deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-26615
Published: 2025-02-18
Description: WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A Path Traversal vulnerability was discovered in the WeGIA application, `examples.php` endpoint. This vulnerability could allow an attacker to gain unauthorized access to sensitive information stored in `config.php`. `config.php` contains information that could allow direct access to the database. This issue has been addressed in version 3.2.14 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-22, CWE-284, CWE-22
References: https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-p5wx-pv8j-f96h
CVE: CVE-2025-26616
Published: 2025-02-18
Description: WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A Path Traversal vulnerability was discovered in the WeGIA application, `exportar_dump.php` endpoint. This vulnerability could allow an attacker to gain unauthorized access to sensitive information stored in `config.php`. `config.php` contains information that could allow direct access to the database. This issue has been addressed in version 3.2.14 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-284, CWE-22
References: https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-xxqg-p22h-3f32
CVE: CVE-2025-26617
Published: 2025-02-18
Description: WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, `historico_paciente.php` endpoint. This vulnerability could allow an attacker to execute arbitrary SQL queries, allowing unauthorized access to sensitive information. This issue has been addressed in version 3.2.14 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-284, CWE-89
References: https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-f654-c5r5-jx77
CVE: CVE-2024-56171
Published: 2025-02-18
Description: libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://gitlab.gnome.org/GNOME/libxml2/-/issues/828; http://seclists.org/fulldisclosure/2025/Apr/10; http://seclists.org/fulldisclosure/2025/Apr/11
CVE: CVE-2025-22921
Published: 2025-02-18
Description: FFmpeg git-master,N-113007-g8d24a28d06 was discovered to contain a segmentation violation via the component /libavcodec/jpeg2000dec.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://trac.ffmpeg.org/ticket/11393; https://lists.debian.org/debian-lts-announce/2025/02/msg00037.html
CVE: CVE-2025-25467
Published: 2025-02-18
Description: Insufficient tracking and releasing of allocated used memory in libx264 git master allows attackers to execute arbitrary code via creating a crafted AAC file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://code.videolan.org/videolan/x264/-/issues/75
CVE: CVE-2025-25468
Published: 2025-02-18
Description: FFmpeg git-master before commit d5873b was discovered to contain a memory leak in the component libavutil/mem.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/d5873be583ada9e1fb887e2fe8dcfd4b12e0efcd; https://trac.ffmpeg.org/ticket/11415
CVE: CVE-2025-25469
Published: 2025-02-18
Description: FFmpeg git-master before commit d5873b was discovered to contain a memory leak in the component libavutil/iamf.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-401
References: https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/d5873be583ada9e1fb887e2fe8dcfd4b12e0efcd; https://trac.ffmpeg.org/ticket/11416
CVE: CVE-2025-25891
Published: 2025-02-18
Description: A buffer overflow vulnerability was discovered in D-Link DSL-3782 v1.01, triggered by the destination, netmask and gateway parameters. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted packet.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-121
References: https://github.com/[PII_REDACTED]/mycve/blob/main/BOF_in_D-Link_DSL-3782_4.pdf; https://github.com/[PII_REDACTED]/mycve/blob/main/BOF_in_D-Link_DSL-3782_4.pdf
CVE: CVE-2025-25892
Published: 2025-02-18
Description: A buffer overflow vulnerability was discovered in D-Link DSL-3782 v1.01 via the sstartip, sendip, dstartip, and dendip parameters. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted packet.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-121
References: https://github.com/[PII_REDACTED]/mycve/blob/main/BOF_in_D-Link%20DSL-3782_3.pdf; https://github.com/[PII_REDACTED]/mycve/blob/main/BOF_in_D-Link%20DSL-3782_3.pdf
CVE: CVE-2025-25893
Published: 2025-02-18
Description: An OS command injection vulnerability was discovered in D-Link DSL-3782 v1.01 via the inIP, insPort, inePort, exsPort, exePort, and protocol parameters. This vulnerability allows attackers to execute arbitrary operating system (OS) commands via a crafted packet.
CVSS Score: 8.0 (HIGH)
CWE: CWE-78
References: https://github.com/[PII_REDACTED]/mycve/blob/main/CJ_in_D-Link_DSL-3782_2_en.pdf; https://github.com/[PII_REDACTED]/mycve/blob/main/CJ_in_D-Link_DSL-3782_2_en.pdf
CVE: CVE-2025-25894
Published: 2025-02-18
Description: An OS command injection vulnerability was discovered in D-Link DSL-3782 v1.01 via the samba_wg and samba_nbn parameters. This vulnerability allows attackers to execute arbitrary operating system (OS) commands via a crafted packet.
CVSS Score: 8.0 (HIGH)
CWE: CWE-78
References: https://github.com/[PII_REDACTED]/mycve/blob/main/CJ_in_D-Link_DSL-3782_1_en.pdf; https://github.com/[PII_REDACTED]/mycve/blob/main/CJ_in_D-Link_DSL-3782_1_en.pdf
CVE: CVE-2025-25895
Published: 2025-02-18
Description: An OS command injection vulnerability was discovered in D-Link DSL-3782 v1.01 via the public_type parameter. This vulnerability allows attackers to execute arbitrary operating system (OS) commands via a crafted packet.
CVSS Score: 8.0 (HIGH)
CWE: CWE-78
References: https://github.com/[PII_REDACTED]/mycve/blob/main/CJ_in_D-Link_DSL-3782_3_en.pdf; https://github.com/[PII_REDACTED]/mycve/blob/main/CJ_in_D-Link_DSL-3782_3_en.pdf
CVE: CVE-2025-25896
Published: 2025-02-18
Description: A buffer overflow vulnerability was discovered in D-Link DSL-3782 v1.01 via the destination, netmask, and gateway parameters. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted packet.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-121
References: https://github.com/[PII_REDACTED]/mycve/blob/main/BOF_in_D-Link_DSL-3782_5.pdf; https://github.com/[PII_REDACTED]/mycve/blob/main/BOF_in_D-Link_DSL-3782_5.pdf
CVE: CVE-2024-13743
Published: 2025-02-18
Description: The Wonder Video Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wonderplugin_video shortcode in all versions up to, and including, 2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/wonderplugin-video-embed/trunk/app/class-wonderplugin-videoembed-widgetview.php#L232; https://www.wordfence.com/threat-intel/vulnerabilities/id/97bd4897-c0c2-4819-aa25-942e256de9a3?source=cve
CVE: CVE-2024-57254
Published: 2025-02-18
Description: An integer overflow in sqfs_inode_size in Das U-Boot before 2025.01-rc1 occurs in the symlink size calculation via a crafted squashfs filesystem.
CVSS Score: 7.1 (HIGH)
CWE: CWE-190
References: https://source.denx.de/u-boot/u-boot/-/commit/c8e929e[PII_REDACTED]f9e905049ef2bf3fe6b140d; https://www.openwall.com/lists/oss-security/2025/02/17/2; https://lists.debian.org/debian-lts-announce/2025/05/msg00001.html
CVE: CVE-2024-57255
Published: 2025-02-18
Description: An integer overflow in sqfs_resolve_symlink in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite.
CVSS Score: 7.1 (HIGH)
CWE: CWE-190
References: https://source.denx.de/u-boot/u-boot/-/commit/233945eba63e24061dffeeaeb7cd6fe985278356; https://www.openwall.com/lists/oss-security/2025/02/17/2; https://lists.debian.org/debian-lts-announce/2025/05/msg00001.html
CVE: CVE-2024-57256
Published: 2025-02-18
Description: An integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite.
CVSS Score: 7.1 (HIGH)
CWE: CWE-190
References: https://source.denx.de/u-boot/u-boot/-/commit/35f75d2a46e5859138c83a75cd2f4141c5479ab9; https://www.openwall.com/lists/oss-security/2025/02/17/2; https://lists.debian.org/debian-lts-announce/2025/05/msg00001.html
CVE: CVE-2024-57257
Published: 2025-02-18
Description: A stack consumption issue in sqfs_size in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with deep symlink nesting.
CVSS Score: 2.0 (LOW)
CWE: CWE-674
References: https://source.denx.de/u-boot/u-boot/-/commit/4f5cc096bfd0a591f8a11e86999e3d90a9484c34; https://www.openwall.com/lists/oss-security/2025/02/17/2; https://lists.debian.org/debian-lts-announce/2025/05/msg00001.html
CVE: CVE-2024-57258
Published: 2025-02-18
Description: Integer overflows in memory allocation in Das U-Boot before 2025.01-rc1 occur for a crafted squashfs filesystem via sbrk, via request2size, or because ptrdiff_t is mishandled on x86_64.
CVSS Score: 7.1 (HIGH)
CWE: CWE-190
References: https://source.denx.de/u-boot/u-boot/-/commit/0a10b49206a29b4aa2f80233a3e53ca0466bb0b3; https://source.denx.de/u-boot/u-boot/-/commit/8642b2178d2c4002c99a0b69a845a48f2ae2706f; https://source.denx.de/u-boot/u-boot/-/commit/c17b2a05dd50a3ba437e6373093a0d6a359cdee0
CVE: CVE-2024-57259
Published: 2025-02-18
Description: sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for squashfs directory listing because the path separator is not considered in a size calculation.
CVSS Score: 7.1 (HIGH)
CWE: CWE-193
References: https://source.denx.de/u-boot/u-boot/-/commit/048d795bb5b3d9c5701b4855f5e74bcf6849bf5e; https://www.openwall.com/lists/oss-security/2025/02/17/2; https://lists.debian.org/debian-lts-announce/2025/05/msg00001.html
CVE: CVE-2025-22919
Published: 2025-02-18
Description: A reachable assertion in FFmpeg git-master commit N-113007-g8d24a28d06 allows attackers to cause a Denial of Service (DoS) via opening a crafted AAC file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-617
References: https://trac.ffmpeg.org/ticket/11385; https://lists.debian.org/debian-lts-announce/2025/02/msg00037.html
CVE: CVE-2025-22920
Published: 2025-02-18
Description: A heap buffer overflow vulnerability in FFmpeg before commit 4bf784c allows attackers to trigger a memory corruption via supplying a crafted media file in avformat when processing tile grid group streams. This can lead to a Denial of Service (DoS).
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-122
References: https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/4bf784c0e5615c3f934e677d5de093a8be7da7ae; https://trac.ffmpeg.org/ticket/11389
CVE: CVE-2025-24928
Published: 2025-02-18
Description: libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121
References: https://gitlab.gnome.org/GNOME/libxml2/-/issues/847; https://issues.oss-fuzz.com/issues/392687022; https://lists.debian.org/debian-lts-announce/2025/02/msg00028.html
CVE: CVE-2025-25471
Published: 2025-02-18
Description: FFmpeg git master before commit fd1772 was discovered to contain a NULL pointer dereference via the component libavformat/mov.c.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-476
References: https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/fd1772b7475d0d5673a5dd314ee78443d0be4cf1; https://trac.ffmpeg.org/ticket/11417
CVE: CVE-2025-25472
Published: 2025-02-18
Description: A buffer overflow in DCMTK git master v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via a crafted DCM file.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-120
References: https://git.dcmtk.org/?p=dcmtk.git;a=commit;h=410ffe2019b9db6a8f4036daac742a6f5e4d36c2; https://lists.debian.org/debian-lts-announce/2025/06/msg00025.html
CVE: CVE-2025-25473
Published: 2025-02-18
Description: FFmpeg git master before commit c08d30 was discovered to contain a memory leak in the avformat_free_context function in libavutil/mem.c.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-476
References: https://git.ffmpeg.org/gitweb/ffmpeg.git/blobdiff/4f3c9f2f03378a08692a26532bc[PII_REDACTED]f8c..c08d300481b8ebb846cd43a473988fdbc6793d1b:/libavformat/avformat.c; https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/c08d300481b8ebb846cd43a473988fdbc6793d1b; https://trac.ffmpeg.org/ticket/11419
CVE: CVE-2025-25474
Published: 2025-02-18
Description: DCMTK v3.6.9+ DEV was discovered to contain a buffer overflow via the component /dcmimgle/diinpxt.h.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-120
References: https://git.dcmtk.org/?p=dcmtk.git;a=commit;h=1d205bcd307164c99e0d4bbf[PII_REDACTED]58d847; https://lists.debian.org/debian-lts-announce/2025/06/msg00025.html
CVE: CVE-2025-25475
Published: 2025-02-18
Description: A NULL pointer dereference in the component /libsrc/dcrleccd.cc of DCMTK v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via a crafted DICOM file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://git.dcmtk.org/?p=dcmtk.git;a=commit;h=bffa3e9116abb7038b432443f16b1bd390e80245; https://github.com/DCMTK/dcmtk/commit/bffa3e9116abb7038b432443f16b1bd390e80245; https://lists.debian.org/debian-lts-announce/2025/06/msg00025.html
CVE: CVE-2025-26624
Published: 2025-02-18
Description: Rufus is a utility that helps format and create bootable USB flash drives. A DLL hijacking vulnerability in Rufus 4.6.2208 and earlier versions allows an attacker loading and executing a malicious DLL with escalated privileges (since the executable has been granted higher privileges during the time of launch) due to the ability to inject a malicious `cfgmgr32.dll` in the same directory as the executable and have it side load automatically. This is fixed in commit `74dfa49`, which will be part of version 4.7. Users are advised to upgrade as soon as version 4.7 becomes available. There are no known workarounds for this vulnerability.
CWE: CWE-426, CWE-427
References: https://github.com/pbatard/rufus/commit/74dfa49707fd626b58d776d[PII_REDACTED]a29e23e; https://github.com/pbatard/rufus/security/advisories/GHSA-p8p5-r296-g2jv
CVE: CVE-2025-27113
Published: 2025-02-18
Description: libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.
CVSS Score: 2.9 (LOW)
CWE: CWE-476, CWE-476
References: https://gitlab.gnome.org/GNOME/libxml2/-/issues/861; http://seclists.org/fulldisclosure/2025/Apr/10; http://seclists.org/fulldisclosure/2025/Apr/11
CVE: CVE-2024-13508
Published: 2025-02-19
Description: The Booking Package plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the locale parameter in all versions up to, and including, 1.6.72 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/booking-package/tags/1.6.71/index.php#L1714; https://www.wordfence.com/threat-intel/vulnerabilities/id/212e8f84-22a9-4b9e-b440-280f8569846f?source=cve
CVE: CVE-2025-1447
Published: 2025-02-19
Description: A vulnerability was found in kasuganosoras Pigeon 1.0.177. It has been declared as critical. This vulnerability affects unknown code of the file /pigeon/imgproxy/index.php. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated remotely. Upgrading to version 1.0.181 is able to address this issue. The patch is identified as 84cea5fe73141689da2e7ec8676d47435bd6423e. It is recommended to upgrade the affected component.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-918
References: https://github.com/kasuganosoras/Pigeon/commit/84cea5fe73141689da2e7ec8676d47435bd6423e; https://github.com/kasuganosoras/Pigeon/releases/tag/1.0.181; https://github.com/sheratan4/cve/issues/2
CVE: CVE-2024-57261
Published: 2025-02-19
Description: In barebox before 2025.01.0, request2size in common/dlmalloc.c has an integer overflow, a related issue to CVE-2024-57258.
CVSS Score: 7.1 (HIGH)
CWE: CWE-190
References: https://git.pengutronix.de/cgit/barebox/commit/?id=7cf25e0733f08f68d1bf0ca0c3cf6e2dfe51bd3c; https://lists.infradead.org/pipermail/barebox/2024-November/048631.html
CVE: CVE-2024-57262
Published: 2025-02-19
Description: In barebox before 2025.01.0, ext4fs_read_symlink has an integer overflow for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite, a related issue to CVE-2024-57256.
CVSS Score: 7.1 (HIGH)
CWE: CWE-190
References: https://git.pengutronix.de/cgit/barebox/commit/?id=a2b76550f7d8; https://git.pengutronix.de/cgit/barebox/commit/?id=a2b76550f7d87ba6f88a9ea50e71f107b514ff4e
CVE: CVE-2025-1448
Published: 2025-02-19
Description: A vulnerability was found in Synway SMG Gateway Management Software up to 20250204. It has been rated as critical. This issue affects some unknown processing of the file 9-12ping.php. The manipulation of the argument retry leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-77
References: https://github.com/stevenchen0x01/CVE/issues/1; https://vuldb.com/?ctiid.296135; https://vuldb.com/?id.296135
CVE: CVE-2024-11582
Published: 2025-02-19
Description: The Subscribe2 – Form, Email Subscribers & Newsletters plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ip parameter in all versions up to, and including, 10.43 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 7.2 (HIGH)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/subscribe2/tags/10.43/classes/class-s2-list-table.php#L72; https://www.wordfence.com/threat-intel/vulnerabilities/id/36777e39-be45-41f2-beca-2971e15b77cd?source=cve
CVE: CVE-2024-13443
Published: 2025-02-19
Description: The Easypromos Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Easypromos shortcode in all versions up to, and including, 1.3.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/easypromos/tags/1.3.8/includes/functions.php#L93; https://www.wordfence.com/threat-intel/vulnerabilities/id/81998d01-8ae7-44ac-a22e-7bdbebee6c49?source=cve
CVE: CVE-2025-22622
Published: 2025-02-19
Description: Age Verification for your checkout page. Verify your customer's identity 1.20.0 was found to be vulnerable. The web application dynamically generates web content without validating the source of the potentially untrusted data in myapp/class-wc-integration-agechecker-integration.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: https://fluidattacks.com/advisories/skims-5/; https://wordpress.org/plugins/agecheckernet/#developers
CVE: CVE-2025-1441
Published: 2025-02-19
Description: The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.1007. This is due to missing or incorrect nonce validation on the 'wpr_filter_woo_products' function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/browser/royal-elementor-addons/tags/1.7.1007/classes/modules/wpr-filter-woo-products.php#L1895; https://plugins.trac.wordpress.org/browser/royal-elementor-addons/tags/1.7.1008/classes/modules/wpr-filter-woo-products.php#L1904; https://www.wordfence.com/threat-intel/vulnerabilities/id/6bc6a436-6df3-4eaf-a16b-d8b3c3ca7d87?source=cve
CVE: CVE-2024-12173
Published: 2025-02-19
Description: The Master Slider  WordPress plugin before 3.10.5 does not sanitise and escape some of its settings, which could allow high privilege users such as Editor and above to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://wpscan.com/vulnerability/0f35be0e-0f63-4e33-aa4d-c47b1f1e0595/
CVE: CVE-2024-13799
Published: 2025-02-19
Description: The User Private Files – File Upload & Download Manager with Secure File Sharing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘new-fldr-name’ parameter in all versions up to, and including, 2.1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/user-private-files/trunk/js/folder.js; https://plugins.trac.wordpress.org/changeset/3240877/; https://www.wordfence.com/threat-intel/vulnerabilities/id/419cf912-3187-43d7-90ab-1a20a46d86e4?source=cve
CVE: CVE-2025-1065
Published: 2025-02-19
Description: The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Import Data From File feature in all versions up to, and including, 3.11.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/3240066/visualizer; https://www.wordfence.com/threat-intel/vulnerabilities/id/17c1de7b-5178-4fbe-a515-169de4323ae7?source=cve
CVE: CVE-2025-22888
Published: 2025-02-19
Description: Movable Type contains a stored cross-site scripting vulnerability in the custom block edit page of MT Block Editor. If exploited, an arbitrary script may be executed on a logged-in user's web browser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/jp/JVN48742353/; https://www.movabletype.org/news/2025/02/mt-842-released.html