deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-10130
Published: 2024-03-13
Description: The Team Circle Image Slider With Lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing or incorrect nonce validation on the circle_thumbnail_slider_with_lightbox_image_management_func() function. This makes it possible for unauthenticated attackers to edit image data which can be used to inject malicious JavaScript, along with deleting images, and uploading malicious files via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=1269993%40circle-image-slider-with-lightbox&new=1269993%40circle-image-slider-with-lightbox&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/b6a54470-fc66-43c5-a523-ddbefd47ee1f?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=1269993%40circle-image-slider-with-lightbox&new=1269993%40circle-image-slider-with-lightbox&sfp_email=&sfph_mail=
CVE: CVE-2024-2412
Published: 2024-03-13
Description: The disabling function of the user registration page for Heimavista Rpage and Epage is not properly implemented, allowing remote attackers to complete user registration on sites where user registration is supposed to be disabled.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-1220
References: https://www.twcert.org.tw/tw/cp-132-7696-0951f-1.html; https://www.twcert.org.tw/tw/cp-132-7696-0951f-1.html
CVE: CVE-2024-2413
Published: 2024-03-13
Description: Intumit SmartRobot uses a fixed encryption key for authentication. Remote attackers can use this key to encrypt a string composed of the user's name and timestamp to generate an authentication code. With this authentication code, they can obtain administrator privileges and subsequently execute arbitrary code on the remote server using built-in system functionality.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-321
References: https://www.twcert.org.tw/tw/cp-132-7697-ecf10-1.html; https://www.twcert.org.tw/tw/cp-132-7697-ecf10-1.html
CVE: CVE-2024-2400
Published: 2024-03-13
Description: Use after free in Performance Manager in Google Chrome prior to 122.0.6261.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://chromereleases.googleblog.com/2024/03/stable-channel-update-for-desktop_12.html; https://issues.chromium.org/issues/327696052; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T55OZ7JOMLNT5ICM4DTCZOJZD6TZICKO/
CVE: CVE-2024-27440
Published: 2024-03-13
Description: The Toyoko Inn official App for iOS versions prior to 1.13.0 and Toyoko Inn official App for Android versions prior 1.3.14 don't properly verify server certificates, which allows a man-in-the-middle attacker to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-295
References: https://apps.apple.com/jp/app/%E3%83%9B%E3%83%86%E3%83%AB%E6%9D%B1%E6%A8%AAinn-%E6%9D%B1%E6%A8%AA%E3%82%A4%E3%83%B3-%E5%85%AC%E5%BC%8F%E3%82%A2%E3%83%97%E3%83%AA/id[PII_REDACTED]; https://jvn.jp/en/jp/JVN52919306/; https://play.google.com/store/apps/details?id=com.toyoko_inn.toyokoandroid
CVE: CVE-2024-26529
Published: 2024-03-13
Description: An issue in mz-automation libiec61850 v.1.5.3 and before, allows a remote attacker to cause a denial of service (DoS) via the mmsServer_handleDeleteNamedVariableListRequest function of src/mms/iso_mms/server/mms_named_variable_list_service.c.
CVSS Score: 7.5 (HIGH)
References: https://github.com/mz-automation/libiec61850/issues/492; https://github.com/mz-automation/libiec61850/issues/495; https://github.com/mz-automation/libiec61850/issues/492
CVE: CVE-2024-28623
Published: 2024-03-13
Description: RiteCMS v3.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component main_menu/edit_section.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/GURJOTEXPERT/ritecms; https://github.com/GURJOTEXPERT/ritecms
CVE: CVE-2015-10123
Published: 2024-03-13
Description: An unautheticated remote attacker could send specifically crafted packets to a affected device. If an authenticated user then views that data in a specific page of the web-based management a buffer overflow will be triggered to gain full access of the device.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: https://cert.vde.com/en/advisories/VDE-2023-039/; https://cert.vde.com/en/advisories/VDE-2023-039/
CVE: CVE-2018-25090
Published: 2024-03-13
Description: An unauthenticated remote attacker can use an XSS attack due to improper neutralization of input during web page generation. User interaction is required. This leads to a limited impact of confidentiality and integrity but no impact of availability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://cert.vde.com/en/advisories/VDE-2023-039/; https://cert.vde.com/en/advisories/VDE-2023-039/
CVE: CVE-2023-28517
Published: 2024-03-13
Description: IBM Sterling Partner Engagement Manager 6.1.2, 6.2.0, and 6.2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.  IBM X-Force ID:  250421.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/250421; https://www.ibm.com/support/pages/node/7138575; https://exchange.xforce.ibmcloud.com/vulnerabilities/250421
CVE: CVE-2023-32335
Published: 2024-03-13
Description: IBM Maximo Application Suite 8.10, 8.11 and IBM Maximo Asset Management 7.6.1.3 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history.  IBM X-Force ID:  255075.
CVSS Score: 3.7 (LOW)
CWE: CWE-598
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/266875; https://www.ibm.com/support/pages/node/7138684; https://www.ibm.com/support/pages/node/7138686
CVE: CVE-2023-38723
Published: 2024-03-13
Description: IBM Maximo Application Suite 7.6.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.  IBM X-Force ID:  262192.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/262192; https://www.ibm.com/support/pages/node/7139010; https://exchange.xforce.ibmcloud.com/vulnerabilities/262192
CVE: CVE-2023-43043
Published: 2024-03-13
Description: IBM Maximo Application Suite - Maximo Mobile for EAM 8.10 and 8.11 could disclose sensitive information to a local user.  IBM X-Force ID:  266875.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-532
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/266875; https://www.ibm.com/support/pages/node/7138286; https://exchange.xforce.ibmcloud.com/vulnerabilities/266875
CVE: CVE-2024-1979
Published: 2024-03-13
Description: A vulnerability was found in Quarkus. In certain conditions related to the CI process, git credentials could be inadvertently published, which could put the git repository at risk.
CVSS Score: 3.5 (LOW)
CWE: CWE-200
References: https://access.redhat.com/errata/RHSA-2024:1662; https://access.redhat.com/security/cve/CVE-2024-1979; https://bugzilla.redhat.com/show_bug.cgi?id=2266690
CVE: CVE-2024-2123
Published: 2024-03-13
Description: The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the several parameters in all versions up to, and including, 2.8.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 7.2 (HIGH)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/ultimate-member/trunk/templates/members-grid.php#L44; https://plugins.trac.wordpress.org/browser/ultimate-member/trunk/templates/members-grid.php#L53; https://plugins.trac.wordpress.org/browser/ultimate-member/trunk/templates/members-grid.php#L65
CVE: CVE-2024-2414
Published: 2024-03-13
Description: The primary channel is unprotected on Movistar 4G router affecting E version S_WLD71-T1_v2.0.201820. This device has the 'adb' service open on port 5555 and provides access to a shell with root privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-419
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-movistar-4g-router; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-movistar-4g-router
CVE: CVE-2024-2415
Published: 2024-03-13
Description: Command injection vulnerability in Movistar 4G router affecting version ES_WLD71-T1_v2.0.201820. This vulnerability allows an authenticated user to execute commands inside the router by making a POST request to the URL '/cgi-bin/gui.cgi'.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-movistar-4g-router; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-movistar-4g-router
CVE: CVE-2024-2416
Published: 2024-03-13
Description: Cross-Site Request Forgery vulnerability in Movistar's 4G router affecting version ES_WLD71-T1_v2.0.201820. This vulnerability allows an attacker to force an end user to execute unwanted actions in a web application in which they are currently authenticated.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-movistar-4g-router; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-movistar-4g-router
CVE: CVE-2024-28429
Published: 2024-03-13
Description: DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/archives_do.php
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-352
References: https://github.com/itsqian797/cms/blob/main/2.md; https://github.com/itsqian797/cms/blob/main/2.md
CVE: CVE-2024-28430
Published: 2024-03-13
Description: DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/catalog_edit.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352
References: https://github.com/itsqian797/cms/blob/main/1.md; https://github.com/itsqian797/cms/blob/main/1.md
CVE: CVE-2024-28431
Published: 2024-03-13
Description: DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/catalog_del.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/itsqian797/cms/blob/main/3.md; https://github.com/itsqian797/cms/blob/main/3.md
CVE: CVE-2024-28432
Published: 2024-03-13
Description: DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/article_edit.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/itsqian797/cms/blob/main/4.md; https://github.com/itsqian797/cms/blob/main/4.md
CVE: CVE-2024-28665
Published: 2024-03-13
Description: DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/article_add.php
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/777erp/cms/blob/main/1.md; https://github.com/777erp/cms/blob/main/1.md
CVE: CVE-2024-28666
Published: 2024-03-13
Description: DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/media_add.php
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-352
References: https://github.com/777erp/cms/blob/main/2.md; https://github.com/777erp/cms/blob/main/2.md
CVE: CVE-2024-28667
Published: 2024-03-13
Description: DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/templets_one_edit.php
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352
References: https://github.com/777erp/cms/blob/main/6.md; https://github.com/777erp/cms/blob/main/6.md
CVE: CVE-2024-28668
Published: 2024-03-13
Description: DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/mychannel_add.php
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-918
References: https://github.com/777erp/cms/blob/main/5.md; https://github.com/777erp/cms/blob/main/5.md
CVE: CVE-2023-52608
Published: 2024-03-13
Description: In the Linux kernel, the following vulnerability has been resolved:

firmware: arm_scmi: Check mailbox/SMT channel for consistency

On reception of a completion interrupt the shared memory area is accessed
to retrieve the message header at first and then, if the message sequence
number identifies a transaction which is still pending, the related
payload is fetched too.

When an SCMI command times out the channel ownership remains with the
platform until eventually a late reply is received and, as a consequence,
any further transmission attempt remains pending, waiting for the channel
to be relinquished by the platform.

Once that late reply is received the channel ownership is given back
to the agent and any pending request is then allowed to proceed and
overwrite the SMT area of the just delivered late reply; then the wait
for the reply to the new request starts.

It has been observed that the spurious IRQ related to the late reply can
be wrongly associated with the freshly enqueued request: when that happens
the SCMI stack in-flight lookup procedure is fooled by the fact that the
message header now present in the SMT area is related to the new pending
transaction, even though the real reply has still to arrive.

This race-condition on the A2P channel can be detected by looking at the
channel status bits: a genuine reply from the platform will have set the
channel free bit before triggering the completion IRQ.

Add a consistency check to validate such condition in the A2P ISR.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362
References: https://git.kernel.org/stable/c/12dc4217f16551d6dee9cbefc23fdb5659558cda; https://git.kernel.org/stable/c/437a310b22244d4e0b78665c3042e5d1c0f45306; https://git.kernel.org/stable/c/614cc65032dcb0b64d23f5c5e338a8a04b12be5d
CVE: CVE-2024-1507
Published: 2024-03-13
Description: The Prime Slider – Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title_tags' attribute of the Rubix widget in all versions up to, and including, 3.13.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3048521%40bdthemes-prime-slider-lite&new=3048521%40bdthemes-prime-slider-lite&sfp_email=&sfph_mail=#file3; https://www.wordfence.com/threat-intel/vulnerabilities/id/09f2cb22-07e2-4fe5-8c2a-9d4420ee26ed?source=cve; https://plugins.trac.wordpress.org/changeset/3047591/bdthemes-prime-slider-lite
CVE: CVE-2024-1508
Published: 2024-03-13
Description: The Prime Slider – Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'settings['title_tags']' attribute of the Mercury widget in all versions up to, and including, 3.13.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset/3047591/bdthemes-prime-slider-lite; https://www.wordfence.com/threat-intel/vulnerabilities/id/7da00af0-edd1-4c39-ae33-a0dc21bd25a2?source=cve; https://plugins.trac.wordpress.org/changeset/3047591/bdthemes-prime-slider-lite
CVE: CVE-2024-28675
Published: 2024-03-13
Description: DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/diy_edit.php
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/777erp/cms/blob/main/12.md; https://github.com/777erp/cms/blob/main/12.md
CVE: CVE-2024-28684
Published: 2024-03-13
Description: DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/module_main.php
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/777erp/cms/blob/main/16.md; https://github.com/777erp/cms/blob/main/16.md
CVE: CVE-2024-2247
Published: 2024-03-13
Description: JFrog Artifactory versions below 7.77.7, 7.82.1, are vulnerable to DOM-based cross-site scripting due to improper handling of the import override mechanism.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79
References: https://jfrog.com/help/r/jfrog-release-information/jfrog-security-advisories; https://jfrog.com/help/r/jfrog-release-information/jfrog-security-advisories
CVE: CVE-2024-25153
Published: 2024-03-13
Description: A directory traversal within the ‘ftpservlet’ of the FileCatalyst Workflow Web Portal allows files to be uploaded outside of the intended ‘uploadtemp’ directory with a specially crafted POST request. In situations where a file is successfully uploaded to web portal’s DocumentRoot, specially crafted JSP files could be used to execute code, including web shells.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-472, CWE-668
References: https://filecatalyst.software/public/filecatalyst/Workflow/5.1.6.114/fcweb_releasenotes.html; https://www.fortra.com/security/advisory/fi-2024-002; https://filecatalyst.software/public/filecatalyst/Workflow/5.1.6.114/fcweb_releasenotes.html
CVE: CVE-2024-25154
Published: 2024-03-13
Description: Improper URL validation leads to path traversal in FileCatalyst Direct 3.8.8 and earlier allowing an encoded payload to cause the web server to return files located outside of the web root which may lead to data leakage.  
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://filecatalyst.software/public/filecatalyst/Direct/3.8.9.90/whatsnew_direct.html; https://www.fortra.com/security/advisory/fi-2024-003; https://filecatalyst.software/public/filecatalyst/Direct/3.8.9.90/whatsnew_direct.html
CVE: CVE-2024-25155
Published: 2024-03-13
Description: In FileCatalyst Direct 3.8.8 and earlier through 3.8.6, the web server does not properly sanitize illegal characters in a URL which is then displayed on a subsequent error page. A malicious actor could craft a URL which would then execute arbitrary code within an HTML script tag. 
CVSS Score: 7.2 (HIGH)
CWE: CWE-79, CWE-79
References: https://filecatalyst.software/public/filecatalyst/Direct/3.8.9.90/whatsnew_direct.html; https://www.fortra.com/security/advisory/fi-2024-003; https://filecatalyst.software/public/filecatalyst/Direct/3.8.9.90/whatsnew_direct.html
CVE: CVE-2024-27441
Published: 2024-03-13
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2023-5663
Published: 2024-03-13
Description: The News Announcement Scroll plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 9.0.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers with contributor-level and above permissions to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://plugins.trac.wordpress.org/browser/news-announcement-scroll/tags/9.0.0/news-announcement-scroll.php#L261; https://plugins.trac.wordpress.org/changeset/2987837/news-announcement-scroll#file2; https://www.wordfence.com/threat-intel/vulnerabilities/id/b29113d6-7a9a-4e10-a446-147ec146ac93?source=cve
CVE: CVE-2023-6785
Published: 2024-03-13
Description: The Download Manager plugin for WordPress is vulnerable to unauthorized file download of files added via the plugin in all versions up to, and including, 3.2.84. This makes it possible for unauthenticated attackers to download files added with the plugin (even when privately published).
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284, CWE-862
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3038209%40download-manager%2Ftrunk&old=3022104%40download-manager%2Ftrunk&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/7b3608ca-8ed6-46ff-8e57-d8b68f91b9f2?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3038209%40download-manager%2Ftrunk&old=3022104%40download-manager%2Ftrunk&sfp_email=&sfph_mail=
CVE: CVE-2023-6809
Published: 2024-03-13
Description: The Custom fields shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's cf shortcode in all versions up to, and including, 0.1 due to insufficient input sanitization and output escaping on user supplied custom post meta values. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wordpress.org/plugins/beepress/; https://www.wordfence.com/threat-intel/vulnerabilities/id/99d3d5aa-dd82-415a-bc40-9d2c677d9248?source=cve; https://wordpress.org/plugins/beepress/
CVE: CVE-2023-6825
Published: 2024-03-13
Description: The File Manager and File Manager Pro plugins for WordPress are vulnerable to Directory Traversal in versions up to, and including version 7.2.1 (free version) and 8.3.4 (Pro version) via the target parameter in the  mk_file_folder_manager_action_callback_shortcode function. This makes it possible for attackers to read the contents of arbitrary files on the server, which can contain sensitive information and to upload files into directories other than the intended directory for file uploads. The free version requires Administrator access for this vulnerability to be exploitable. The Pro version allows a file manager to be embedded via a shortcode and also allows admins to grant file handling privileges to other user levels, which could lead to this vulnerability being exploited by lower-level users.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-23, CWE-22
References: https://github.com/Studio-42/elFinder/blob/master/php/elFinderVolumeDriver.class.php#L6784; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3023403%40wp-file-manager%2Ftrunk&old=2984933%40wp-file-manager%2Ftrunk&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/93f377a1-2c33-4dd7-8fd6-190d9148e804?source=cve
CVE: CVE-2023-6880
Published: 2024-03-13
Description: The Visual Composer Website Builder, Landing Page Builder, Custom Theme Builder, Maintenance Mode & Coming Soon Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's custom fields in all versions up to, and including, 45.6.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://help.visualcomposer.com/release-notes/; https://www.wordfence.com/threat-intel/vulnerabilities/id/622b9b46-774d-4251-9a79-73e5b398de57?source=cve; https://help.visualcomposer.com/release-notes/