deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-9390
Published: 2024-12-05
Description: In procfile_write of gl_proc.c, there is a possible out of  bounds read of a
    function pointer due to an incorrect bounds check. This could lead to local
    escalation of privilege with System execution privileges needed. User
    interaction is not needed for exploitation.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/pixel/2018-06-01
CVE: CVE-2018-9391
Published: 2024-12-05
Description: In update_gps_sv and output_vzw_debug of
    vendor/mediatek/proprietary/hardware/connectivity/gps/gps_hal/src/gpshal_wor
    ker.c, there is a possible out of bounds write due to a missing bounds
    check. This could lead to local escalation of privilege with System
    execution privileges needed. User interaction is not needed for
    exploitation.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2018-06-01
CVE: CVE-2024-30961
Published: 2024-12-05
Description: Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via the error-thrown mechanism in nav2_bt_navigator.
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: https://github.com/GoesM/ROS-CVE-CNVDs; https://github.com/ros-planning/navigation2/issues/4175; https://github.com/ros-planning/navigation2/pull/4180
CVE: CVE-2024-30962
Published: 2024-12-05
Description: Buffer Overflow vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via the nav2_amcl process
CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-94
References: https://github.com/GoesM/ROS-CVE-CNVDs; https://github.com/ros-planning/navigation2/issues/4177; https://github.com/ros-planning/navigation2/pull/4206
CVE: CVE-2024-30963
Published: 2024-12-05
Description: Buffer Overflow vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via a crafted script.
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: https://github.com/GoesM/ROS-CVE-CNVDs; https://github.com/ros-planning/navigation2/issues/4157
CVE: CVE-2024-30964
Published: 2024-12-05
Description: Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 (ROS2) navigation2- ROS2-humble and navigation 2-humble allows a local attacker to execute arbitrary code via the initial_pose_sub thread created by nav2_bt_navigator
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: https://github.com/GoesM/ROS-CVE-CNVDs; https://github.com/ros-planning/navigation2/issues/4166; https://github.com/ros-planning/navigation2/pull/4176
CVE: CVE-2024-37860
Published: 2024-12-05
Description: Buffer Overflow vulnerability in Open Robotic Operating System 2 ROS2 navigation2- ROS2-humble&& navigation2-humble allows a local attacker to execute arbitrary code via a crafted .yaml file to the nav2_amcl process
CVSS Score: 7.3 (HIGH)
CWE: CWE-94
References: https://github.com/GoesM/ROS-CVE-CNVDs; https://github.com/ros-navigation/navigation2/issues/4005; https://github.com/ros-navigation/navigation2/issues/4336
CVE: CVE-2024-37861
Published: 2024-12-05
Description: Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a buffer overflow via the nav2_amcl process. This vulnerability is triggered via sending a crafted .yaml file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/GoesM/ROS-CVE-CNVDs; https://github.com/ros-navigation/navigation2/issues/4005; https://github.com/ros-navigation/navigation2/issues/4335
CVE: CVE-2024-37862
Published: 2024-12-05
Description: Buffer Overflow vulnerability in Open Robotic Robotic Operating System 2 ROS2 navigation2- ROS2-humble&& navigation2-humble allows a local attacker to execute arbitrary code via a crafted .yaml file to the nav2_planner process.
CVSS Score: 7.3 (HIGH)
CWE: CWE-94
References: https://github.com/GoesM/ROS-CVE-CNVDs; https://github.com/ros-navigation/navigation2/issues/4005; https://github.com/ros-navigation/navigation2/issues/4062
CVE: CVE-2024-37863
Published: 2024-12-05
Description: Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a buffer overflow via the nav2_amcl process. This vulnerability is triggered via sending a crafted .yaml file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/GoesM/ROS-CVE-CNVDs; https://github.com/ros-navigation/navigation2/issues/4005; https://github.com/ros-navigation/navigation2/issues/4337
CVE: CVE-2024-38910
Published: 2024-12-05
Description: Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble version was discovered to contain a use-after-free in the nav2_amcl process. This vulnerability is triggered via sending a request to change dynamic parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: https://github.com/GoesM/ROS-CVE-CNVDs; https://github.com/ros-navigation/navigation2/issues/4379; https://github.com/ros-navigation/navigation2/pull/4397
CVE: CVE-2024-38920
Published: 2024-12-05
Description: Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions were discovered to contain a use-after-free via the nav2_amcl process. This vulnerability is triggerd via remotely sending a request for change the value of dynamic-parameter`/amcl max_beams` .
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-416
References: https://github.com/GoesM/ROS-CVE-CNVDs; https://github.com/ros-navigation/navigation2/issues/4379; https://github.com/ros-navigation/navigation2/pull/4397
CVE: CVE-2024-52798
Published: 2024-12-05
Description: path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause poor performance. The regular expression that is vulnerable to backtracking can be generated in the 0.1.x release of path-to-regexp. Upgrade to 0.1.12. This vulnerability exists because of an incomplete fix for CVE-2024-45296.
CWE: CWE-1333
References: https://github.com/pillarjs/path-to-regexp/commit/f01c26a013b1889f0c217c643964513acf17f6a4; https://github.com/pillarjs/path-to-regexp/security/advisories/GHSA-rhx6-c78j-4q9w; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2024-6156
Published: 2024-12-06
Description: Mark Laing discovered that LXD's PKI mode, until version 5.21.2, could be bypassed if the client's certificate was present in the trust store.
CVSS Score: 3.8 (LOW)
CWE: CWE-295
References: https://github.com/canonical/lxd/security/advisories/GHSA-4c49-9fpc-hc3v; https://www.cve.org/CVERecord?id=CVE-2024-6156
CVE: CVE-2024-6219
Published: 2024-12-06
Description: Mark Laing discovered in LXD's PKI mode, until version 5.21.1, that a restricted certificate could be added to the trust store with its restrictions not honoured.
CVSS Score: 3.8 (LOW)
CWE: CWE-295
References: https://github.com/canonical/lxd/security/advisories/GHSA-jpmc-7p9c-4rxf; https://www.cve.org/CVERecord?id=CVE-2024-6219
CVE: CVE-2024-11149
Published: 2024-12-06
Description: In OpenBSD 7.4 before errata 014, vmm(4) did not restore GDTR limits properly on Intel (VMX) CPUs.
CVSS Score: 7.9 (HIGH)
References: https://ftp.openbsd.org/pub/OpenBSD/patches/7.4/common/014_vmm.patch.sig
CVE: CVE-2024-49041
Published: 2024-12-06
Description: Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-449
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49041
CVE: CVE-2024-10247
Published: 2024-12-06
Description: The Video Gallery – Best WordPress YouTube Gallery Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the orderby parameter in all versions up to, and including, 2.4.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://packetstormsecurity.com/files/179387/WordPress-Video-Gallery-YouTube-Gallery-And-Vimeo-Gallery-2.3.6-SQL-Injection.html; https://plugins.trac.wordpress.org/browser/gallery-videos/trunk/admin/class-tsvg-list.php#L15; https://plugins.trac.wordpress.org/changeset/3200979/gallery-videos/trunk/admin/class-tsvg-list.php
CVE: CVE-2024-10836
Published: 2024-12-06
Description: The Flixita theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 1.0.82 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://themes.trac.wordpress.org/browser/flixita/1.0.76/core/customizer/customizer-notice/flixita-customizer-notify.php#L147; https://themes.trac.wordpress.org/browser/flixita/1.0.76/core/customizer/customizer-notice/flixita-customizer-notify.php#L188; https://themes.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=250697%40flixita%2F1.0.83&old=250119%40flixita%2F1.0.82
CVE: CVE-2024-9769
Published: 2024-12-06
Description: The Video Gallery – Best WordPress YouTube Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.4.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/179304/WordPress-Gallery-2.3.6-Cross-Site-Scripting.html; https://www.wordfence.com/threat-intel/vulnerabilities/id/b57c9e58-64a6-48e8-8ef6-25608e4131e6?source=cve
CVE: CVE-2024-11379
Published: 2024-12-06
Description: The Broadcast plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'do_check' parameter in all versions up to, and including, 51.01 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. This only affects multi-site installations.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/threewp-broadcast/trunk/src/maintenance/controller.php#L55; https://plugins.trac.wordpress.org/changeset/3200309/threewp-broadcast/trunk/src/maintenance/controller.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/e9bf506f-17b1-4ec3-87ce-1ed78db6fb0b?source=cve
CVE: CVE-2024-10480
Published: 2024-12-06
Description: The 3DPrint Lite WordPress plugin before 2.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/725ac766-c849-49d6-a968-58fcc2e134c8/
CVE: CVE-2024-10551
Published: 2024-12-06
Description: The Sticky Social Icons WordPress plugin through 1.2.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/cd1aea4a-e5a6-4f87-805d-459b293bbf28/
CVE: CVE-2024-10578
Published: 2024-12-06
Description: The Pubnews theme for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the pubnews_importer_plugin_action_for_notice() function in all versions up to, and including, 1.0.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to install arbitrary plugins that can be leveraged to exploit other vulnerabilities.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://themes.trac.wordpress.org/browser/pubnews/1.0.7/inc/admin/admin.php#L1017; https://themes.trac.wordpress.org/changeset/250743/pubnews/1.0.8?contextall=1&old=245552&old_path=%2Fpubnews%2F1.0.7; https://www.wordfence.com/threat-intel/vulnerabilities/id/7eaa0117-5320-431f-b3d2-05a867901528?source=cve
CVE: CVE-2024-11201
Published: 2024-12-06
Description: The myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's mycred_send shortcode in all versions up to, and including, 2.7.5.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/mycred/tags/2.7.5/includes/shortcodes/mycred_send.php#L63; https://plugins.trac.wordpress.org/changeset/3203071/mycred/trunk/includes/shortcodes/mycred_send.php; https://wordpress.org/plugins/mycred/#developers
CVE: CVE-2024-11585
Published: 2024-12-06
Description: The WP Hide & Security Enhancer plugin for WordPress is vulnerable to arbitrary file contents deletion due to a missing authorization and insufficient file path validation in the file-process.php in all versions up to, and including, 2.5.1. This makes it possible for unauthenticated attackers to delete the contents of arbitrary files on the server, which can break the site or lead to data loss.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://plugins.trac.wordpress.org/browser/wp-hide-security-enhancer/tags/2.5.1/router/file-process.php#L43; https://www.wordfence.com/threat-intel/vulnerabilities/id/43c7056e-39d8-467e-92ec-33a31e5dafc9?source=cve
CVE: CVE-2024-11178
Published: 2024-12-06
Description: The Login With OTP plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.4.2. This is due to the plugin generating too weak OTP, and there’s no attempt or time limit. This makes it possible for unauthenticated attackers to generate and brute force the 6-digit numeric OTP that makes it possible to log in as any existing user on the site, such as an administrator, if they have access to the email.
CVSS Score: 8.1 (HIGH)
CWE: CWE-288
References: https://plugins.trac.wordpress.org/browser/otp-login/tags/1.4.2/lib/otpl-class.php#L293; https://plugins.trac.wordpress.org/browser/otp-login/tags/1.4.2/lib/otpl-class.php#L317; https://plugins.trac.wordpress.org/changeset/3216953/otp-login#file18
CVE: CVE-2024-10320
Published: 2024-12-06
Description: The Cookielay plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's cookielay shortcode in all versions up to, and including, 1.2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/cookielay/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/8e014aa5-4fdf-458b-a975-e3ced7186dc2?source=cve
CVE: CVE-2024-10689
Published: 2024-12-06
Description: The XLTab – Accordions and Tabs for Elementor Page Builder plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.4 via the 'XLTAB_INSERT_TPL' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from private or draft posts created by Elementor that they should not have access to.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3190826%40xl-tab&new=3190826%40xl-tab&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/dbf8c216-aedd-4db9-aaa4-61bc0d7850cb?source=cve
CVE: CVE-2024-10692
Published: 2024-12-06
Description: The PowerPack Elementor Addons (Free Widgets, Extensions and Templates) plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.8.1 via the Content Reveal widget due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from password protected, private, or draft posts that they should not have access to.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: https://plugins.trac.wordpress.org/changeset/3203205/powerpack-lite-for-elementor/tags/2.8.2/modules/content-reveal/widgets/content-reveal.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/d073d9df-0636-4884-b5d0-e2da779e5edf?source=cve
CVE: CVE-2024-10849
Published: 2024-12-06
Description: The NewsMash theme for WordPress is vulnerable to Stored Cross-Site Scripting via a malicious display name in all versions up to, and including, 1.0.71 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. CVE-2024-56208 is a duplicate of this issue.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://themes.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=250662%40newsmash&new=250662%40newsmash&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/3bb30dac-e0f3-43dd-a20d-9af6c7af3cb4?source=cve
CVE: CVE-2024-10879
Published: 2024-12-06
Description: The ForumWP – Forum & Discussion Board plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.1.2. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/forumwp/tags/2.1.0/includes/admin/class-emails-list-table.php#L156; https://plugins.trac.wordpress.org/browser/forumwp/tags/2.1.0/includes/admin/class-emails-list-table.php#L178; https://plugins.trac.wordpress.org/changeset/3205107/forumwp/trunk/includes/admin/class-emails-list-table.php
CVE: CVE-2024-11204
Published: 2024-12-06
Description: The ForumWP – Forum & Discussion Board plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘url’ parameter in all versions up to, and including, 2.1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/forumwp/tags/2.1.1/includes/admin/class-columns.php#L313; https://plugins.trac.wordpress.org/changeset/3205107/forumwp/trunk/includes/admin/class-columns.php; https://wordpress.org/plugins/forumwp/#developers
CVE: CVE-2024-11276
Published: 2024-12-06
Description: The PDF Builder for WooCommerce. Create invoices,packing slips and more plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.2.136 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3202588%40woo-pdf-invoice-builder&new=3202588%40woo-pdf-invoice-builder&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/5f21a86b-52f4-4563-afce-32f1949ce5a1?source=cve
CVE: CVE-2024-11292
Published: 2024-12-06
Description: The WP Private Content Plus plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.6.1 via the WordPress core search feature. This makes it possible for unauthenticated attackers to extract sensitive data from posts that have been restricted to higher-level roles such as administrator.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3207882%40wp-private-content-plus&new=3207882%40wp-private-content-plus&sfp_email=&sfph_mail=; https://wordpress.org/plugins/wp-private-content-plus/; https://www.wordfence.com/threat-intel/vulnerabilities/id/30c46b91-e371-480f-943a-3906d8b6bbba?source=cve
CVE: CVE-2024-11323
Published: 2024-12-06
Description: The AI Quiz | Quiz Maker plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the ai_quiz_update_style() function in all versions up to, and including, 1.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/ai-quiz/tags/1.1/functions.php#L688; https://www.wordfence.com/threat-intel/vulnerabilities/id/53591a3b-8a99-40e2-8145-1d7785bcbab4?source=cve
CVE: CVE-2024-11336
Published: 2024-12-06
Description: The Clickbank WordPress Plugin (Storefront) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7. This is due to missing or incorrect nonce validation via the cs_menu page. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/browser/clickbank-storefront/trunk/admin.inc.php#L700; https://www.wordfence.com/threat-intel/vulnerabilities/id/57789905-1e08-41c5-bfda-b1d6d33de4c0?source=cve
CVE: CVE-2024-11339
Published: 2024-12-06
Description: The Smart PopUp Blaster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's
'spb-button' shortcode in all versions up to, and including, 1.4.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/smart-popup-blaster/trunk/admin/shortcodes.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/e10f391a-6663-4222-8266-ab911c588b76?source=cve