deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-51281
Published: 2024-03-07
Description: Cross Site Scripting vulnerability in Customer Support System v.1.0 allows a remote attacker to escalate privileges via a crafted script firstname, "lastname", "middlename", "contact" and address parameters.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/geraldoalcantara/CVE-2023-51281; https://www.sourcecodester.com/php/14587/customer-support-system-using-phpmysqli-source-code.html; https://github.com/geraldoalcantara/CVE-2023-51281
CVE: CVE-2023-51786
Published: 2024-03-07
Description: An issue was discovered in Lustre versions 2.13.x, 2.14.x, and 2.15.x before 2.15.4, allows attackers to escalate privileges and obtain sensitive information via Incorrect Access Control.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-284
References: http://lists.lustre.org/pipermail/lustre-announce-lustre.org/2024/000270.html; http://www.openwall.com/lists/oss-security/2024/03/12/2; http://lists.lustre.org/pipermail/lustre-announce-lustre.org/2024/000270.html
CVE: CVE-2024-0199
Published: 2024-03-07
Description: An authorization bypass vulnerability was discovered in GitLab affecting versions 11.3 prior to 16.7.7, 16.7.6 prior to 16.8.4, and 16.8.3 prior to 16.9.2. An attacker could bypass CODEOWNERS by utilizing a crafted payload in an old feature branch to perform malicious actions.
CVSS Score: 7.7 (HIGH)
CWE: CWE-863, CWE-863
References: https://about.gitlab.com/releases/2024/03/06/security-release-gitlab-16-9-2-released/; https://gitlab.com/gitlab-org/gitlab/-/issues/436977; https://hackerone.com/reports/2295423
CVE: CVE-2024-1299
Published: 2024-03-07
Description: A privilege escalation vulnerability was discovered in GitLab affecting versions 16.8 prior to 16.8.4 and 16.9 prior to 16.9.2. It was possible for a user with custom role of `manage_group_access_tokens` to rotate group access tokens with owner privileges.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-268
References: https://about.gitlab.com/releases/2024/03/06/security-release-gitlab-16-9-2-released/; https://gitlab.com/gitlab-org/gitlab/-/issues/440745; https://hackerone.com/reports/2356976
CVE: CVE-2024-22857
Published: 2024-03-07
Description: Heap based buffer flow in zlog v1.1.0 to v1.2.17 in zlog_rule_new().The size of record_name is MAXLEN_PATH(1024) + 1 but file_path may have data upto MAXLEN_CFG_LINE(MAXLEN_PATH*4) + 1. So a check was missing in zlog_rule_new() while copying the record_name from file_path + 1 which caused the buffer overflow. An attacker can exploit this vulnerability to overwrite the zlog_record_fn record_func function pointer to get arbitrary code execution or potentially cause remote code execution (RCE).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122
References: https://github.com/HardySimpson/zlog/; https://github.com/HardySimpson/zlog/blob/1a7b1a6fb956b92a4079ccc91f30da21f34ca063/src/rule.h#L30; https://github.com/HardySimpson/zlog/pull/251
CVE: CVE-2024-24375
Published: 2024-03-07
Description: SQL injection vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to obtain sensitive information via /admin/admin name parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89, CWE-312
References: https://github.com/RiverGone/records/blob/main/JFinalcms-admin-admin-name.md; https://github.com/RiverGone/records/blob/main/JFinalcms-admin-admin-name.md
CVE: CVE-2024-26566
Published: 2024-03-07
Description: An issue in Cute Http File Server v.3.1 allows a remote attacker to escalate privileges via the password verification component.
CVSS Score: 8.2 (HIGH)
CWE: CWE-288
References: http://cute.com; https://github.com/GZLDL/CVE/blob/main/CVE-2024-26566/CVE-2024-26566%20English.md; https://github.com/GZLDL/CVE/tree/main/Cute%20Http%20File%20Server%20JWT
CVE: CVE-2022-46089
Published: 2024-03-07
Description: Cross Site Scripting (XSS) vulnerability in the add-airline form of Online Flight Booking Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the airline parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/ASR511-OO7/CVE-2022-46089/blob/main/CVE-35; https://github.com/ASR511-OO7/CVE-2022-46089/blob/main/CVE-35
CVE: CVE-2024-0817
Published: 2024-03-07
Description: Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0
CVSS Score: 7.8 (HIGH)
CWE: CWE-77
References: https://huntr.com/bounties/44d5cbd9-a046-417b-a8d4-bea6fda9cbe3; https://huntr.com/bounties/44d5cbd9-a046-417b-a8d4-bea6fda9cbe3
CVE: CVE-2024-24389
Published: 2024-03-07
Description: A cross-site scripting (XSS) vulnerability in XunRuiCMS up to v4.6.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Add Column Name parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://j11zuc9f0h2.feishu.cn/docx/TXRmdIcH3ocn1WxuEQBcNPpjnLe; https://j11zuc9f0h2.feishu.cn/docx/TXRmdIcH3ocn1WxuEQBcNPpjnLe
CVE: CVE-2024-1443
Published: 2024-03-07
Description: MSI Afterburner v4.6.5.16370 is vulnerable to a Denial of Service vulnerability by triggering the 0x80002000 IOCTL code of the RTCore64.sys driver. The handle to the driver can only be obtained from a high integrity process.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-476
References: https://fluidattacks.com/advisories/coltrane/; https://www.msi.com/Landing/afterburner/graphics-cards; https://fluidattacks.com/advisories/coltrane/
CVE: CVE-2024-1460
Published: 2024-03-07
Description: MSI Afterburner v4.6.5.16370 is vulnerable to a Kernel Memory Leak vulnerability by triggering the 0x80002040 IOCTL code of the RTCore64.sys driver. The handle to the driver can only be obtained from a high integrity process.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-200
References: https://fluidattacks.com/advisories/mingus/; https://www.msi.com/Landing/afterburner/graphics-cards; https://fluidattacks.com/advisories/mingus/
CVE: CVE-2024-0815
Published: 2024-03-07
Description: Command injection in paddle.utils.download._wget_download (bypass filter) in paddlepaddle/paddle 2.6.0
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://huntr.com/bounties/83bf8191-b259-4b24-8ec9-0115d7c05350; https://huntr.com/bounties/83bf8191-b259-4b24-8ec9-0115d7c05350
CVE: CVE-2024-28094
Published: 2024-03-07
Description: Chat functionality in Schoolbox application before
 version 23.1.3 is vulnerable to blind SQL Injection enabling the 
authenticated attackers to read, modify, and delete database records.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://schoolbox.education/; https://www.themissinglink.com.au/security-advisories/cve-2024-28094; https://schoolbox.education/
CVE: CVE-2024-28095
Published: 2024-03-07
Description: News functionality in Schoolbox application before
 version 23.1.3 is vulnerable to stored cross-site scripting allowing 
authenticated attacker to perform security actions in the context of the
 affected users.
CVSS Score: 7.3 (HIGH)
CWE: CWE-79, CWE-79
References: https://schoolbox.education/; https://www.themissinglink.com.au/security-advisories/cve-2024-28095; https://schoolbox.education/
CVE: CVE-2024-28096
Published: 2024-03-07
Description: Class functionality in Schoolbox application 
before version 23.1.3 is vulnerable to stored cross-site scripting 
allowing authenticated attacker to perform security actions in the 
context of the affected users.
CVSS Score: 7.3 (HIGH)
CWE: CWE-79, CWE-79
References: https://schoolbox.education/; https://www.themissinglink.com.au/security-advisories/cve-2024-28096; https://schoolbox.education/
CVE: CVE-2024-28097
Published: 2024-03-07
Description: Calendar functionality in Schoolbox application 
before version 23.1.3 is vulnerable to stored cross-site scripting 
allowing authenticated attacker to perform security actions in the 
context of the affected users.
CVSS Score: 7.3 (HIGH)
CWE: CWE-79, CWE-79
References: https://schoolbox.education/; https://www.themissinglink.com.au/security-advisories/cve-2024-28097; https://schoolbox.education/
CVE: CVE-2023-51395
Published: 2024-03-07
Description: The vulnerability described by CVE-2023-0972 has been additionally discovered in Silicon Labs Z-Wave end devices. This vulnerability may allow an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leading to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125, CWE-787
References: https://community.silabs.com/068Vm0000029Xq5; https://community.silabs.com/068Vm0000029Xq5
CVE: CVE-2024-1761
Published: 2024-03-07
Description: The WP Chat App plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widget/block in all versions up to, and including, 3.6.1 due to insufficient input sanitization and output escaping on user supplied attributes such as 'buttonColor' and 'phoneNumber'. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3044368%40wp-whatsapp%2Ftrunk&old=3029885%40wp-whatsapp%2Ftrunk&sfp_email=&sfph_mail=#file4; https://www.wordfence.com/threat-intel/vulnerabilities/id/85a94f32-e1e5-48ea-822e-c54d0592da28?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3044368%40wp-whatsapp%2Ftrunk&old=3029885%40wp-whatsapp%2Ftrunk&sfp_email=&sfph_mail=#file4
CVE: CVE-2024-28211
Published: 2024-03-07
Description: nGrinder before 3.5.9 allows connection to malicious JMX/RMI server by default, which could be the cause of executing arbitrary code via RMI registry by remote attacker.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502, CWE-502
References: https://cve.naver.com/detail/cve-2024-28211.html; https://cve.naver.com/detail/cve-2024-28211.html
CVE: CVE-2024-28212
Published: 2024-03-07
Description: nGrinder before 3.5.9 uses old version of SnakeYAML, which could allow remote attacker to execute arbitrary code via unsafe deserialization.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502, CWE-502
References: https://cve.naver.com/detail/cve-2024-28212.html; https://cve.naver.com/detail/cve-2024-28212.html
CVE: CVE-2024-28213
Published: 2024-03-07
Description: nGrinder before 3.5.9 allows to accept serialized Java objects from unauthenticated users, which could allow remote attacker to execute arbitrary code via unsafe Java objects deserialization.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502, CWE-502
References: https://cve.naver.com/detail/cve-2024-28213.html; https://cve.naver.com/detail/cve-2024-28213.html
CVE: CVE-2024-28214
Published: 2024-03-07
Description: nGrinder before 3.5.9 allows to set delay without limitation, which could be the cause of Denial of Service by remote attacker.
CVSS Score: 2.7 (LOW)
CWE: CWE-405
References: https://cve.naver.com/detail/cve-2024-28214.html; https://cve.naver.com/detail/cve-2024-28214.html
CVE: CVE-2024-28215
Published: 2024-03-07
Description: nGrinder before 3.5.9 allows an attacker to create or update webhook configuration due to lack of access control, which could be the cause of information disclosure and limited Server-Side Request Forgery.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862, CWE-862
References: https://cve.naver.com/detail/cve-2024-28215.html; https://cve.naver.com/detail/cve-2024-28215.html
CVE: CVE-2024-28216
Published: 2024-03-07
Description: nGrinder before 3.5.9 allows an attacker to obtain the results of webhook requests due to lack of access control, which could be the cause of information disclosure and limited Server-Side Request Forgery.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://cve.naver.com/detail/cve-2024-28216.html; https://cve.naver.com/detail/cve-2024-28216.html
CVE: CVE-2024-1366
Published: 2024-03-07
Description: The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘archive_title_tag’ attribute of the Archive Title widget in all versions up to, and including, 3.10.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset/3044937/happy-elementor-addons; https://www.wordfence.com/threat-intel/vulnerabilities/id/08208cb1-2d57-49f9-8ac7-b59caa0cf5fa?source=cve; https://plugins.trac.wordpress.org/changeset/3044937/happy-elementor-addons
CVE: CVE-2024-1377
Published: 2024-03-07
Description: The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘author_meta_tag’ attribute of the Author Meta widget in all versions up to, and including, 3.10.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset/3044937/happy-elementor-addons; https://www.wordfence.com/threat-intel/vulnerabilities/id/b61eb8b7-0d89-47ef-831c-1772d01e2c85?source=cve; https://plugins.trac.wordpress.org/changeset/3044937/happy-elementor-addons
CVE: CVE-2024-1500
Published: 2024-03-07
Description: The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Logo Widget in all versions up to, and including, 1.3.91 due to insufficient input sanitization and output escaping on user supplied URLs. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/royal-elementor-addons/trunk/modules/logo/widgets/wpr-logo.php#L644; https://plugins.trac.wordpress.org/browser/royal-elementor-addons/trunk/modules/logo/widgets/wpr-logo.php#L664; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3037411%40royal-elementor-addons%2Ftags%2F1.3.91&new=3038353%40royal-elementor-addons%2Ftags%2F1.3.92
CVE: CVE-2024-1720
Published: 2024-03-07
Description: The User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Display Name' parameter in all versions up to, and including, 3.1.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This vulnerability requires social engineering to successfully exploit, and the impact would be very limited due to the attacker requiring a user to login as the user with the injected payload for execution.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/user-registration/trunk/includes/class-ur-shortcodes.php#L288; https://plugins.trac.wordpress.org/changeset/3045419/user-registration/trunk/includes/class-ur-shortcodes.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/62b809dc-4089-4822-8aeb-7049fcfe376e?source=cve
CVE: CVE-2024-1419
Published: 2024-03-07
Description: The The Plus Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘_id’ attribute of the Header Meta Content widget in all versions up to, and including, 5.4.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset/3043999/the-plus-addons-for-elementor-page-builder; https://www.wordfence.com/threat-intel/vulnerabilities/id/d0b3d83b-9695-40c5-b6ee-2a76c940de6e?source=cve; https://plugins.trac.wordpress.org/changeset/3043999/the-plus-addons-for-elementor-page-builder
CVE: CVE-2024-1506
Published: 2024-03-07
Description: The Prime Slider – Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title_tags' attribute of the Fiestar widget in all versions up to, and including, 3.13.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset/3044299/bdthemes-prime-slider-lite; https://www.wordfence.com/threat-intel/vulnerabilities/id/bbb3ee94-e631-47ee-9f16-6bf7c23abab1?source=cve; https://plugins.trac.wordpress.org/changeset/3044299/bdthemes-prime-slider-lite
CVE: CVE-2024-28222
Published: 2024-03-07
Description: In Veritas NetBackup before 8.1.2 and NetBackup Appliance before 3.1.2, the BPCD process inadequately validates the file path, allowing an unauthenticated attacker to upload and execute a custom file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://www.veritas.com/content/support/en_US/security/VTS23-010; https://www.veritas.com/content/support/en_US/security/VTS23-010
CVE: CVE-2022-46091
Published: 2024-03-07
Description: Cross Site Scripting (XSS) vulnerability in the feedback form of Online Flight Booking Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the airline parameter.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79
References: https://github.com/ASR511-OO7/CVE-2022-46091/blob/main/CVE-34; https://github.com/ASR511-OO7/CVE-2022-46091/blob/main/CVE-34
CVE: CVE-2022-46497
Published: 2024-03-07
Description: Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the pat_number parameter at his_doc_view_single_patien.php.
CVSS Score: 8.1 (HIGH)
CWE: CWE-89
References: https://github.com/ASR511-OO7/CVE-2022-46497/blob/main/CVE-33; https://github.com/ASR511-OO7/CVE-2022-46497/blob/main/CVE-33
CVE: CVE-2022-46498
Published: 2024-03-07
Description: Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the doc_number parameter at his_admin_view_single_employee.php.
CVSS Score: 2.7 (LOW)
CWE: CWE-89
References: https://github.com/ASR511-OO7/CVE-2022-46498/blob/main/CVE-32; https://github.com/ASR511-OO7/CVE-2022-46498/blob/main/CVE-32
CVE: CVE-2022-46499
Published: 2024-03-07
Description: Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the pat_number parameter at his_admin_view_single_patient.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/ASR511-OO7/CVE-2022-46499/blob/main/CVE-31; https://github.com/ASR511-OO7/CVE-2022-46499/blob/main/CVE-31
CVE: CVE-2023-33676
Published: 2024-03-07
Description: Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=items/view&id=*" which can be escalated to the remote command execution.
CVSS Score: 8.4 (HIGH)
CWE: CWE-89
References: https://github.com/ASR511-OO7/CVE-2023-33676/blob/main/CVE-30; https://github.com/ASR511-OO7/CVE-2023-33676/blob/main/CVE-30
CVE: CVE-2023-41014
Published: 2024-03-07
Description: code-projects.org Online Job Portal 1.0 is vulnerable to SQL Injection via the Username parameter for "Employer."
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/ASR511-OO7/CVE-2023-41014/blob/main/CVE-28; https://github.com/ASR511-OO7/CVE-2023-41014/blob/main/CVE-28
CVE: CVE-2023-41015
Published: 2024-03-07
Description: code-projects.org Online Job Portal 1.0 is vulnerable to SQL Injection via /Employer/DeleteJob.php?JobId=1.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/ASR511-OO7/CVE-2023-41015/blob/main/CVE-27; https://github.com/ASR511-OO7/CVE-2023-41015/blob/main/CVE-27
CVE: CVE-2023-41503
Published: 2024-03-07
Description: Student Enrollment In PHP v1.0 was discovered to contain a SQL injection vulnerability via the Login function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/ASR511-OO7/CVE-2023-41503/blob/main/CVE-26; https://github.com/ASR511-OO7/CVE-2023-41503/blob/main/CVE-26
CVE: CVE-2023-42662
Published: 2024-03-07
Description: JFrog Artifactory versions 7.59 and above, but below 7.59.18, 7.63.18, 7.68.19, 7.71.8 are vulnerable to an issue whereby user interaction with specially crafted URLs could lead to exposure of user access tokens due to improper handling of the CLI / IDE browser based SSO integration.

CVSS Score: 9.3 (CRITICAL)
CWE: CWE-287
References: https://jfrog.com/help/r/jfrog-release-information/jfrog-security-advisories; https://jfrog.com/help/r/jfrog-release-information/jfrog-security-advisories
CVE: CVE-2024-0917
Published: 2024-03-07
Description: remote code execution in paddlepaddle/paddle 2.6.0
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://huntr.com/bounties/2d840735-e255-4700-9709-6f[PII_REDACTED]; https://huntr.com/bounties/2d840735-e255-4700-9709-6f[PII_REDACTED]
CVE: CVE-2024-1382
Published: 2024-03-07
Description: The Restaurant Reservations plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.9 via the nd_rst_layout attribute of the nd_rst_search shortcode. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary PHP files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where an uploaded PHP file may not be directly accessible.
CVSS Score: 8.8 (HIGH)
CWE: CWE-98
References: https://plugins.trac.wordpress.org/browser/nd-restaurant-reservations/trunk/addons/visual/search/index.php#L49; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3045964%40nd-restaurant-reservations%2Ftrunk&old=2980579%40nd-restaurant-reservations%2Ftrunk&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/d51db160-c701-426d-890f-73cc4785cad8?source=cve
CVE: CVE-2024-2136
Published: 2024-03-07
Description: The WPKoi Templates for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Advanced Heading widget in all versions up to, and including, 2.5.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset/3046089/wpkoi-templates-for-elementor; https://www.wordfence.com/threat-intel/vulnerabilities/id/31f7ae51-2fb2-4311-bc78-7198d6e6b623?source=cve; https://plugins.trac.wordpress.org/changeset/3046089/wpkoi-templates-for-elementor