deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-28391
Published: 2022-04-03
Description: BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-88
References: https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch; https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch; https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661
CVE: CVE-2021-30061
Published: 2022-04-03
Description: On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, physically proximate attackers can execute code via a crafted file on a USB stick.
CVSS Score: 6.8 (MEDIUM)
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-011-05; https://www.belden.com/support/security-assurance; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-011-05
CVE: CVE-2021-30062
Published: 2022-04-03
Description: On Schneider Electric ConneXium Tofino OPCLSM TCSEFM0000 before 03.23 and Belden Tofino Xenon Security Appliance, crafted OPC packets can bypass the OPC enforcer.
CVSS Score: 7.5 (HIGH)
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-011-05; https://www.belden.com/support/security-assurance; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-011-05
CVE: CVE-2021-30063
Published: 2022-04-03
Description: On Schneider Electric ConneXium Tofino OPCLSM TCSEFM0000 before 03.23 and Belden Tofino Xenon Security Appliance, crafted OPC packets can cause an OPC enforcer denial of service.
CVSS Score: 7.5 (HIGH)
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-011-05; https://www.belden.com/support/security-assurance; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-011-05
CVE: CVE-2021-30064
Published: 2022-04-03
Description: On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, an SSH login can succeed with hardcoded default credentials (if the device is in the uncommissioned state).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-011-05; https://www.belden.com/support/security-assurance; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-011-05
CVE: CVE-2021-30065
Published: 2022-04-03
Description: On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, crafted ModBus packets can bypass the ModBus enforcer. NOTE: this issue exists because of an incomplete fix of CVE-2017-11401.
CVSS Score: 7.5 (HIGH)
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-011-05; https://www.belden.com/support/security-assurance; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-011-05
CVE: CVE-2021-30066
Published: 2022-04-03
Description: On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, an arbitrary firmware image can be loaded because firmware signature verification (for a USB stick) can be bypassed. NOTE: this issue exists because of an incomplete fix of CVE-2017-11400.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-347
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-011-05; https://www.belden.com/support/security-assurance; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-011-05
CVE: CVE-2022-26233
Published: 2022-04-03
Description: Barco Control Room Management through Suite 2.9 Build 0275 was discovered to be vulnerable to directory traversal, allowing attackers to access sensitive information and components. Requests must begin with the "GET /..\.." substring.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://packetstormsecurity.com/files/166577/Barco-Control-Room-Management-Suite-Directory-Traversal.html; http://seclists.org/fulldisclosure/2022/Apr/0; http://packetstormsecurity.com/files/166577/Barco-Control-Room-Management-Suite-Directory-Traversal.html
CVE: CVE-2022-26530
Published: 2022-04-03
Description: swaylock before 1.6 allows attackers to trigger a crash and achieve unlocked access to a Wayland compositor.
CVSS Score: 9.1 (CRITICAL)
References: https://bugzilla.redhat.com/show_bug.cgi?id=2066596; https://github.com/swaywm/swaylock/commit/1d1c75b6316d21933069a9d201f966d84099f6ca; https://github.com/swaywm/swaylock/pull/219
CVE: CVE-2022-27248
Published: 2022-04-03
Description: A directory traversal vulnerability in IdeaRE RefTree before 2021.09.17 allows remote authenticated users to download arbitrary .dwg files from a remote server by specifying an absolute or relative path when invoking the affected DownloadDwg endpoint. An attack uses the path field to CaddemServiceJS/CaddemService.svc/rest/DownloadDwg.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.com/files/166560/IdeaRE-RefTree-Path-Traversal.html; https://www.idearespa.eu; http://packetstormsecurity.com/files/166560/IdeaRE-RefTree-Path-Traversal.html
CVE: CVE-2022-27249
Published: 2022-04-03
Description: An unrestricted file upload vulnerability in IdeaRE RefTree before 2021.09.17 allows remote authenticated users to execute arbitrary code by using UploadDwg to upload a crafted aspx file to the web root, and then visiting the URL for this aspx resource.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://packetstormsecurity.com/files/166559/IdeaRE-RefTree-Shell-Upload.html; https://www.idearespa.eu; http://packetstormsecurity.com/files/166559/IdeaRE-RefTree-Shell-Upload.html
CVE: CVE-2022-0939
Published: 2022-04-04
Description: Server-Side Request Forgery (SSRF) in GitHub repository janeczku/calibre-web prior to 0.6.18.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-918
References: https://github.com/janeczku/calibre-web/commit/4545f4a20d9ff90b99bbd4e3e34b6de4441d6367; https://huntr.dev/bounties/768fd7e2-a767-4d8d-a517-e9dda849c6e4; https://github.com/janeczku/calibre-web/commit/4545f4a20d9ff90b99bbd4e3e34b6de4441d6367
CVE: CVE-2022-1222
Published: 2022-04-04
Description: Inf loop in GitHub repository gpac/gpac prior to 2.1.0-DEV.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: https://github.com/gpac/gpac/commit/7f060bbb72966cae80d6fee338d0b07fa3fc06e1; https://huntr.dev/bounties/f8cb85b8-7ff3-47f1-a9a6-7080eb371a3d; https://www.debian.org/security/2023/dsa-5411
CVE: CVE-2022-1223
Published: 2022-04-04
Description: Incorrect Authorization in GitHub repository phpipam/phpipam prior to 1.4.6.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://github.com/phpipam/phpipam/commit/f6a49fd9f93b7d7e0a4fbf1d35338502eed35953; https://huntr.dev/bounties/baec4c23-2466-4b13-b3c0-eaf1d000d4ab; https://github.com/phpipam/phpipam/commit/f6a49fd9f93b7d7e0a4fbf1d35338502eed35953
CVE: CVE-2022-1224
Published: 2022-04-04
Description: Improper Authorization in GitHub repository phpipam/phpipam prior to 1.4.6.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-285, CWE-863
References: https://github.com/phpipam/phpipam/commit/f6a49fd9f93b7d7e0a4fbf1d35338502eed35953; https://huntr.dev/bounties/cd9e1508-5682-427e-a921-14b4f520b85a; https://github.com/phpipam/phpipam/commit/f6a49fd9f93b7d7e0a4fbf1d35338502eed35953
CVE: CVE-2022-1225
Published: 2022-04-04
Description: Incorrect Privilege Assignment in GitHub repository phpipam/phpipam prior to 1.4.6.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-266
References: https://github.com/phpipam/phpipam/commit/f6a49fd9f93b7d7e0a4fbf1d35338502eed35953; https://huntr.dev/bounties/49b44cfa-d142-4d79-b[PII_REDACTED]169d2; https://github.com/phpipam/phpipam/commit/f6a49fd9f93b7d7e0a4fbf1d35338502eed35953
CVE: CVE-2022-24191
Published: 2022-04-04
Description: In HTMLDOC 1.9.14, an infinite loop in the gif_read_lzw function can lead to a pointer arbitrarily pointing to heap memory and resulting in a buffer overflow.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: https://github.com/michaelrsweet/htmldoc/issues/470; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6RPDZLHOMPSA2LBXXFTZ5UADZWGYYWH7/; https://github.com/michaelrsweet/htmldoc/issues/470
CVE: CVE-2021-33616
Published: 2022-04-04
Description: RSA Archer 6.x through 6.9 SP1 P4 (6.9.1.4) allows stored XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://community.rsa.com/t5/archer-product-advisories/tkb-p/archer-product-advisories; https://github.com/fireeye/Vulnerability-Disclosures; https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0020/MNDT-2022-0020.md
CVE: CVE-2021-36775
Published: 2022-04-04
Description: a Improper Access Control vulnerability in SUSE Rancher allows users to keep privileges that should have been revoked. This issue affects: SUSE Rancher Rancher versions prior to 2.4.18; Rancher versions prior to 2.5.12; Rancher versions prior to 2.6.3.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: https://bugzilla.suse.com/show_bug.cgi?id=1189120; https://bugzilla.suse.com/show_bug.cgi?id=1189120
CVE: CVE-2021-36776
Published: 2022-04-04
Description: A Improper Access Control vulnerability in SUSE Rancher allows remote attackers impersonate arbitrary users. This issue affects: SUSE Rancher Rancher versions prior to 2.5.10.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: https://bugzilla.suse.com/show_bug.cgi?id=1189413; https://bugzilla.suse.com/show_bug.cgi?id=1189413
CVE: CVE-2021-44138
Published: 2022-04-04
Description: There is a Directory traversal vulnerability in Caucho Resin, as distributed in Resin 4.0.52 - 4.0.56, which allows remote attackers to read files in arbitrary directories via a ; in a pathname within an HTTP request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/maybe-why-not/reponame/issues/2; https://github.com/maybe-why-not/reponame/issues/2
CVE: CVE-2022-26616
Published: 2022-04-04
Description: PKP Vendor Open Journal System v2.4.8 to v3.3.8 allows attackers to perform reflected cross-site scripting (XSS) attacks via crafted HTTP headers.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://forum.pkp.sfu.ca/t/ojs-omp-ops-3-3-0-9-released/72236; https://github.com/pkp/pkp-lib/issues/7649; https://forum.pkp.sfu.ca/t/ojs-omp-ops-3-3-0-9-released/72236
CVE: CVE-2022-27435
Published: 2022-04-04
Description: An unrestricted file upload at /public/admin/index.php?add_product of Ecommerce-Website v1.1.0 allows attackers to upload a webshell via the Product Image component.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://drive.google.com/file/d/1op00zVWSuHO4US_iAkD0aTM-tHqqtrIl/view?usp=sharing; https://github.com/D4rkP0w4r/Full-Ecommece-Website-Add_Product-Unrestricted-File-Upload-RCE-POC; https://hackmd.io/SCbv5_iJQd2JL2LRqCQYTA
CVE: CVE-2022-27436
Published: 2022-04-04
Description: A cross-site scripting (XSS) vulnerability in /public/admin/index.php?add_user at Ecommerce-Website v1.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username text field.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://drive.google.com/file/d/1pXCq3E-OlczLs5Obh_qkJlJ-7kPkluEK/view?usp=sharing; https://github.com/D4rkP0w4r/Full-Ecommece-Website-Add_User-Stored-XSS-POC; https://hackmd.io/MUKHOiNkT2u9vi2u9CtrYA
CVE: CVE-2022-28062
Published: 2022-04-04
Description: Car Rental System v1.0 contains an arbitrary file upload vulnerability via the Add Car component which allows attackers to upload a webshell and execute arbitrary code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/D4rkP0w4r/CVEs/blob/main/Car%20Rental%20System%20Upload%20%2B%20RCE/POC.md; https://hackmd.io/DUiTnVpLSVKihcyPloLdPg; https://github.com/D4rkP0w4r/CVEs/blob/main/Car%20Rental%20System%20Upload%20%2B%20RCE/POC.md
CVE: CVE-2022-28063
Published: 2022-04-04
Description: Simple Bakery Shop Management System v1.0 contains a file disclosure via /bsms/?page=products.
CVSS Score: 4.9 (MEDIUM)
References: https://github.com/D4rkP0w4r/CVEs/blob/main/Simple%20Bakery%20Shop%20Management%20System%20File%20Disclosure/POC.md; https://hackmd.io/yCbEEV9QSHC9pIc75LziNQ; https://github.com/D4rkP0w4r/CVEs/blob/main/Simple%20Bakery%20Shop%20Management%20System%20File%20Disclosure/POC.md
CVE: CVE-2021-43454
Published: 2022-04-04
Description: An Unquoted Service Path vulnerability exists in AnyTXT Searcher 1.2.394 via a specially crafted file in the ATService path. .
CVSS Score: 7.8 (HIGH)
CWE: CWE-428
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/196532; https://github.com/M507/Miner; https://www.exploit-db.com/exploits/49549
CVE: CVE-2021-43455
Published: 2022-04-04
Description: An Unquoted Service Path vulnerability exists in FreeLAN 2.2 via a specially crafted file in the FreeLAN Service path.
CVSS Score: 7.8 (HIGH)
CWE: CWE-428
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/197919; https://github.com/M507/Miner; https://www.exploit-db.com/exploits/49630
CVE: CVE-2021-43456
Published: 2022-04-04
Description: An Unquoted Service Path vulnerablility exists in Rumble Mail Server 0.51.3135 via via a specially crafted file in the RumbleService executable service path.
CVSS Score: 7.8 (HIGH)
CWE: CWE-428
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/192729; https://github.com/M507/Miner; https://www.exploit-db.com/exploits/49203
CVE: CVE-2021-43457
Published: 2022-04-04
Description: An Unquoted Service Path vulnerability exists in bVPN 2.5.1 via a specially crafted file in the waselvpnserv service path.
CVSS Score: 7.8 (HIGH)
CWE: CWE-428
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/197938; https://github.com/M507/Miner; https://www.exploit-db.com/exploits/49632
CVE: CVE-2021-43458
Published: 2022-04-04
Description: An Unquoted Service Path vulnerability exits in Vembu BDR 4.2.0.1 via a specially crafted file in the (1) hsflowd, (2) VembuBDR360Agent, or (3) VembuOffice365Agent service paths.
CVSS Score: 7.8 (HIGH)
CWE: CWE-428
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/198151; https://github.com/M507/Miner; https://www.exploit-db.com/exploits/49641
CVE: CVE-2022-1026
Published: 2022-04-04
Description: Kyocera multifunction printers running vulnerable versions of Net View unintentionally expose sensitive user information, including usernames and passwords, through an insufficiently protected address book export function.
CVSS Score: 8.6 (HIGH)
CWE: CWE-522, CWE-522
References: https://www.kyoceradocumentsolutions.com/en/our-business/security/information/2022-04-04.html; https://www.rapid7.com/blog/post/2022/03/29/cve-2022-1026-kyocera-net-view-address-book-exposure/; https://www.kyoceradocumentsolutions.com/en/our-business/security/information/2022-04-04.html
CVE: CVE-2021-25048
Published: 2022-04-04
Description: The KingComposer WordPress plugin through 2.9.6 does not have authorisation, CSRF and sanitisation/escaping when creating profile, allowing any authenticated users to create arbitrary ones, with Cross-Site Scripting payloads in them
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/5687e5db-d987-416d-a7f4-036cce4d56cb; https://wpscan.com/vulnerability/5687e5db-d987-416d-a7f4-036cce4d56cb
CVE: CVE-2021-25113
Published: 2022-04-04
Description: The Dropdown Menu Widget WordPress plugin through 1.9.7 does not have authorisation and CSRF checks when saving its settings, allowing low privilege users such as subscriber to update them. Due to the lack of sanitisation and escaping, it could also lead to Stored Cross-Site Scripting issues
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/7a5078db-e0d4-4076-9de9-5401c3ca0d65; https://wpscan.com/vulnerability/7a5078db-e0d4-4076-9de9-5401c3ca0d65
CVE: CVE-2021-43459
Published: 2022-04-04
Description: A Cross Site Scripting (XSS) vulnerability exists in Rumble Mail Server 0.51.3135 via the (1) domain and (2) path parameters.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/49254; https://www.exploit-db.com/exploits/49254
CVE: CVE-2021-43460
Published: 2022-04-04
Description: An Unquoted Service Path vulnerability exists in System Explorer 7.0.0 via via a specially crafted file in the SystemExplorerHelpService service executable path.
CVSS Score: 7.8 (HIGH)
CWE: CWE-428
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/193324; https://github.com/M507/Miner; https://www.exploit-db.com/exploits/49248
CVE: CVE-2021-43461
Published: 2022-04-04
Description: Cross Site Scripting (XSS) vulnerability exists in Rumble Mail Server 0.51.3135 via the servername parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/49253; https://www.exploit-db.com/exploits/49253
CVE: CVE-2021-43462
Published: 2022-04-04
Description: A Cross Site Scripting (XSS) vulnerability exists in Rumble Mail Server 0.51.3135 via the username parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/49255; https://www.exploit-db.com/exploits/49255
CVE: CVE-2021-43463
Published: 2022-04-04
Description: An Unquoted Service Path vulnerability exists in Ext2Fsd v0.68 via a specially crafted file in the Ext2Srv Service executable service path.
CVSS Score: 7.8 (HIGH)
CWE: CWE-428
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/198746; https://github.com/M507/Miner; https://www.exploit-db.com/exploits/49706
CVE: CVE-2022-0403
Published: 2022-04-04
Description: The Library File Manager WordPress plugin before 5.2.3 is using an outdated version of the elFinder library, which is know to be affected by security issues (CVE-2021-32682), and does not have any authorisation as well as CSRF checks in its connector AJAX action, allowing any authenticated users, such as subscriber to call it. Furthermore, as the options passed to the elFinder library does not restrict any file type, users with a role as low as subscriber can Create/Upload/Delete Arbitrary files and folders.
CVSS Score: 8.1 (HIGH)
CWE: CWE-434
References: https://wpscan.com/vulnerability/997a7fbf-98c6-453e-ad84-75c1e91d5a1e; https://wpscan.com/vulnerability/997a7fbf-98c6-453e-ad84-75c1e91d5a1e
CVE: CVE-2022-0404
Published: 2022-04-04
Description: The Material Design for Contact Form 7 WordPress plugin through 2.6.4 does not check authorization or that the option mentioned in the notice param belongs to the plugin when processing requests to the cf7md_dismiss_notice action, allowing any logged in user (with roles as low as Subscriber) to set arbitrary options to true, potentially leading to Denial of Service by breaking the site.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://wpscan.com/vulnerability/6d0932bb-d515-4432-b67b-16aba34bd285; https://wpscan.com/vulnerability/6d0932bb-d515-4432-b67b-16aba34bd285
CVE: CVE-2022-0431
Published: 2022-04-04
Description: The Insights from Google PageSpeed WordPress plugin before 4.0.4 does not sanitise and escape various parameters before outputting them back in attributes in the plugin's settings dashboard, leading to Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset/2690415; https://wpscan.com/vulnerability/52bd94df-8816-48fd-8788-38d045eb57ca; https://plugins.trac.wordpress.org/changeset/2690415
CVE: CVE-2022-0537
Published: 2022-04-04
Description: The MapPress Maps for WordPress plugin before 2.73.13 allows a high privileged user to bypass the DISALLOW_FILE_EDIT and DISALLOW_FILE_MODS settings and upload arbitrary files to the site through the "ajax_save" function. The file is written relative to the current 's stylesheet directory, and a .php file extension is added. No validation is performed on the content of the file, triggering an RCE vulnerability by uploading a web shell. Further the name parameter is not sanitized, allowing the payload to be uploaded to any directory to which the server has write access.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://wpscan.com/vulnerability/abfbba70-5158-4990-98e5-f302361db367; https://wpscan.com/vulnerability/abfbba70-5158-4990-98e5-f302361db367
CVE: CVE-2022-0709
Published: 2022-04-04
Description: The Booking Package WordPress plugin before 1.5.29 requires a token for exporting the ical representation of it's booking calendar, but this token is returned in the json response to unauthenticated users performing a booking, leading to a sensitive data disclosure vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://wpscan.com/vulnerability/3cd1d8d2-d2a4-45a9-9b5f-c2a56f08be85; https://wpscan.com/vulnerability/3cd1d8d2-d2a4-45a9-9b5f-c2a56f08be85
CVE: CVE-2022-0825
Published: 2022-04-04
Description: The Amelia WordPress plugin before 1.0.49 does not have proper authorisation when managing appointments, allowing any customer to update other's booking status, as well as retrieve sensitive information about the bookings, such as the full name and phone number of the person who booked it.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://plugins.trac.wordpress.org/changeset/2693545; https://wpscan.com/vulnerability/1a92a65f-e9df-41b5-9a1c-8e24ee9bf50e; https://plugins.trac.wordpress.org/changeset/2693545
CVE: CVE-2022-0830
Published: 2022-04-04
Description: The FormBuilder WordPress plugin through 1.08 does not have CSRF checks in place when creating/updating and deleting forms, and does not sanitise as well as escape its form field values. As a result, attackers could make logged in admin update and delete arbitrary forms via a CSRF attack, and put Cross-Site Scripting payloads in them.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://wpscan.com/vulnerability/114c0202-39f8-4748-ac0d-013d2d6f02f7; https://wpscan.com/vulnerability/114c0202-39f8-4748-ac0d-013d2d6f02f7
CVE: CVE-2022-0837
Published: 2022-04-04
Description: The Amelia WordPress plugin before 1.0.48 does not have proper authorisation when handling Amelia SMS service, allowing any customer to send paid test SMS notification as well as retrieve sensitive information about the admin, such as the email, account balance and payment history. A malicious actor can abuse this vulnerability to drain out the account balance by keep sending SMS notification.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862
References: https://wpscan.com/vulnerability/0882e5c0-f319-4994-9346-aa18438fda6a; https://wpscan.com/vulnerability/0882e5c0-f319-4994-9346-aa18438fda6a
CVE: CVE-2022-0864
Published: 2022-04-04
Description: The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.22.9 does not sanitise and escape the updraft_interval parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting (XSS) vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/166631/WordPress-UpdraftPlus-Cross-Site-Scripting.html; https://wpscan.com/vulnerability/7337543f-4c2c-4365-aebf-3423e9d2f872; http://packetstormsecurity.com/files/166631/WordPress-UpdraftPlus-Cross-Site-Scripting.html
CVE: CVE-2022-0884
Published: 2022-04-04
Description: The Profile Builder WordPress plugin before 3.6.8 does not sanitise and escape Form Fields titles and description, which could allow high privilege user such as admin to perform Criss-Site Scripting attacks even when unfiltered_html is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2690776; https://wpscan.com/vulnerability/af06b96c-105f-429c-b2ad-c8c823897dba; https://plugins.trac.wordpress.org/changeset/2690776
CVE: CVE-2022-0887
Published: 2022-04-04
Description: The Easy Social Icons WordPress plugin before 3.1.4 does not sanitize the selected_icons attribute to the cnss_widget before using it in an SQL statement, leading to a SQL injection vulnerability.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://wpscan.com/vulnerability/a6c1676d-9dcb-45f6-833a-9545bccd0ad6; https://wpscan.com/vulnerability/a6c1676d-9dcb-45f6-833a-9545bccd0ad6