deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-29766
Published: 2021-07-26
Description: IBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 202680.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-209
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/202680; https://www.ibm.com/support/pages/node/6474881; https://exchange.xforce.ibmcloud.com/vulnerabilities/202680
CVE: CVE-2021-29767
Published: 2021-07-26
Description: IBM i2 Analyst's Notebook Premium 9.2.0, 9.2.1, and 9.2.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 202681.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-209
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/202681; https://www.ibm.com/support/pages/node/6474885; https://exchange.xforce.ibmcloud.com/vulnerabilities/202681
CVE: CVE-2021-29769
Published: 2021-07-26
Description: IBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 202769.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-319
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/202769; https://www.ibm.com/support/pages/node/6474883; https://exchange.xforce.ibmcloud.com/vulnerabilities/202769
CVE: CVE-2021-29770
Published: 2021-07-26
Description: IBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) could allow an authenticated user to perform unauthorized actions due to hazardous input validation. IBM X-Force ID: 202771.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/202771; https://www.ibm.com/support/pages/node/6474877; https://exchange.xforce.ibmcloud.com/vulnerabilities/202771
CVE: CVE-2021-29784
Published: 2021-07-26
Description: IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 203168.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-209
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/203168; https://www.ibm.com/support/pages/node/6474875; https://exchange.xforce.ibmcloud.com/vulnerabilities/203168
CVE: CVE-2021-35030
Published: 2021-07-26
Description: A vulnerability was found in the CGI program in Zyxel GS1900-8 firmware version V2.60, that did not properly sterilize packet contents and could allow an authenticated, local user to perform a cross-site scripting (XSS) attack via a crafted LLDP packet.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79
References: https://www.zyxel.com/support/Zyxel_security_advisory_for_XSS_vulnerability_of_GS1900_series_switches.shtml; https://www.zyxel.com/support/Zyxel_security_advisory_for_XSS_vulnerability_of_GS1900_series_switches.shtml
CVE: CVE-2021-3664
Published: 2021-07-26
Description: url-parse is vulnerable to URL Redirection to Untrusted Site
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://github.com/unshiftio/url-parse/commit/81ab967889b08112d3356e451bf03e6aa0cbb7e0; https://huntr.dev/bounties/[PII_REDACTED]85-unshiftio/url-parse; https://lists.debian.org/debian-lts-announce/2023/02/msg00030.html
CVE: CVE-2021-26824
Published: 2021-07-26
Description: DM FingerTool v1.19 in the DM PD065 Secure USB is susceptible to improper authentication by a replay attack, allowing local attackers to bypass user authentication and access all features and data on the USB.
CVSS Score: 7.1 (HIGH)
CWE: CWE-294
References: https://github.com/bosslabdcu/Vulnerability-Reporting/security/advisories/GHSA-xvrv-w76r-gh28; https://sites.google.com/view/boss-lab; https://github.com/bosslabdcu/Vulnerability-Reporting/security/advisories/GHSA-xvrv-w76r-gh28
CVE: CVE-2021-37534
Published: 2021-07-26
Description: app/View/GalaxyClusters/add.ctp in MISP 2.4.146 allows Stored XSS when forking a galaxy cluster.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/MISP/MISP/commit/78edbbca64a1edc4390560cc106d0d418064355d; https://github.com/MISP/MISP/commit/78edbbca64a1edc4390560cc106d0d418064355d
CVE: CVE-2021-33629
Published: 2021-07-26
Description: isula-build before 0.9.5-6 can cause a program crash, when building container images, some functions for processing external data do not remove spaces when processing data.
CVSS Score: 7.5 (HIGH)
References: https://openeuler.org/zh/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1265; https://openeuler.org/zh/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1265
CVE: CVE-2021-32631
Published: 2021-07-26
Description: Common is a package of common modules that can be accessed by NIMBLE services. Common before commit number 3b96cb0293d3443b870351945f41d7d55cb34b53 did not properly verify the signature of JSON Web Tokens. This allows someone to forge a valid JWT. Being able to forge JWTs may lead to authentication bypasses. Commit number 3b96cb0293d3443b870351945f41d7d55cb34b53 contains a patch for the issue. As a workaround, one may use the parseClaimsJws method to correctly verify the signature of a JWT.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-290, CWE-290
References: https://github.com/nimble-platform/common/commit/12197a755bd524559bf4e16475595a2c6fcd34db; https://github.com/nimble-platform/common/commit/3b96cb0293d3443b870351945f41d7d55cb34b53; https://github.com/nimble-platform/common/commit/a59ad46733912a5580530e39cac0e6ebc83cc563
CVE: CVE-2021-32789
Published: 2021-07-26
Description: woocommerce-gutenberg-products-block is a feature plugin for WooCommerce Gutenberg Blocks. An SQL injection vulnerability impacts all WooCommerce sites running the WooCommerce Blocks feature plugin between version 2.5.0 and prior to version 2.5.16. Via a carefully crafted URL, an exploit can be executed against the `wc/store/products/collection-data?calculate_attribute_counts[][taxonomy]` endpoint that allows the execution of a read only sql query. There are patches for many versions of this package, starting with version 2.5.16. There are no known workarounds aside from upgrading.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/woocommerce/woocommerce-gutenberg-products-block-ghsa-6hq4-w6wv-8wrp/pull/1; https://github.com/woocommerce/woocommerce-gutenberg-products-block/security/advisories/GHSA-6hq4-w6wv-8wrp; https://hackerone.com/reports/1260787
CVE: CVE-2021-25801
Published: 2021-07-26
Description: A buffer overflow vulnerability in the __Parse_indx component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read via a crafted .avi file.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://code.videolan.org/videolan/vlc-3.0/-/commit/f5f8cc3ab8825f178de3f6714bfbff8b3f293fd2; https://code.videolan.org/videolan/vlc-3.0/-/commit/f5f8cc3ab8825f178de3f6714bfbff8b3f293fd2
CVE: CVE-2021-25802
Published: 2021-07-26
Description: A buffer overflow vulnerability in the AVI_ExtractSubtitle component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read via a crafted .avi file.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://code.videolan.org/videolan/vlc-3.0/-/commit/0660acc3ab64d2c3ad99cae887a438f0648faa72; https://code.videolan.org/videolan/vlc-3.0/-/commit/0660acc3ab64d2c3ad99cae887a438f0648faa72
CVE: CVE-2021-25803
Published: 2021-07-26
Description: A buffer overflow vulnerability in the vlc_input_attachment_New component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read via a crafted .avi file.
CVSS Score: 7.1 (HIGH)
CWE: CWE-190
References: https://code.videolan.org/videolan/vlc-3.0/-/commit/56cbe9c4b59edbdc5e1bb2687992f3bbf492eccb; https://code.videolan.org/videolan/vlc-3.0/-/commit/56cbe9c4b59edbdc5e1bb2687992f3bbf492eccb
CVE: CVE-2021-25804
Published: 2021-07-26
Description: A NULL-pointer dereference in "Open" in avi.c of VideoLAN VLC Media Player 3.0.11 can a denial of service (DOS) in the application.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://code.videolan.org/videolan/vlc-3.0/-/commit/a7f577ec26d35bbd7b2a3cda89d1b41bde69de9c; https://code.videolan.org/videolan/vlc-3.0/-/commit/a7f577ec26d35bbd7b2a3cda89d1b41bde69de9c
CVE: CVE-2021-31291
Published: 2021-07-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-29457. Reason: This candidate is a duplicate of CVE-2021-29457. Notes: All CVE users should reference CVE-2021-29457 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2021-31292
Published: 2021-07-26
Description: An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of service (DOS) via crafted metadata.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://github.com/Exiv2/exiv2/issues/1530; https://lists.debian.org/debian-lts-announce/2021/08/msg00028.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FMDT4PJB7P43WSOM3TRQIY3J33BAFVVE/
CVE: CVE-2021-32790
Published: 2021-07-26
Description: Woocommerce is an open source eCommerce plugin for WordPress. An SQL injection vulnerability impacts all WooCommerce sites running the WooCommerce plugin between version 3.3.0 and 3.3.6. Malicious actors (already) having admin access, or API keys to the WooCommerce site can exploit vulnerable endpoints of `/wp-json/wc/v3/webhooks`, `/wp-json/wc/v2/webhooks` and other webhook listing API. Read-only SQL queries can be executed using this exploit, while data will not be returned, by carefully crafting `search` parameter information can be disclosed using timing and related attacks. Version 3.3.6 is the earliest version of Woocommerce with a patch for this vulnerability. There are no known workarounds other than upgrading.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://github.com/woocommerce/woocommerce/security/advisories/GHSA-7vx5-x39w-q24g; https://woocommerce.com/posts/critical-vulnerability-detected-july-2021/; https://github.com/woocommerce/woocommerce/security/advisories/GHSA-7vx5-x39w-q24g
CVE: CVE-2021-32791
Published: 2021-07-26
Description: mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In mod_auth_openidc before version 2.4.9, the AES GCM encryption in mod_auth_openidc uses a static IV and AAD. It is important to fix because this creates a static nonce and since aes-gcm is a stream cipher, this can lead to known cryptographic issues, since the same key is being reused. From 2.4.9 onwards this has been patched to use dynamic values through usage of cjose AES encryption routines.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-323, CWE-330, CWE-330
References: https://github.com/zmartzone/mod_auth_openidc/commit/375407c16c61a70b56fdbe13b0d2c8f11398e92c; https://github.com/zmartzone/mod_auth_openidc/releases/tag/v2.4.9; https://github.com/zmartzone/mod_auth_openidc/security/advisories/GHSA-px3c-6x7j-3r9r
CVE: CVE-2021-32792
Published: 2021-07-26
Description: mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In mod_auth_openidc before version 2.4.9, there is an XSS vulnerability in when using `OIDCPreservePost On`.
CVSS Score: 3.1 (LOW)
CWE: CWE-79, CWE-79
References: https://github.com/zmartzone/mod_auth_openidc/commit/00c315cb0c8ab77c67be4a2ac08a71a83ac58751; https://github.com/zmartzone/mod_auth_openidc/commit/55ea0a085290cd2c8cdfdd960a230cbc38ba8b56; https://github.com/zmartzone/mod_auth_openidc/releases/tag/v2.4.9
CVE: CVE-2021-36563
Published: 2021-07-26
Description: The CheckMK management web console (versions 1.5.0 to 2.0.0) does not sanitise user input in various parameters of the WATO module. This allows an attacker to open a backdoor on the device with HTML content and interpreted by the browser (such as JavaScript or other client-side scripts), the XSS payload will be triggered when the user accesses some specific sections of the application. In the same sense a very dangerous potential way would be when an attacker who has the monitor role (not administrator) manages to get a stored XSS to steal the secretAutomation (for the use of the API in administrator mode) and thus be able to create another administrator user who has high privileges on the CheckMK monitoring web console. Another way is that persistent XSS allows an attacker to modify the displayed content or change the victim's information. Successful exploitation requires access to the web management interface, either with valid credentials or with a hijacked session.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://checkmk.com/de/werk/12762; https://checkmk.com/de/werk/13148; https://github.com/Edgarloyola/CVE-2021-36563
CVE: CVE-2021-37392
Published: 2021-07-26
Description: In RPCMS v1.8 and below, the "nickname" variable is not properly sanitized before being displayed on page. When the API functions are enabled, the attacker can use API to update user nickname with XSS payload and achieve stored XSS. Users who view the articles published by the injected user will trigger the XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/victomteng1997/bfa1e0e07dd22f7e0b13256eda79626f; https://github.com/ralap-z/RPCMS/; https://gist.github.com/victomteng1997/bfa1e0e07dd22f7e0b13256eda79626f
CVE: CVE-2021-37393
Published: 2021-07-26
Description: In RPCMS v1.8 and below, the "nickname" variable is not properly sanitized before being displayed on page. Attacker can use "update password" function to inject XSS payloads into nickname variable, and achieve stored XSS. Users who view the articles published by the injected user will trigger the XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/victomteng1997/bfa1e0e07dd22f7e0b13256eda79626f; https://github.com/ralap-z/RPCMS/; https://gist.github.com/victomteng1997/bfa1e0e07dd22f7e0b13256eda79626f
CVE: CVE-2021-37394
Published: 2021-07-26
Description: In RPCMS v1.8 and below, attackers can interact with API and change variable "role" to "admin" to achieve admin user registration.
CVSS Score: 8.8 (HIGH)
References: https://gist.github.com/victomteng1997/bfa1e0e07dd22f7e0b13256eda79626f; https://github.com/ralap-z/RPCMS/; https://gist.github.com/victomteng1997/bfa1e0e07dd22f7e0b13256eda79626f
CVE: CVE-2021-37473
Published: 2021-07-26
Description: In NavigateCMS version 2.9.4 and below, function in `product.php` is vulnerable to sql injection on parameter `products-order` through a post request, which results in arbitrary sql query execution in the backend database.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://gist.github.com/victomteng1997/ed429fed7de46651c89f05e7591fd4fe; https://github.com/NavigateCMS/Navigate-CMS; https://github.com/NavigateCMS/Navigate-CMS/issues/26
CVE: CVE-2021-37475
Published: 2021-07-26
Description: In NavigateCMS version 2.9.4 and below, function in `templates.php` is vulnerable to sql injection on parameter `template-properties-order`, which results in arbitrary sql query execution in the backend database.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://gist.github.com/victomteng1997/ed429fed7de46651c89f05e7591fd4fe; https://github.com/NavigateCMS/Navigate-CMS; https://github.com/NavigateCMS/Navigate-CMS/issues/26
CVE: CVE-2021-37476
Published: 2021-07-26
Description: In NavigateCMS version 2.9.4 and below, function in `product.php` is vulnerable to sql injection on parameter `id` through a post request, which results in arbitrary sql query execution in the backend database.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://gist.github.com/victomteng1997/ed429fed7de46651c89f05e7591fd4fe; https://github.com/NavigateCMS/Navigate-CMS; https://github.com/NavigateCMS/Navigate-CMS/issues/26
CVE: CVE-2021-37477
Published: 2021-07-26
Description: In NavigateCMS version 2.9.4 and below, function in `structure.php` is vulnerable to sql injection on parameter `children_order`, which results in arbitrary sql query execution in the backend database.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://gist.github.com/victomteng1997/ed429fed7de46651c89f05e7591fd4fe; https://github.com/NavigateCMS/Navigate-CMS; https://github.com/NavigateCMS/Navigate-CMS/issues/26
CVE: CVE-2021-37478
Published: 2021-07-26
Description: In NavigateCMS version 2.9.4 and below, function `block` is vulnerable to sql injection on parameter `block-order`, which results in arbitrary sql query execution in the backend database.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://gist.github.com/victomteng1997/ed429fed7de46651c89f05e7591fd4fe; https://github.com/NavigateCMS/Navigate-CMS; https://github.com/NavigateCMS/Navigate-CMS/issues/26
CVE: CVE-2021-32794
Published: 2021-07-26
Description: ArchiSteamFarm is a C# application with primary purpose of idling Steam cards from multiple accounts simultaneously. Due to a bug in ASF code `POST /Api/ASF` ASF API endpoint responsible for updating global ASF config incorrectly removed `IPCPassword` from the resulting config when the caller did not specify it explicitly. Due to the above, it was possible for the user to accidentally remove `IPCPassword` security measure from his IPC interface when updating global ASF config, which exists as part of global config update functionality in ASF-ui. Removal of `IPCPassword` possesses a security risk, as unauthorized users may in result access the IPC interface after such modification. The issue is patched in ASF V5.1.2.4 and future versions. We recommend to manually verify that `IPCPassword` is specified after update, and if not, set it accordingly. In default settings, ASF is configured to allow IPC access from `localhost` only and should not affect majority of users.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-287, CWE-306
References: https://github.com/JustArchiNET/ArchiSteamFarm/pull/2379; https://github.com/JustArchiNET/ArchiSteamFarm/security/advisories/GHSA-wxx4-66c2-vj2v; https://steamcommunity.com/groups/archiasf/discussions/6/[PII_REDACTED]428498659/
CVE: CVE-2020-17952
Published: 2021-07-26
Description: A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/twothink/twothink/issues/1; https://github.com/twothink/twothink/issues/1
CVE: CVE-2020-18169
Published: 2021-07-26
Description: A vulnerability in the Windows installer XML (WiX) toolset of TechSmith Snagit 19.1.1.2860 allows attackers to escalate privileges. NOTE: Exploit of the Snagit installer would require the end user to ignore other safety mechanisms provided by the Host OS. See reference document for more details
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://docs.google.com/document/d/1W33rsdISmexLOGS4VmLUIITRU_KqGULcij1Z6QyxsjU/edit?usp=sharing; https://github.com/GitHubAssessments/CVE_Assessment_04_2019/blob/master/Snagit_Report.pdf; https://docs.google.com/document/d/1W33rsdISmexLOGS4VmLUIITRU_KqGULcij1Z6QyxsjU/edit?usp=sharing
CVE: CVE-2020-18170
Published: 2021-07-26
Description: An issue in the SeChangeNotifyPrivilege component of Abloy Key Manager Version 7.14301.0.0 allows attackers to escalate privileges via a change in permissions.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/GitHubAssessments/CVE_Assessment_05_2019/blob/master/Key_Manager_Report.pdf; https://github.com/GitHubAssessments/CVE_Assessment_05_2019/blob/master/Key_Manager_Report.pdf
CVE: CVE-2020-18171
Published: 2021-07-26
Description: TechSmith Snagit 19.1.0.2653 uses Object Linking and Embedding (OLE) which can allow attackers to obfuscate and embed crafted files used to escalate privileges. NOTE: This implies that Snagit's use of OLE is a security vulnerability unto itself and it is not. See reference document for more details
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://docs.google.com/document/d/1W33rsdISmexLOGS4VmLUIITRU_KqGULcij1Z6QyxsjU/edit?usp=sharing; https://github.com/GitHubAssessments/CVE_Assessment_06_2019/blob/master/Snagit_Review.pdf; https://docs.google.com/document/d/1W33rsdISmexLOGS4VmLUIITRU_KqGULcij1Z6QyxsjU/edit?usp=sharing
CVE: CVE-2020-18172
Published: 2021-07-26
Description: A code injection vulnerability in the SeDebugPrivilege component of Trezor Bridge 2.0.27 allows attackers to escalate privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/GitHubAssessments/CVE_07_2019/blob/master/Report.pdf; https://github.com/GitHubAssessments/CVE_07_2019/blob/master/Report.pdf
CVE: CVE-2020-18173
Published: 2021-07-26
Description: A DLL injection vulnerability in 1password.dll of 1Password 7.3.712 allows attackers to execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://github.com/GitHubAssessments/CVE_Assessments_11_2019; https://github.com/GitHubAssessments/CVE_Assessments_11_2019
CVE: CVE-2020-18174
Published: 2021-07-26
Description: A process injection vulnerability in setup.exe of AutoHotkey 1.1.32.00 allows attackers to escalate privileges.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/GitHubAssessments/CVE_Assessments_02_2020; https://github.com/GitHubAssessments/CVE_Assessments_02_2020
CVE: CVE-2020-23234
Published: 2021-07-26
Description: Cross Site Scripting (XSS) vulnerabiity exists in LavaLite CMS 5.8.0 via the Menu Blocks feature, which can be bypassed by using HTML event handlers, such as "ontoggle,".
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/LavaLite/cms/issues/320; https://github.com/LavaLite/cms/issues/320
CVE: CVE-2020-23238
Published: 2021-07-26
Description: Cross Site Scripting (XSS) vulnerability in Evolution CMS 2.0.2 via the Document Manager feature.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/evolution-cms/evolution/issues/1473; https://github.com/evolution-cms/evolution/issues/1473
CVE: CVE-2020-23239
Published: 2021-07-26
Description: Cross Site Scripting (XSS) vulnerability in Textpattern CMS 4.8.1 via Custom fields in the Menu Preferences feature.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/textpattern/textpattern/issues/1495; https://github.com/textpattern/textpattern/issues/1495