deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-34570
Published: 2021-09-27
Description: Multiple Phoenix Contact PLCnext control devices in versions prior to 2021.0.5 LTS are prone to a DoS attack through special crafted JSON requests.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://cert.vde.com/en/advisories/VDE-2021-029/; https://cert.vde.com/en/advisories/VDE-2021-029/
CVE: CVE-2021-20317
Published: 2021-09-27
Description: A flaw was found in the Linux kernel. A corrupted timer tree caused the task wakeup to be missing in the timerqueue_add function in lib/timerqueue.c. This flaw allows a local attacker with special user privileges to cause a denial of service, slowing and eventually stopping the system while running OSP.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-665, CWE-665
References: https://bugzilla.redhat.com/show_bug.cgi?id=2005258; https://cert-portal.siemens.com/productcert/pdf/ssa-222547.pdf; https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=511885d7061eda3eb1faf3f57dcc936ff75863f1
CVE: CVE-2021-23054
Published: 2021-09-27
Description: On version 16.x before 16.1.0, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and 11.6.x, a reflected cross-site scripting (XSS) vulnerability exists in the resource information page for authenticated users when a full webtop is configured on the BIG-IP APM system. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://support.f5.com/csp/article/K41997459; https://support.f5.com/csp/article/K41997459
CVE: CVE-2021-0421
Published: 2021-09-27
Description: In memory management driver, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS05381235.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120
References: https://corp.mediatek.com/product-security-bulletin/September-2021; https://corp.mediatek.com/product-security-bulletin/September-2021
CVE: CVE-2021-0422
Published: 2021-09-27
Description: In memory management driver, there is a possible system crash due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS05381071.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-770
References: https://corp.mediatek.com/product-security-bulletin/September-2021; https://corp.mediatek.com/product-security-bulletin/September-2021
CVE: CVE-2021-0423
Published: 2021-09-27
Description: In memory management driver, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS05385714.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-665
References: https://corp.mediatek.com/product-security-bulletin/September-2021; https://corp.mediatek.com/product-security-bulletin/September-2021
CVE: CVE-2021-0424
Published: 2021-09-27
Description: In memory management driver, there is a possible system crash due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS05393787.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-770
References: https://corp.mediatek.com/product-security-bulletin/September-2021; https://corp.mediatek.com/product-security-bulletin/September-2021
CVE: CVE-2021-0425
Published: 2021-09-27
Description: In memory management driver, there is a possible side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS05400059.
CVSS Score: 5.5 (MEDIUM)
References: https://corp.mediatek.com/product-security-bulletin/September-2021; https://corp.mediatek.com/product-security-bulletin/September-2021
CVE: CVE-2021-0610
Published: 2021-09-27
Description: In memory management driver, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS05411456.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://corp.mediatek.com/product-security-bulletin/September-2021; https://corp.mediatek.com/product-security-bulletin/September-2021
CVE: CVE-2021-0611
Published: 2021-09-27
Description: In m4u, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS05425810.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://corp.mediatek.com/product-security-bulletin/September-2021; https://corp.mediatek.com/product-security-bulletin/September-2021
CVE: CVE-2021-0612
Published: 2021-09-27
Description: In m4u, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS05425834.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://corp.mediatek.com/product-security-bulletin/September-2021; https://corp.mediatek.com/product-security-bulletin/September-2021
CVE: CVE-2021-0660
Published: 2021-09-27
Description: In ccu, there is a possible out of bounds read due to incorrect error handling. This could lead to information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05827145; Issue ID: ALPS05827145.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-125
References: https://corp.mediatek.com/product-security-bulletin/September-2021; https://corp.mediatek.com/product-security-bulletin/September-2021
CVE: CVE-2021-40097
Published: 2021-09-27
Description: An issue was discovered in Concrete CMS through 8.5.5. Authenticated path traversal leads to to remote code execution via uploaded PHP code, related to the bFilename parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://documentation.concretecms.org/developers/introduction/version-history/856-release-notes; https://hackerone.com/reports/1102067; https://documentation.concretecms.org/developers/introduction/version-history/856-release-notes
CVE: CVE-2021-40098
Published: 2021-09-27
Description: An issue was discovered in Concrete CMS through 8.5.5. Path Traversal leading to RCE via external form by adding a regular expression.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://documentation.concretecms.org/developers/introduction/version-history/856-release-notes; https://hackerone.com/reports/1102080; https://documentation.concretecms.org/developers/introduction/version-history/856-release-notes
CVE: CVE-2021-40103
Published: 2021-09-27
Description: An issue was discovered in Concrete CMS through 8.5.5. Path Traversal can lead to Arbitrary File Reading and SSRF.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://documentation.concretecms.org/developers/introduction/version-history/856-release-notes; https://hackerone.com/reports/1102211; https://documentation.concretecms.org/developers/introduction/version-history/856-release-notes
CVE: CVE-2021-40104
Published: 2021-09-27
Description: An issue was discovered in Concrete CMS through 8.5.5. There is an SVG sanitizer bypass.
CVSS Score: 7.5 (HIGH)
References: https://documentation.concretecms.org/developers/introduction/version-history/856-release-notes; https://hackerone.com/reports/1102088; https://documentation.concretecms.org/developers/introduction/version-history/856-release-notes
CVE: CVE-2021-40105
Published: 2021-09-27
Description: An issue was discovered in Concrete CMS through 8.5.5. There is XSS via Markdown Comments.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://documentation.concretecms.org/developers/introduction/version-history/856-release-notes; https://hackerone.com/reports/1102054; https://documentation.concretecms.org/developers/introduction/version-history/856-release-notes
CVE: CVE-2021-40106
Published: 2021-09-27
Description: An issue was discovered in Concrete CMS through 8.5.5. There is unauthenticated stored XSS in blog comments via the website field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://documentation.concretecms.org/developers/introduction/version-history/856-release-notes; https://hackerone.com/reports/1102042; https://documentation.concretecms.org/developers/introduction/version-history/856-release-notes
CVE: CVE-2021-23243
Published: 2021-09-27
Description: In Oppo's battery application, the third-party SDK provides the function of loading a third-party Provider, which can be used.
CVSS Score: 7.8 (HIGH)
References: https://security.oppo.com/en/noticeDetail?notice_only_key=NOTICE[PII_REDACTED]236556800; https://security.oppo.com/en/noticeDetail?notice_only_key=NOTICE[PII_REDACTED]236556800
CVE: CVE-2021-3799
Published: 2021-09-27
Description: grav-plugin-admin is vulnerable to Improper Restriction of Rendered UI Layers or Frames
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-1021, CWE-1021
References: https://github.com/getgrav/grav-plugin-admin/commit/853abfbbd3c14a0a601c941dcfaa3858b6283b69; https://huntr.dev/bounties/d73f24a8-302b-4f9f-abb8-54688abd9813; https://github.com/getgrav/grav-plugin-admin/commit/853abfbbd3c14a0a601c941dcfaa3858b6283b69
CVE: CVE-2021-3818
Published: 2021-09-27
Description: grav is vulnerable to Reliance on Cookies without Validation and Integrity Checking
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-565, CWE-565
References: https://github.com/getgrav/grav/commit/c51fb1779b83f620c0b6f3548d4a96322b55df07; https://huntr.dev/bounties/c2bc65af-7b93-4020-886e-8cdaeb0a58ea; https://github.com/getgrav/grav/commit/c51fb1779b83f620c0b6f3548d4a96322b55df07
CVE: CVE-2021-3819
Published: 2021-09-27
Description: firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://github.com/firefly-iii/firefly-iii/commit/578f350498b75f31d321c78a608c7f7b3b7b07e9; https://huntr.dev/bounties/da82f7b6-4ffc-4109-87a4-a2a790bd44e5; https://github.com/firefly-iii/firefly-iii/commit/578f350498b75f31d321c78a608c7f7b3b7b07e9
CVE: CVE-2021-3820
Published: 2021-09-27
Description: inflect is vulnerable to Inefficient Regular Expression Complexity
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333
References: https://github.com/pksunkara/inflect/commit/a9a0a8e9561c3487854c7cae42565d9652ec858b; https://huntr.dev/bounties/4612b31a-072b-4f61-a916-c7e4cbc2042a; https://github.com/pksunkara/inflect/commit/a9a0a8e9561c3487854c7cae42565d9652ec858b
CVE: CVE-2021-3822
Published: 2021-09-27
Description: jsoneditor is vulnerable to Inefficient Regular Expression Complexity
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333, CWE-400
References: https://github.com/josdejong/jsoneditor/commit/092e386cf49f2a[PII_REDACTED]da8e0137ed067c3e; https://huntr.dev/bounties/1e3ed803-b7ed-42f1-a4ea-c4c75da9de73; https://github.com/josdejong/jsoneditor/commit/092e386cf49f2a[PII_REDACTED]da8e0137ed067c3e
CVE: CVE-2021-3828
Published: 2021-09-27
Description: nltk is vulnerable to Inefficient Regular Expression Complexity
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333, CWE-697
References: https://github.com/nltk/nltk/commit/277711ab1dec729e626b27aab6fa35ea5efbd7e6; https://huntr.dev/bounties/d19aed43-75bc-4a03-91a0-4d0bb516bc32; https://github.com/nltk/nltk/commit/277711ab1dec729e626b27aab6fa35ea5efbd7e6
CVE: CVE-2021-40108
Published: 2021-09-27
Description: An issue was discovered in Concrete CMS through 8.5.5. The Calendar is vulnerable to CSRF. ccm_token is not verified on the ccm/calendar/dialogs/event/add/save endpoint.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://documentation.concretecms.org/developers/introduction/version-history/856-release-notes; https://hackerone.com/reports/1102018; https://documentation.concretecms.org/developers/introduction/version-history/856-release-notes
CVE: CVE-2021-40109
Published: 2021-09-27
Description: A SSRF issue was discovered in Concrete CMS through 8.5.5. Users can access forbidden files on their local network. A user with permissions to upload files from external sites can upload a URL that redirects to an internal resource of any file type. The redirect is followed and loads the contents of the file from the redirected-to server. Files of disallowed types can be uploaded.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-918
References: https://documentation.concretecms.org/developers/introduction/version-history/856-release-notes; https://hackerone.com/reports/1102105; https://documentation.concretecms.org/developers/introduction/version-history/856-release-notes
CVE: CVE-2021-22272
Published: 2021-09-27
Description: The vulnerability origins in the commissioning process where an attacker of the ControlTouch can enter a serial number in a specific way to transfer the device virtually into her/his my.busch-jaeger.de or mybuildings.abb.com profile. A successful attacker can observe and control a ControlTouch remotely under very specific circumstances. The issue is fixed in the cloud side of the system. No firmware update is needed for customer products. If a user wants to understand if (s)he is affected, please read the advisory. This issue affects: ABB and Busch-Jaeger, ControlTouch
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://search.abb.com/library/Download.aspx?DocumentID=9AKK107992A3688&LanguageCode=en&DocumentPartId=&Action=Launch; https://search.abb.com/library/Download.aspx?DocumentID=9AKK107992A3688&LanguageCode=en&DocumentPartId=&Action=Launch
CVE: CVE-2021-33907
Published: 2021-09-27
Description: The Zoom Client for Meetings for Windows in all versions before 5.3.0 fails to properly validate the certificate information used to sign .msi files when performing an update of the client. This could lead to remote code execution in an elevated privileged context.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-295
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2021-34408
Published: 2021-09-27
Description: The Zoom Client for Meetings for Windows in all versions before version 5.3.2 writes log files to a user writable directory as a privileged user during the installation or update of the client. This could allow for potential privilege escalation if a link was created between the user writable directory used and a non-user writable directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2021-34409
Published: 2021-09-27
Description: It was discovered that the installation packages of the Zoom Client for Meetings for MacOS (Standard and for IT Admin) installation before version 5.2.0, Zoom Client Plugin for Sharing iPhone/iPad before version 5.2.0, and Zoom Rooms for Conference before version 5.1.0, copy pre- and post- installation shell scripts to a user-writable directory. In the affected products listed below, a malicious actor with local access to a user's machine could use this flaw to potentially run arbitrary system commands in a higher privileged context during the installation process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://explore.zoom.us/en/trust/security/security-bulletin; https://explore.zoom.us/en/trust/security/security-bulletin
CVE: CVE-2021-34410
Published: 2021-09-27
Description: A user-writable application bundle unpacked during the install for all versions of the Zoom Plugin for Microsoft Outlook for Mac before 5.0.25611.0521 allows for privilege escalation to root.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2021-34411
Published: 2021-09-27
Description: During the installation process forZoom Rooms for Conference Room for Windows before version 5.3.0 it is possible to launch Internet Explorer with elevated privileges. If the installer was launched with elevated privileges such as by SCCM this can result in a local privilege escalation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2021-34412
Published: 2021-09-27
Description: During the installation process for all versions of the Zoom Client for Meetings for Windows before 5.4.0, it is possible to launch Internet Explorer. If the installer was launched with elevated privileges such as by SCCM this can result in a local privilege escalation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2021-34413
Published: 2021-09-27
Description: All versions of the Zoom Plugin for Microsoft Outlook for MacOS before 5.3.52553.0918 contain a Time-of-check Time-of-use (TOC/TOU) vulnerability during the plugin installation process. This could allow a standard user to write their own malicious application to the plugin directory, allowing the malicious application to execute in a privileged context.
CVSS Score: 7.5 (HIGH)
CWE: CWE-367
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2021-34414
Published: 2021-09-27
Description: The network proxy page on the web portal for the Zoom on-premise Meeting Connector Controller before version 4.6[PII_REDACTED]7, Zoom on-premise Meeting Connector MMR before version 4.6[PII_REDACTED]7, Zoom on-premise Recording Connector before version 3.8.42.20200905, Zoom on-premise Virtual Room Connector before version 4.4.6[PII_REDACTED]0, and Zoom on-premise Virtual Room Connector Load Balancer before version 2.5.5[PII_REDACTED]6 fails to validate input sent in requests to update the network proxy configuration, which could lead to remote command injection on the on-premise image by a web portal administrator.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2021-34415
Published: 2021-09-27
Description: The Zone Controller service in the Zoom On-Premise Meeting Connector Controller before version 4.6[PII_REDACTED]5 does not verify the cnt field sent in incoming network packets, which leads to exhaustion of resources and system crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2021-34416
Published: 2021-09-27
Description: The network address administrative settings web portal for the Zoom on-premise Meeting Connector before version 4.6[PII_REDACTED]5, Zoom on-premise Meeting Connector MMR before version 4.6[PII_REDACTED]5, Zoom on-premise Recording Connector before version 3.8.44.20210326, Zoom on-premise Virtual Room Connector before version 4.4.6[PII_REDACTED]6, and Zoom on-premise Virtual Room Connector Load Balancer before version 2.5.5[PII_REDACTED]6 fails to validate input sent in requests to update the network configuration, which could lead to remote command injection on the on-premise image by the web portal administrators.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2021-36218
Published: 2021-09-27
Description: An issue was discovered in SKALE sgxwallet 1.58.3. sgx_disp_ippsAES_GCMEncrypt allows an out-of-bounds write, resulting in a segfault and compromised enclave. This issue describes a buffer overflow, which was resolved prior to v1.77.0 and not reproducible in latest sgxwallet v1.77.0
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://github.com/skalenetwork/sgxwallet/commit/77425c862ad20cd270d42c54f3d63e1eb4e02195; https://github.com/skalenetwork/sgxwallet/releases; https://github.com/skalenetwork/sgxwallet/commit/77425c862ad20cd270d42c54f3d63e1eb4e02195
CVE: CVE-2021-36219
Published: 2021-09-27
Description: An issue was discovered in SKALE sgxwallet 1.58.3. The provided input for ECALL 14 triggers a branch in trustedEcdsaSign that frees a non-initialized pointer from the stack. An attacker can chain multiple enclave calls to prepare a stack that contains a valid address. This address is then freed, resulting in compromised integrity of the enclave. This was resolved after v1.58.3 and not reproducible in sgxwallet v1.77.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-824
References: https://github.com/skalenetwork/sgxwallet/commit/4e9b5b7526db083177e81f8bafeaa4914d276a82; https://github.com/skalenetwork/sgxwallet/releases; https://github.com/skalenetwork/sgxwallet/commit/4e9b5b7526db083177e81f8bafeaa4914d276a82
CVE: CVE-2021-37786
Published: 2021-09-27
Description: Certain Federal Office of Information Technology Systems and Telecommunication FOITT products are affected by improper handling of exceptional conditions. This affects COVID Certificate App IOS 2.2.0 and below affected, patch in progress and COVID Certificate Check App IOS 2.2.0 and below affected, patch in progress. A denial of service (physically proximate) could be caused by scanning a crafted QR code.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-755
References: https://github.com/admin-ch/CovidCertificate-App-iOS/issues/146; https://github.com/admin-ch/CovidCertificate-App-iOS/issues/146
CVE: CVE-2021-26587
Published: 2021-09-27
Description: A potential DOM-based Cross Site Scripting security vulnerability has been identified in HPE StoreOnce. The vulnerability could be remotely exploited to cause an elevation of privilege leading to partial impact to confidentiality, availability, and integrity. HPE has made the following software update - HPE StoreOnce 4.3.0, to resolve the vulnerability in HPE StoreOnce.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst04176en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst04176en_us
CVE: CVE-2021-36878
Published: 2021-09-27
Description: Cross-Site Request Forgery (CSRF) vulnerability in WordPress uListing plugin (versions <= 2.0.5) makes it possible for attackers to update settings.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://patchstack.com/database/vulnerability/ulisting/wordpress-ulisting-plugin-2-0-5-settings-update-via-cross-site-request-forgery-csrf-vulnerability; https://wordpress.org/plugins/ulisting/#developers; https://patchstack.com/database/vulnerability/ulisting/wordpress-ulisting-plugin-2-0-5-settings-update-via-cross-site-request-forgery-csrf-vulnerability
CVE: CVE-2021-37539
Published: 2021-09-27
Description: Zoho ManageEngine ADManager Plus before 7111 is vulnerable to unrestricted file which leads to Remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://www.manageengine.com; https://www.manageengine.com/products/ad-manager/release-notes.html#7111; https://www.manageengine.com
CVE: CVE-2021-24569
Published: 2021-09-27
Description: The Cookie Notice & Compliance for GDPR / CCPA WordPress plugin before 2.1.2 does not escape the value of its Button Text setting when outputting it in an attribute in the frontend, allowing high privilege users such as admin to perform Cross-Site Scripting even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/38053e05-4b17-4fa9-acd3-85d8529b202b; https://wpscan.com/vulnerability/38053e05-4b17-4fa9-acd3-85d8529b202b