deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-22002
Published: 2024-06-18
Description: CORSAIR iCUE 5.9.105 with iCUE Murals on Windows allows unprivileged users to insert DLL files in the cuepkg-1.2.6 subdirectory of the installation directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-200
References: https://github.com/0xkickit/iCUE_DllHijack_LPE-CVE-2024-22002; https://twitter.com/0xkickit; https://github.com/0xkickit/iCUE_DllHijack_LPE-CVE-2024-22002
CVE: CVE-2024-37791
Published: 2024-06-18
Description: DuxCMS3 v3.1.3 was discovered to contain a SQL injection vulnerability via the keyword parameter at /article/Content/index?class_id.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-89
References: https://github.com/duxphp/DuxCMS3/; https://github.com/duxphp/DuxCMS3/issues/5; https://github.com/duxphp/DuxCMS3/
CVE: CVE-2024-36974
Published: 2024-06-18
Description: In the Linux kernel, the following vulnerability has been resolved:

net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP

If one TCA_TAPRIO_ATTR_PRIOMAP attribute has been provided,
taprio_parse_mqprio_opt() must validate it, or userspace
can inject arbitrary data to the kernel, the second time
taprio_change() is called.

First call (with valid attributes) sets dev->num_tc
to a non zero value.

Second call (with arbitrary mqprio attributes)
returns early from taprio_parse_mqprio_opt()
and bad things can happen.
CVSS Score: 7.8 (HIGH)
References: https://git.kernel.org/stable/c/0bf6cc96612bd396048f57d63f1ad454a846e39c; https://git.kernel.org/stable/c/6db4af09987cc5d5f0136bd46148b0e0460dae5b; https://git.kernel.org/stable/c/724050ae4b76e4fae05a923cb54101d792cf4404
CVE: CVE-2024-36975
Published: 2024-06-18
Description: In the Linux kernel, the following vulnerability has been resolved:

KEYS: trusted: Do not use WARN when encode fails

When asn1_encode_sequence() fails, WARN is not the correct solution.

1. asn1_encode_sequence() is not an internal function (located
   in lib/asn1_encode.c).
2. Location is known, which makes the stack trace useless.
3. Results a crash if panic_on_warn is set.

It is also noteworthy that the use of WARN is undocumented, and it
should be avoided unless there is a carefully considered rationale to
use it.

Replace WARN with pr_err, and print the return value instead, which is
only useful piece of information.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/050bf3c793a07f96bd1e2fd62e1447f731ed733b; https://git.kernel.org/stable/c/1c652e1e10676f942149052d9329b8bf2703529a; https://git.kernel.org/stable/c/681935009fec3fc22af97ee312d4a24ccf3cf087
CVE: CVE-2024-36976
Published: 2024-06-18
Description: In the Linux kernel, the following vulnerability has been resolved:

Revert "media: v4l2-ctrls: show all owned controls in log_status"

This reverts commit 9801b5b28c6929139d6fceeee8d739cc67bb2739.

This patch introduced a potential deadlock scenario:

[Wed May  8 10:02:06 2024]  Possible unsafe locking scenario:

[Wed May  8 10:02:06 2024]        CPU0                    CPU1
[Wed May  8 10:02:06 2024]        ----                    ----
[Wed May  8 10:02:06 2024]   lock(vivid_ctrls:1620:(hdl_vid_cap)->_lock);
[Wed May  8 10:02:06 2024]                                lock(vivid_ctrls:1608:(hdl_user_vid)->_lock);
[Wed May  8 10:02:06 2024]                                lock(vivid_ctrls:1620:(hdl_vid_cap)->_lock);
[Wed May  8 10:02:06 2024]   lock(vivid_ctrls:1608:(hdl_user_vid)->_lock);

For now just revert.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-667
References: https://git.kernel.org/stable/c/2e0ce54a9c5c7013b1257be044d99cbe7305e9f1; https://git.kernel.org/stable/c/eba63df7eb1f95df6bfb67722a35372b6994928d; https://git.kernel.org/stable/c/2e0ce54a9c5c7013b1257be044d99cbe7305e9f1
CVE: CVE-2024-36977
Published: 2024-06-18
Description: In the Linux kernel, the following vulnerability has been resolved:

usb: dwc3: Wait unconditionally after issuing EndXfer command

Currently all controller IP/revisions except DWC3_usb3 >= 310a
wait 1ms unconditionally for ENDXFER completion when IOC is not
set. This is because DWC_usb3 controller revisions >= 3.10a
supports GUCTL2[14: Rst_actbitlater] bit which allows polling
CMDACT bit to know whether ENDXFER command is completed.

Consider a case where an IN request was queued, and parallelly
soft_disconnect was called (due to ffs_epfile_release). This
eventually calls stop_active_transfer with IOC cleared, hence
send_gadget_ep_cmd() skips waiting for CMDACT cleared during
EndXfer. For DWC3 controllers with revisions >= 310a, we don't
forcefully wait for 1ms either, and we proceed by unmapping the
requests. If ENDXFER didn't complete by this time, it leads to
SMMU faults since the controller would still be accessing those
requests.

Fix this by ensuring ENDXFER completion by adding 1ms delay in
__dwc3_stop_active_transfer() unconditionally.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/1ba145f05b5c8f0b1a947a0633b5edff5dd1f1c5; https://git.kernel.org/stable/c/1d26ba0944d398f88aaf997bda3544646cf21945; https://git.kernel.org/stable/c/341eb08dbca9eae05308c442fbfab1813a44c97a
CVE: CVE-2024-37821
Published: 2024-06-18
Description: An arbitrary file upload vulnerability in the Upload Template function of Dolibarr ERP CRM up to v19.0.1 allows attackers to execute arbitrary code via uploading a crafted .SQL file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: http://dolibarr.com; https://github.com/alexbsec/CVEs/blob/master/2024/CVE-2024-37821.md; http://dolibarr.com
CVE: CVE-2024-38273
Published: 2024-06-18
Description: Insufficient capability checks meant it was possible for users to gain access to BigBlueButton join URLs they did not have permission to access.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-284
References: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6/; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E/; https://moodle.org/mod/forum/discuss.php?d=459498
CVE: CVE-2024-38274
Published: 2024-06-18
Description: Insufficient escaping of calendar event titles resulted in a stored XSS risk in the event deletion prompt.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6/; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E/; https://moodle.org/mod/forum/discuss.php?d=459499
CVE: CVE-2024-38275
Published: 2024-06-18
Description: The cURL wrapper in Moodle retained the original request headers when following redirects, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs.
CVSS Score: 7.5 (HIGH)
CWE: CWE-226, CWE-459
References: https://moodle.org/mod/forum/discuss.php?d=459500; https://moodle.org/mod/forum/discuss.php?d=459500
CVE: CVE-2024-38276
Published: 2024-06-18
Description: Incorrect CSRF token checks resulted in multiple CSRF risks.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6/; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E/; https://moodle.org/mod/forum/discuss.php?d=459501
CVE: CVE-2024-38277
Published: 2024-06-18
Description: A unique key should be generated for a user's QR login key and their auto-login key, so the same key cannot be used interchangeably between the two.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-324, CWE-326
References: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7AZYR7EXV6E5SQE2GYTNQE3NOENJCQ6/; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GHTIX55J4Q4LEOMLNEA4OZSWVEENQX7E/; https://moodle.org/mod/forum/discuss.php?d=459502
CVE: CVE-2024-6128
Published: 2024-06-18
Description: A vulnerability, which was classified as problematic, has been found in spa-cartcms 1.9.0.6. This issue affects some unknown processing of the file /checkout of the component Checkout Page. The manipulation of the argument quantity with the input -10 leads to enforcement of behavioral workflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-268895.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-841
References: https://msecureltd.blogspot.com/2024/04/friday-fun-pentest-series-5-spa.html; https://seclists.org/fulldisclosure/2024/Jun/6; https://vuldb.com/?ctiid.268895
CVE: CVE-2024-6129
Published: 2024-06-18
Description: A vulnerability, which was classified as problematic, was found in spa-cartcms 1.9.0.6. Affected is an unknown function of the file /login of the component Username Handler. The manipulation of the argument email leads to observable behavioral discrepancy. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-268896.
CVSS Score: 3.7 (LOW)
CWE: CWE-205, CWE-203
References: https://msecureltd.blogspot.com/2024/04/friday-fun-pentest-series-5-spa.html; https://seclists.org/fulldisclosure/2024/Jun/6; https://vuldb.com/?ctiid.268896
CVE: CVE-2024-5970
Published: 2024-06-18
Description: The MaxGalleria plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's maxgallery_thumb shortcode in all versions up to, and including, 6.4.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/maxgalleria/tags/6.4.4/maxgalleria-shortcode-thumb.php#L45; https://www.wordfence.com/threat-intel/vulnerabilities/id/a0bb1036-3e45-4ac9-b920-3b9629a3a724?source=cve; https://plugins.trac.wordpress.org/browser/maxgalleria/tags/6.4.4/maxgalleria-shortcode-thumb.php#L45
CVE: CVE-2024-6142
Published: 2024-06-19
Description: Actiontec WCB6200Q uh_tcp_recv_content Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Actiontec WCB6200Q routers. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the HTTP server. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length buffer. An attacker can leverage this vulnerability to execute code in the context of the HTTP server. Was ZDI-CAN-21410.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120, CWE-120
References: https://www.zerodayinitiative.com/advisories/ZDI-24-805/; https://www.zerodayinitiative.com/advisories/ZDI-24-805/
CVE: CVE-2024-6143
Published: 2024-06-19
Description: Actiontec WCB6200Q uh_tcp_recv_header Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Actiontec WCB6200Q routers. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the HTTP server. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length buffer. An attacker can leverage this vulnerability to execute code in the context of the HTTP server. Was ZDI-CAN-21414.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120, CWE-120
References: https://www.zerodayinitiative.com/advisories/ZDI-24-806/; https://www.zerodayinitiative.com/advisories/ZDI-24-806/
CVE: CVE-2024-6144
Published: 2024-06-19
Description: Actiontec WCB6200Q Multipart Boundary Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Actiontec WCB6200Q routers. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the HTTP server. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the HTTP server. Was ZDI-CAN-21416.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://www.zerodayinitiative.com/advisories/ZDI-24-807/; https://www.zerodayinitiative.com/advisories/ZDI-24-807/
CVE: CVE-2024-6145
Published: 2024-06-19
Description: Actiontec WCB6200Q Cookie Format String Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Actiontec WCB6200Q routers. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the HTTP server. A crafted Cookie header in an HTTP request can trigger the use of a format specifier from a user-supplied string. An attacker can leverage this vulnerability to execute code in the context of the HTTP server. Was ZDI-CAN-21417.
CVSS Score: 8.8 (HIGH)
CWE: CWE-134, CWE-134
References: https://www.zerodayinitiative.com/advisories/ZDI-24-808/; https://www.zerodayinitiative.com/advisories/ZDI-24-808/
CVE: CVE-2024-6146
Published: 2024-06-19
Description: Actiontec WCB6200Q uh_get_postdata_withupload Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Actiontec WCB6200Q routers. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the HTTP server. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the HTTP server. Was ZDI-CAN-21418.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://www.zerodayinitiative.com/advisories/ZDI-24-809/; https://www.zerodayinitiative.com/advisories/ZDI-24-809/
CVE: CVE-2024-6125
Published: 2024-06-19
Description: The Login with phone number plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 1.7.34. This is due to the plugin generating too weak a reset code, and the code used to reset the password has no attempt or time limit. This makes it possible for unauthenticated attackers to reset the password of arbitrary users by guessing a 6-digit numeric reset code.
CVSS Score: 8.1 (HIGH)
CWE: CWE-640
References: https://plugins.trac.wordpress.org/changeset/3104085/login-with-phone-number#file5; https://www.wordfence.com/threat-intel/vulnerabilities/id/301a67a5-226c-413a-9198-66747d1b1fd3?source=cve; https://plugins.trac.wordpress.org/changeset/3104085/login-with-phone-number#file5
CVE: CVE-2024-2381
Published: 2024-06-19
Description: The AliExpress Dropshipping with AliNext Lite plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ajax_save_image function in all versions up to, and including, 3.3.5. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434, CWE-434
References: https://plugins.trac.wordpress.org/browser/ali2woo-lite/trunk//includes/classes/controller/WooCommerceProductEditController.php#L108; https://plugins.trac.wordpress.org/changeset/3107543/ali2woo-lite/trunk/includes/classes/controller/WooCommerceProductEditController.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/c3248327-6e10-420e-83cf-a23296eb2e6f?source=cve
CVE: CVE-2024-3984
Published: 2024-06-19
Description: The EmbedSocial – Social Media Feeds, Reviews and Galleries plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'embedsocial_reviews' shortcode in all versions up to, and including, 1.1.29 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3105404%40embedalbum-pro&new=3105404%40embedalbum-pro&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/6593b0de-db7a-4b7e-bd74-cc2b1e36ac60?source=cve; https://plugins.trac.wordpress.org/browser/embedalbum-pro/trunk/embedalbum_pro.php#L194
CVE: CVE-2024-4450
Published: 2024-06-19
Description: The AliExpress Dropshipping with AliNext Lite plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several functions in the ImportAjaxController.php file in all versions up to, and including, 3.3.6. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform several actions like importing and modifying products. CVE-2024-37210 is likely a duplicate of this issue.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://plugins.trac.wordpress.org/browser/ali2woo-lite/trunk/includes/classes/controller/ImportAjaxController.php; https://plugins.trac.wordpress.org/changeset/3111831#file10; https://www.wordfence.com/threat-intel/vulnerabilities/id/01836c2c-0976-493e-8b13-1c7c702d1d2c?source=cve
CVE: CVE-2024-4541
Published: 2024-06-19
Description: The Custom Product List Table plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.0. This is due to missing or incorrect nonce validation when modifying products. This makes it possible for unauthenticated attackers to add, delete, bulk edit, approve or cancel products via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wordpress.org/plugins/custom-product-list-table/#description; https://www.wordfence.com/threat-intel/vulnerabilities/id/4c046e0c-32d2-47d1-9890-d05d69217161?source=cve; https://wordpress.org/plugins/custom-product-list-table/#description
CVE: CVE-2024-4623
Published: 2024-06-19
Description: The Blogmentor – Blog Layouts for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘pagination_style’ parameter in all versions up to, and including, 1.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. CVE-2024-37229 is likely a duplicate of this issue.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/blogmentor/trunk/includes/elements/blogmentor-blog-posts.php#L977; https://www.wordfence.com/threat-intel/vulnerabilities/id/b0925ceb-581c-4748-abfb-9962e53b7db9?source=cve; https://plugins.trac.wordpress.org/browser/blogmentor/trunk/includes/elements/blogmentor-blog-posts.php#L977
CVE: CVE-2024-4663
Published: 2024-06-19
Description: The OSM Map Widget for Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/osm-map-elementor/trunk/osm-map.php#L1478; https://plugins.trac.wordpress.org/changeset/3107495/osm-map-elementor/trunk/osm-map.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/402d0399-bc48-4740-86a4-8bf3424fb035?source=cve
CVE: CVE-2024-4787
Published: 2024-06-19
Description: The Cost Calculator Builder PRO for WordPress is vulnerable to arbitrary email sending vulnerability in versions up to, and including, 3.1.75. This is due to insufficient limitations on the email recipient and the content in the 'send_pdf' and the 'send_pdf_front' functions which are reachable via AJAX. This makes it possible for unauthenticated attackers to send emails with any content to any recipient.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20
References: https://docs.stylemixthemes.com/cost-calculator-builder/changelog-1/changelog-pro-version; https://www.wordfence.com/threat-intel/vulnerabilities/id/035ada56-541d-47b3-8348-3401d94bb509?source=cve; https://docs.stylemixthemes.com/cost-calculator-builder/changelog-1/changelog-pro-version
CVE: CVE-2024-4873
Published: 2024-06-19
Description: The Replace Image plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.1.10 via the image replacement functionality due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Author-level access and above, to replace images uploaded by higher level users such as admins.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3117484%40replace-image&new=3117484%40replace-image&sfp_email=&sfph_mail=; https://wordpress.org/plugins/replace-image/; https://www.wordfence.com/threat-intel/vulnerabilities/id/5a5d3a62-f7e5-4776-bed9-7ff3f81da452?source=cve
CVE: CVE-2024-5021
Published: 2024-06-19
Description: The WordPress Picture / Portfolio / Media Gallery plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.0.1 via the 'file_get_contents' function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-918
References: https://plugins.trac.wordpress.org/browser/nimble-portfolio/trunk/includes/prettyphoto/download-image.php#L17; https://www.wordfence.com/threat-intel/vulnerabilities/id/224a2d6d-7fdc-43a8-a8c9-26213b604433?source=cve; https://plugins.trac.wordpress.org/browser/nimble-portfolio/trunk/includes/prettyphoto/download-image.php#L17
CVE: CVE-2024-5649
Published: 2024-06-19
Description: The Universal Slider plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.6.5 via deserialization of untrusted input 'fsl_get_gallery_value' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-502, CWE-502
References: https://plugins.trac.wordpress.org/browser/fusion-slider/trunk/fusion-slider.php#L692; https://www.wordfence.com/threat-intel/vulnerabilities/id/8f8bd107-5459-4093-8593-deedec6ffcd6?source=cve; https://plugins.trac.wordpress.org/browser/fusion-slider/trunk/fusion-slider.php#L692