deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-29037
Published: 2024-03-20
Description: datahub-helm provides the Kubernetes Helm charts for deploying Datahub and its dependencies on a Kubernetes cluster. Starting in version 0.1.143 and prior to version 0.2.182, due to configuration issues in the helm chart, if there was a successful initial deployment during a limited window of time, personal access tokens were possibly created with a default secret key. Since the secret key is a static, publicly available value, someone could inspect the algorithm used to generate personal access tokens and generate their own for an instance. Deploying with Metadata Service Authentication enabled would have been difficult during window of releases. If someone circumvented the helm settings and manually set Metadata Service Authentication to be enabled using environment variables directly, this would skip over the autogeneration logic for the Kubernetes Secrets and DataHub GMS would default to the signing key specified statically in the application.yml. Most deployments probably did not attempt to circumvent the helm settings to enable Metadata Service Authentication during this time, so impact is most likely limited. Any deployments with Metadata Service Authentication enabled should ensure that their secret values are properly randomized. Version 0.2.182 contains a patch for this issue. As a workaround, one may reset the token signing key to be a random value, which will invalidate active personal access tokens.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-1394
References: https://github.com/acryldata/datahub-helm/commit/ea8a17860f053c63387b8309e1f77c0e1462a1b3; https://github.com/acryldata/datahub-helm/security/advisories/GHSA-82p6-9h7m-9h8j; https://github.com/acryldata/datahub-helm/commit/ea8a17860f053c63387b8309e1f77c0e1462a1b3
CVE: CVE-2024-29469
Published: 2024-03-20
Description: A stored cross-site scripting (XSS) vulnerability in OneBlog v2.3.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Category List parameter under the Lab module.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gitee.com/yadong.zhang/DBlog/issues/I98O8V; https://gitee.com/yadong.zhang/DBlog/issues/I98O8V
CVE: CVE-2024-29470
Published: 2024-03-20
Description: OneBlog v2.3.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the component {{rootpath}}/links.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gitee.com/yadong.zhang/DBlog/issues/I98O8V; https://gitee.com/yadong.zhang/DBlog/issues/I98O8V
CVE: CVE-2024-29471
Published: 2024-03-20
Description: OneBlog v2.3.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Notice Manage module.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://gitee.com/yadong.zhang/DBlog/issues/I98O8V; https://gitee.com/yadong.zhang/DBlog/issues/I98O8V
CVE: CVE-2024-29472
Published: 2024-03-20
Description: OneBlog v2.3.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Privilege Management module.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://gitee.com/yadong.zhang/DBlog/issues/I98O8V; https://gitee.com/yadong.zhang/DBlog/issues/I98O8V
CVE: CVE-2024-29473
Published: 2024-03-20
Description: OneBlog v2.3.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Role Management module.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://gitee.com/yadong.zhang/DBlog/issues/I98O8V; https://gitee.com/yadong.zhang/DBlog/issues/I98O8V
CVE: CVE-2024-29474
Published: 2024-03-20
Description: OneBlog v2.3.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the User Management module.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://gitee.com/yadong.zhang/DBlog/issues/I98O8V; https://gitee.com/yadong.zhang/DBlog/issues/I98O8V
CVE: CVE-2024-2717
Published: 2024-03-20
Description: A vulnerability was found in Campcodes Complete Online DJ Booking System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/booking-search.php. The manipulation of the argument searchdata leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-257470 is the identifier assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/E1CHO/cve_hub/blob/main/Complete%20Online%20DJ%20Booking%20System/Complete%20Online%20DJ%20Booking%20System%20-%20vuln%206.pdf; https://vuldb.com/?ctiid.257470; https://vuldb.com/?id.257470
CVE: CVE-2024-2718
Published: 2024-03-20
Description: A vulnerability was found in Campcodes Complete Online DJ Booking System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/booking-bwdates-reports-details.php. The manipulation of the argument fromdate leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257471.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/E1CHO/cve_hub/blob/main/Complete%20Online%20DJ%20Booking%20System/Complete%20Online%20DJ%20Booking%20System%20-%20vuln%207.pdf; https://vuldb.com/?ctiid.257471; https://vuldb.com/?id.257471
CVE: CVE-2024-2719
Published: 2024-03-20
Description: A vulnerability classified as problematic has been found in Campcodes Complete Online DJ Booking System 1.0. Affected is an unknown function of the file /admin/admin-profile.php. The manipulation of the argument adminname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-257472.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/E1CHO/cve_hub/blob/main/Complete%20Online%20DJ%20Booking%20System/Complete%20Online%20DJ%20Booking%20System%20-%20vuln%208.pdf; https://vuldb.com/?ctiid.257472; https://vuldb.com/?id.257472
CVE: CVE-2024-24050
Published: 2024-03-20
Description: Cross Site Scripting (XSS) vulnerability in Sourcecodester Workout Journal App 1.0 allows attackers to run arbitrary code via parameters firstname and lastname in /add-user.php.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79
References: https://www.muratcagrialis.com/workout-journal-app-stored-xss-cve-2024-24050; https://www.muratcagrialis.com/workout-journal-app-stored-xss-cve-2024-24050
CVE: CVE-2024-29026
Published: 2024-03-20
Description: Owncast is an open source, self-hosted, decentralized, single user live video streaming and chat server. In versions 0.1.2 and prior, a lenient CORS policy allows attackers to make a cross origin request, reading privileged information. This can be used to leak the admin password. Commit 9215d9ba0f29d62201d3feea9e77dcd274581624 fixes this issue.
CVSS Score: 8.2 (HIGH)
CWE: CWE-352, CWE-697
References: https://github.com/owncast/owncast/blob/v0.1.2/router/middleware/auth.go#L32; https://github.com/owncast/owncast/commit/9215d9ba0f29d62201d3feea9e77dcd274581624; https://securitylab.github.com/advisories/GHSL-2023-261_Owncast/
CVE: CVE-2024-2720
Published: 2024-03-20
Description: A vulnerability classified as problematic was found in Campcodes Complete Online DJ Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/aboutus.php. The manipulation of the argument pagetitle leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-257473 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/E1CHO/cve_hub/blob/main/Complete%20Online%20DJ%20Booking%20System/Complete%20Online%20DJ%20Booking%20System%20-%20vuln%209.pdf; https://vuldb.com/?ctiid.257473; https://vuldb.com/?id.257473
CVE: CVE-2024-2443
Published: 2024-03-20
Description: A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance when configuring GeoJSON settings. Exploitation of this vulnerability required access to the GitHub Enterprise Server instance and access to the Management Console with the editor role. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.13 and was fixed in versions 3.8.17, 3.9.12, 3.10.9, 3.11.7, and 3.12.1. This vulnerability was reported via the GitHub Bug Bounty program.

CVSS Score: 9.1 (CRITICAL)
CWE: CWE-20
References: https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.9; https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.7; https://docs.github.com/en/enterprise-server@3.12/admin/release-notes#3.12.1
CVE: CVE-2024-2469
Published: 2024-03-20
Description: An attacker with an Administrator role in GitHub Enterprise Server could gain SSH root access via remote code execution. This vulnerability affected GitHub Enterprise Server version 3.8.0 and above and was fixed in version 3.8.17, 3.9.12, 3.10.9, 3.11.7 and 3.12.1. This vulnerability was reported via the GitHub Bug Bounty program.
CVSS Score: 8.0 (HIGH)
CWE: CWE-20
References: https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.9; https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.7; https://docs.github.com/en/enterprise-server@3.12/admin/release-notes#3.12.1
CVE: CVE-2024-28916
Published: 2024-03-21
Description: Xbox Gaming Services Elevation of Privilege Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-28916; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-28916
CVE: CVE-2024-2748
Published: 2024-03-21
Description: A Cross Site Request Forgery vulnerability was identified in GitHub Enterprise Server that allowed an attacker to execute unauthorized actions on behalf of an unsuspecting user. A mitigating factor is that user interaction is required. This vulnerability affected GitHub Enterprise Server 3.12.0 and was fixed in versions 3.12.1. This vulnerability was reported via the GitHub Bug Bounty program. 

CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://docs.github.com/en/enterprise-server@3.12/admin/release-notes/#3.12.1; https://docs.github.com/en/enterprise-server@3.12/admin/release-notes/#3.12.1
CVE: CVE-2020-26942
Published: 2024-03-21
Description: An issue discovered in Axigen Mail Server 10.3.x before 10.3.1.27 and 10.3.2.x before 10.3.3.1 allows unauthenticated attackers to submit a setAdminPassword operation request, subsequently setting a new arbitrary password for the admin account.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-306, CWE-284
References: https://www.axigen.com/knowledgebase/Axigen-WebAdmin-Authentication-Bypass-Vulnerability-CVE-2020-26942-_387.html; https://www.axigen.com/knowledgebase/Axigen-WebAdmin-Authentication-Bypass-Vulnerability-CVE-2020-26942-_387.html
CVE: CVE-2022-4963
Published: 2024-03-21
Description: A vulnerability was found in Folio Spring Module Core up to 1.1.5. It has been rated as critical. Affected by this issue is the function dropSchema of the file tenant/src/main/java/org/folio/spring/tenant/hibernate/HibernateSchemaService.java of the component Schema Name Handler. The manipulation leads to sql injection. Upgrading to version 2.0.0 is able to address this issue. The name of the patch is d374a5f77e6b58e36f0e0e4419be18b95edcd7ff. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-257516.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/folio-org/spring-module-core/commit/d374a5f77e6b58e36f0e0e4419be18b95edcd7ff; https://github.com/folio-org/spring-module-core/pull/39; https://github.com/folio-org/spring-module-core/releases/tag/v2.0.0
CVE: CVE-2023-35899
Published: 2024-03-21
Description: IBM Cloud Pak for Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents.  IBM X-Force ID:  259354.
CVSS Score: 7.0 (HIGH)
CWE: CWE-1236
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/259354; https://www.ibm.com/support/pages/node/7030357; https://exchange.xforce.ibmcloud.com/vulnerabilities/259354
CVE: CVE-2023-38825
Published: 2024-03-21
Description: SQL injection vulnerability in Vanderbilt REDCap before v.13.8.0 allows a remote attacker to obtain sensitive information via the password reset mechanism in MyCapMobileApp/update.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://github.com/ntrampham/REDCap; https://www.project-redcap.org/; https://github.com/ntrampham/REDCap
CVE: CVE-2023-49978
Published: 2024-03-21
Description: Incorrect access control in Customer Support System v1 allows non-administrator users to access administrative pages and execute actions reserved for administrators.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: https://github.com/geraldoalcantara/CVE-2023-49978; https://www.sourcecodester.com/php/14587/customer-support-system-using-phpmysqli-source-code.html; https://github.com/geraldoalcantara/CVE-2023-49978
CVE: CVE-2023-49979
Published: 2024-03-21
Description: A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without requiring authorization.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862, CWE-548
References: https://github.com/geraldoalcantara/CVE-2023-49979; https://www.sourcecodester.com/php/15653/best-student-result-management-system-project-source-code-php-and-mysql-free-download; https://github.com/geraldoalcantara/CVE-2023-49979
CVE: CVE-2023-49980
Published: 2024-03-21
Description: A directory listing vulnerability in Best Student Result Management System v1.0 allows attackers to list directories and sensitive files within the application without requiring authorization.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862, CWE-862
References: https://github.com/geraldoalcantara/CVE-2023-49980; https://www.sourcecodester.com/php/15653/best-student-result-management-system-project-source-code-php-and-mysql-free-download; https://github.com/geraldoalcantara/CVE-2023-49980
CVE: CVE-2023-49981
Published: 2024-03-21
Description: A directory listing vulnerability in School Fees Management System v1.0 allows attackers to list directories and sensitive files within the application without requiring authorization.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862, CWE-200
References: https://github.com/geraldoalcantara/CVE-2023-49981; https://www.sourcecodester.com/php/15697/school-fees-management-system-project-php-and-codeigniter-free-source-code.html; https://github.com/geraldoalcantara/CVE-2023-49981
CVE: CVE-2023-49982
Published: 2024-03-21
Description: Broken access control in the component /admin/management/users of School Fees Management System v1.0 allows attackers to escalate privileges and perform Administrative actions, including adding and deleting user accounts.
CVSS Score: 8.8 (HIGH)
CWE: CWE-863
References: https://github.com/geraldoalcantara/CVE-2023-49982; https://www.sourcecodester.com/php/15697/school-fees-management-system-project-php-and-codeigniter-free-source-code.html; https://github.com/geraldoalcantara/CVE-2023-49982
CVE: CVE-2023-49983
Published: 2024-03-21
Description: A cross-site scripting (XSS) vulnerability in the component /management/class of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/geraldoalcantara/CVE-2023-49983; https://www.sourcecodester.com/php/15697/school-fees-management-system-project-php-and-codeigniter-free-source-code.html; https://github.com/geraldoalcantara/CVE-2023-49983
CVE: CVE-2023-49984
Published: 2024-03-21
Description: A cross-site scripting (XSS) vulnerability in the component /management/settings of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/geraldoalcantara/CVE-2023-49984; https://www.sourcecodester.com/php/15697/school-fees-management-system-project-php-and-codeigniter-free-source-code.html; https://github.com/geraldoalcantara/CVE-2023-49984
CVE: CVE-2023-49985
Published: 2024-03-21
Description: A cross-site scripting (XSS) vulnerability in the component /management/class of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cname parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://github.com/geraldoalcantara/CVE-2023-49985; https://www.sourcecodester.com/php/15697/school-fees-management-system-project-php-and-codeigniter-free-source-code.html; https://github.com/geraldoalcantara/CVE-2023-49985
CVE: CVE-2023-6500
Published: 2024-03-21
Description: The Shariff Wrapper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'shariff' shortcode in all versions up to, and including, 4.6.9 due to insufficient input sanitization and output escaping on user supplied attributes such as 'secondarycolor' and 'maincolor'. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3030487%40shariff&new=3030487%40shariff&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/cac2a45e-f09e-4639-9a45-68d528a5094e?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3030487%40shariff&new=3030487%40shariff&sfp_email=&sfph_mail=
CVE: CVE-2024-0966
Published: 2024-03-21
Description: The Shariff Wrapper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'shariff' shortcode in all versions up to, and including, 4.6.9 due to insufficient input sanitization and output escaping on user supplied attributes like 'info_text'. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page and clicks the information icon.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/shariff/trunk/services/shariff-info.php#L46; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3030487%40shariff&new=3030487%40shariff&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/8588f9e8-441c-4b9e-bd78-8526d8c28fa3?source=cve
CVE: CVE-2024-1142
Published: 2024-03-21
Description: Path Traversal in Sonatype IQ Server from version 143 allows remote authenticated attackers to overwrite or delete files via a specially crafted request. Version 171 fixes this issue.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-22
References: https://support.sonatype.com/hc/en-us/articles/[PII_REDACTED]8739-CVE-2024-1142-Sonatype-IQ-Server-Path-Traversal-2024-03-06; https://support.sonatype.com/hc/en-us/articles/[PII_REDACTED]8739-CVE-2024-1142-Sonatype-IQ-Server-Path-Traversal-2024-03-06
CVE: CVE-2024-1202
Published: 2024-03-21
Description: Authentication Bypass by Primary Weakness vulnerability in XPodas Octopod allows Authentication Bypass.This issue affects Octopod: before v1. 

NOTE: The vendor was contacted and it was learned that the product is not supported.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-305
References: https://www.usom.gov.tr/bildirim/tr-24-0174; https://www.usom.gov.tr/bildirim/tr-24-0174
CVE: CVE-2024-1213
Published: 2024-03-21
Description: The Easy Social Feed – Social Photos Gallery – Post Feed – Like Box plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.5.4. This is due to missing or incorrect nonce validation on the esf_insta_save_access_token and efbl_save_facebook_access_token functions. This makes it possible for unauthenticated attackers to connect their facebook and instagram pages to the site via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3047064%40easy-facebook-likebox&new=3047064%40easy-facebook-likebox&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/262dcea7-3ac4-43ee-90d7-91f200c3496c?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3047064%40easy-facebook-likebox&new=3047064%40easy-facebook-likebox&sfp_email=&sfph_mail=
CVE: CVE-2024-1214
Published: 2024-03-21
Description: The Easy Social Feed – Social Photos Gallery – Post Feed – Like Box plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.5.4. This is due to missing or incorrect nonce validation on the save_groups_list function. This makes it possible for unauthenticated attackers to disconnect a site's facebook or instagram page/group connection via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://plugins.trac.wordpress.org/browser/easy-facebook-likebox/trunk/facebook/admin/class-easy-facebook-likebox-admin.php?rev=3047064; https://www.wordfence.com/threat-intel/vulnerabilities/id/aaf62045-b9ce-40d7-92b3-7ab683e5a08c?source=cve; https://plugins.trac.wordpress.org/browser/easy-facebook-likebox/trunk/facebook/admin/class-easy-facebook-likebox-admin.php?rev=3047064
CVE: CVE-2024-1278
Published: 2024-03-21
Description: The Easy Social Feed – Social Photos Gallery – Post Feed – Like Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'efb_likebox' shortcode in all versions up to, and including, 6.5.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/easy-facebook-likebox/tags/6.5.4/facebook/frontend/easy-facebook-likebox.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/b76bddf3-96ad-4bb0-a37b-33b451da6713?source=cve; https://plugins.trac.wordpress.org/browser/easy-facebook-likebox/tags/6.5.4/facebook/frontend/easy-facebook-likebox.php
CVE: CVE-2024-1326
Published: 2024-03-21
Description: The Jeg Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via HTML Tag attributes in all versions up to, and including, 2.6.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. 	CVE-2024-29101 is likely a duplicate of this issue.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/jeg-elementor-kit/trunk/class/elements/views/class-post-block-view.php#L375; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3038362%40jeg-elementor-kit&new=3038362%40jeg-elementor-kit&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/d108cb36-c072-483e-9746-15b8e7a880c3?source=cve