than server-side. This makes it possible for unauthenticated attackers to bypass any login restrictions  that may prevent a brute force attack.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-602
References: https://lcweb.it/privatecontent/changelog; https://www.wordfence.com/threat-intel/vulnerabilities/id/de73304e-7a28-4304-b1ed-2f6dd7738236?source=cve; https://lcweb.it/privatecontent/changelog
CVE: CVE-2022-23334
Published: 2023-01-30
Description: The Robot application in Ip-label Newtest before v8.5R0 was discovered to use weak signature checks on executed binaries, allowing attackers to have write access and escalate privileges via replacing NEWTESTREMOTEMANAGER.EXE.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-347, CWE-347
References: http://ip-label.com; http://newtest.com; https://www.on-x.com/wp-content/uploads/2023/01/ON-X-Security-Advisory-Ip-label-Ekara-Newtest-CVE-2022-23334.pdf
CVE: CVE-2022-26872
Published: 2023-01-30
Description: AMI Megarac Password reset interception via API
CVSS Score: 8.3 (HIGH)
CWE: CWE-640, CWE-640
References: https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023001.pdf; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023001.pdf
CVE: CVE-2023-0512
Published: 2023-01-30
Description: Divide By Zero in GitHub repository vim/vim prior to 9.0.1247.
CVSS Score: 7.8 (HIGH)
CWE: CWE-369
References: http://seclists.org/fulldisclosure/2023/Mar/17; http://seclists.org/fulldisclosure/2023/Mar/18; http://seclists.org/fulldisclosure/2023/Mar/21
CVE: CVE-2023-24830
Published: 2023-01-30
Description: Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects iotdb-web-workbench component: from 0.13.0 before 0.13.3.


CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://lists.apache.org/thread/l4fon37687jz5ohgsnz2ko9fv400915t; https://lists.apache.org/thread/l4fon37687jz5ohgsnz2ko9fv400915t
CVE: CVE-2022-4306
Published: 2023-01-30
Description: The Panda Pods Repeater Field WordPress plugin before 1.5.4 does not sanitize and escapes a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against a user having at least Contributor permission.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/18d7f9af-7267-4723-9d6f-05b895c94dbe; https://wpscan.com/vulnerability/18d7f9af-7267-4723-9d6f-05b895c94dbe
CVE: CVE-2022-4395
Published: 2023-01-30
Description: The Membership For WooCommerce WordPress plugin before 2.1.7 does not validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as malicious PHP code, and achieve RCE.
CVSS Score: 9.8 (CRITICAL)
References: https://wpscan.com/vulnerability/80407ac4-8ce3-4df7-9c41-007b69045c40; https://packetstormsecurity.com/files/177934/WordPress-Membership-For-WooCommerce-Shell-Upload.html; https://wpscan.com/vulnerability/80407ac4-8ce3-4df7-9c41-007b69045c40
CVE: CVE-2022-4470
Published: 2023-01-30
Description: The Widgets for Google Reviews WordPress plugin before 9.8 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/7c4e51b3-87ef-4afc-ab53-9a9bbdcfc9d7; https://wpscan.com/vulnerability/7c4e51b3-87ef-4afc-ab53-9a9bbdcfc9d7
CVE: CVE-2022-4472
Published: 2023-01-30
Description: The Simple Sitemap WordPress plugin before 3.5.8 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/2b685a12-2ca3-42dd-84fe-4a463a082c2a; https://wpscan.com/vulnerability/2b685a12-2ca3-42dd-84fe-4a463a082c2a
CVE: CVE-2022-4496
Published: 2023-01-30
Description: The SAML SSO Standard WordPress plugin version 16.0.0 before 16.0.8, SAML SSO Premium WordPress plugin version 12.0.0 before 12.1.0 and SAML SSO Premium Multisite WordPress plugin version 20.0.0 before 20.0.7 does not validate that the redirect parameter to its SSO login endpoint points to an internal site URL, making it vulnerable to an Open Redirect issue when the user is already logged in.
CVSS Score: 6.1 (MEDIUM)
References: https://wpscan.com/vulnerability/af2e30c7-0787-4fe2-97ee-bc616f7178a1; https://wpscan.com/vulnerability/be21f355-0e5b-4ad7-9d8f-85e9a0101ddc; https://wpscan.com/vulnerability/e6c4c8c7-1dcd-45bf-8582-f12accca6fac
CVE: CVE-2022-4552
Published: 2023-01-30
Description: The FL3R FeelBox WordPress plugin through 8.1 does not have CSRF check when updating its settings, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://wpscan.com/vulnerability/307b0fe4-39de-4fbb-8bb0-f7f15ec6ef52; https://wpscan.com/vulnerability/307b0fe4-39de-4fbb-8bb0-f7f15ec6ef52
CVE: CVE-2022-4553
Published: 2023-01-30
Description: The FL3R FeelBox WordPress plugin through 8.1 does not have CSRF check when updating reseting moods  which could allow attackers to make logged in admins perform such action via a CSRF attack and delete the lydl_posts & lydl_poststimestamp DB tables
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/483ed482-a1d1-44f6-8b99-56e653d3e45f; https://wpscan.com/vulnerability/483ed482-a1d1-44f6-8b99-56e653d3e45f
CVE: CVE-2022-4649
Published: 2023-01-30
Description: The WP Extended Search WordPress plugin before 2.1.2 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/0d9ba176-97be-4b6b-9cf1-6c3047321a1e; https://wpscan.com/vulnerability/0d9ba176-97be-4b6b-9cf1-6c3047321a1e
CVE: CVE-2022-4651
Published: 2023-01-30
Description: The Justified Gallery WordPress plugin before 1.7.1 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/d8[PII_REDACTED]-48c8-8e9d-94b12ab6fcf6; https://wpscan.com/vulnerability/d8[PII_REDACTED]-48c8-8e9d-94b12ab6fcf6
CVE: CVE-2022-4654
Published: 2023-01-30
Description: The Pricing Tables WordPress Plugin WordPress plugin before 3.2.3 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/a29744cd-b760-4757-8564-883d59fa4881; https://wpscan.com/vulnerability/a29744cd-b760-4757-8564-883d59fa4881
CVE: CVE-2022-4667
Published: 2023-01-30
Description: The RSS Aggregator by Feedzy WordPress plugin before 4.1.1 does not validate and escape some of its block options before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/a388232b-a399-46a5-83e6-20c1b5df351d; https://wpscan.com/vulnerability/a388232b-a399-46a5-83e6-20c1b5df351d
CVE: CVE-2022-4671
Published: 2023-01-30
Description: The PixCodes WordPress plugin before 2.3.7 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/14c83830-3207-4f92-b8f5-afd7cc93af88; https://wpscan.com/vulnerability/14c83830-3207-4f92-b8f5-afd7cc93af88
CVE: CVE-2022-4680
Published: 2023-01-30
Description: The Revive Old Posts WordPress plugin before 9.0.11 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.
CVSS Score: 7.2 (HIGH)
References: https://wpscan.com/vulnerability/f4197386-975d-4e53-8fc9-9425732da9af; https://wpscan.com/vulnerability/f4197386-975d-4e53-8fc9-9425732da9af
CVE: CVE-2022-4699
Published: 2023-01-30
Description: The MediaElement.js WordPress plugin through 4.2.8 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high-privilege users such as admins.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/e57f38d9-889a-4f82-b20d-3676ccf9c6f9; https://wpscan.com/vulnerability/e57f38d9-889a-4f82-b20d-3676ccf9c6f9
CVE: CVE-2022-4749
Published: 2023-01-30
Description: The Posts List Designer by Category WordPress plugin before 3.2 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/8afc3b2a-81e5-4b6f-8f4c-c[PII_REDACTED]9; https://wpscan.com/vulnerability/8afc3b2a-81e5-4b6f-8f4c-c[PII_REDACTED]9
CVE: CVE-2022-4763
Published: 2023-01-30
Description: The Icon Widget WordPress plugin before 1.3.0 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/2f79a87f-c994-4a1e-b455-39d7d3c5c1b5; https://wpscan.com/vulnerability/2f79a87f-c994-4a1e-b455-39d7d3c5c1b5
CVE: CVE-2022-4765
Published: 2023-01-30
Description: The Portfolio for Elementor WordPress plugin before 2.3.1 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/a21dc4a3-a4f3-4619-b8a3-493a27e14ccb; https://wpscan.com/vulnerability/a21dc4a3-a4f3-4619-b8a3-493a27e14ccb
CVE: CVE-2022-4776
Published: 2023-01-30
Description: The CC Child Pages WordPress plugin before 1.43 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/d5ea8f7f-7d5a-4b2e-a070-a9aef7cac58a; https://wpscan.com/vulnerability/d5ea8f7f-7d5a-4b2e-a070-a9aef7cac58a
CVE: CVE-2022-4781
Published: 2023-01-30
Description: The Accordion Shortcodes WordPress plugin through 2.4.2 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/a2803027-b822-4bf9-8d1d-6f538681af9d; https://wpscan.com/vulnerability/a2803027-b822-4bf9-8d1d-6f538681af9d
CVE: CVE-2022-4787
Published: 2023-01-30
Description: Themify Shortcodes WordPress plugin before 2.0.8 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/2ab59972-ccfd-48f6-b879-58fb38823ca5; https://wpscan.com/vulnerability/2ab59972-ccfd-48f6-b879-58fb38823ca5
CVE: CVE-2022-4792
Published: 2023-01-30
Description: The News & Blog Designer Pack WordPress plugin before 3.3 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/13304aca-0722-4bd9-b443-a5fed1ce22da; https://wpscan.com/vulnerability/13304aca-0722-4bd9-b443-a5fed1ce22da
CVE: CVE-2022-4793
Published: 2023-01-30
Description: The Blog Designer WordPress plugin before 2.4.1 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/00c34ba8-b82e-4bb9-90b1-1afefae75948; https://wpscan.com/vulnerability/00c34ba8-b82e-4bb9-90b1-1afefae75948
CVE: CVE-2022-4794
Published: 2023-01-30
Description: The AAWP WordPress plugin before 3.12.3 can be used to abuse trusted domains to load malware or other files through it (Reflected File Download) to bypass firewall rules in companies.
CVSS Score: 7.5 (HIGH)
References: https://wpscan.com/vulnerability/feb4580d-df15-45c8-b59e-ad406e4b064c; https://wpscan.com/vulnerability/feb4580d-df15-45c8-b59e-ad406e4b064c
CVE: CVE-2022-4828
Published: 2023-01-30
Description: The Bold Timeline Lite WordPress plugin before 1.1.5 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/06e1d63e-576b-4e16-beb7-4f0bfb85e948; https://wpscan.com/vulnerability/06e1d63e-576b-4e16-beb7-4f0bfb85e948
CVE: CVE-2022-4831
Published: 2023-01-30
Description: The Custom User Profile Fields for User Registration WordPress plugin before 1.8.1 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/872fc8e6-4035-4e5a-9f30-16c482c48c7c; https://wpscan.com/vulnerability/872fc8e6-4035-4e5a-9f30-16c482c48c7c
CVE: CVE-2022-4834
Published: 2023-01-30
Description: The CPT Bootstrap Carousel WordPress plugin through 1.12 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/6183318f-0230-47a1-87f2-3c5aaef678a5; https://wpscan.com/vulnerability/6183318f-0230-47a1-87f2-3c5aaef678a5
CVE: CVE-2022-4835
Published: 2023-01-30
Description: The Social Sharing Toolkit WordPress plugin through 2.6 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/23c22f46-19a2-4a1a-aaef-0a4007eda031; https://wpscan.com/vulnerability/23c22f46-19a2-4a1a-aaef-0a4007eda031
CVE: CVE-2022-4837
Published: 2023-01-30
Description: The CPO Companion WordPress plugin before 1.1.0 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/41abeacb-ef3e-4621-89bb-df0f2eb617da; https://wpscan.com/vulnerability/41abeacb-ef3e-4621-89bb-df0f2eb617da