deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-44153
Published: 2021-12-13
Description: An issue was discovered in Reprise RLM 14.2. When editing the license file, it is possible for an admin user to enable an option to run arbitrary executables, as demonstrated by an ISV demo "C:\Windows\System32\calc.exe" entry. An attacker can exploit this to run a malicious binary on startup, or when triggering the Reread/Restart Servers function on the webserver. (Exploitation does not require CVE-2018-15573, because the license file is meant to be changed in the application.)
CVSS Score: 7.2 (HIGH)
References: http://packetstormsecurity.com/files/165194/Reprise-License-Manager-14.2-Remote-Binary-Execution.html; https://reprisesoftware.com/admin/rlm-admin-download.php?&euagree=yes; http://packetstormsecurity.com/files/165194/Reprise-License-Manager-14.2-Remote-Binary-Execution.html
CVE: CVE-2021-44154
Published: 2021-12-13
Description: An issue was discovered in Reprise RLM 14.2. By using an admin account, an attacker can write a payload to /goform/edit_opt, which will then be triggered when running the diagnostics (via /goform/diagnostics_doit), resulting in a buffer overflow.
CVSS Score: 7.2 (HIGH)
CWE: CWE-120
References: http://packetstormsecurity.com/files/165193/Reprise-License-Manager-14.2-Buffer-Overflow.html; https://reprisesoftware.com/admin/rlm-admin-download.php?&euagree=yes; http://packetstormsecurity.com/files/165193/Reprise-License-Manager-14.2-Buffer-Overflow.html
CVE: CVE-2021-44155
Published: 2021-12-13
Description: An issue was discovered in /goform/login_process in Reprise RLM 14.2. When an attacker attempts to login, the response if a username is valid includes Login Failed, but does not include this string if the username is invalid. This allows an attacker to enumerate valid users.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-209
References: http://packetstormsecurity.com/files/165182/Reprise-License-Manager-14.2-User-Enumeration.html; https://reprisesoftware.com/admin/rlm-admin-download.php?&euagree=yes; https://www.reprisesoftware.com/RELEASE_NOTES
CVE: CVE-2021-20865
Published: 2021-12-13
Description: Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5.11 contain a missing authorization vulnerability in browsing database which may allow a user to browse unauthorized data via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://jvn.jp/en/jp/JVN09136401/index.html; https://wordpress.org/plugins/advanced-custom-fields/; https://www.advancedcustomfields.com/
CVE: CVE-2021-20866
Published: 2021-12-13
Description: Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5.11 contain a missing authorization vulnerability in obtaining the user list which may allow a user to obtain the unauthorized information via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://jvn.jp/en/jp/JVN09136401/index.html; https://wordpress.org/plugins/advanced-custom-fields/; https://www.advancedcustomfields.com/
CVE: CVE-2021-20867
Published: 2021-12-13
Description: Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5.11 contain a missing authorization vulnerability in moving the field group which may allow a user to move the unauthorized field group via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://jvn.jp/en/jp/JVN09136401/index.html; https://wordpress.org/plugins/advanced-custom-fields/; https://www.advancedcustomfields.com/
CVE: CVE-2021-24705
Published: 2021-12-13
Description: The NEX-Forms WordPress plugin before 8.4.3 does not have CSRF checks in place when editing a form, and does not escape some of its settings as well as form fields before outputting them in attributes. This could allow attackers to make a logged in admin edit arbitrary forms with Cross-Site Scripting payloads in them
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/eca883d8-9499-4dbd-8fe1-4447fc2ca28a; https://wpscan.com/vulnerability/eca883d8-9499-4dbd-8fe1-4447fc2ca28a
CVE: CVE-2021-24747
Published: 2021-12-13
Description: The SEO Booster WordPress plugin before 3.8 allows for authenticated SQL injection via the "fn_my_ajaxified_dataloader_ajax" AJAX request as the $_REQUEST['order'][0]['dir'] parameter is not properly escaped leading to blind and error-based SQL injections.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/changeset/2637115; https://wpscan.com/vulnerability/40849d93-8949-4bd0-b60e-c0330b385fea; https://plugins.trac.wordpress.org/changeset/2637115
CVE: CVE-2021-24756
Published: 2021-12-13
Description: The WP System Log WordPress plugin before 1.0.21 does not sanitise, validate and escape the IP address retrieved from login requests before outputting them in the admin dashboard, which could allow unauthenticated attacker to perform Cross-Site Scripting attacks against admins viewing the logs.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/0cea0717-8f54-4f1c-b3ee-aff7dd91bf59; https://wpscan.com/vulnerability/0cea0717-8f54-4f1c-b3ee-aff7dd91bf59
CVE: CVE-2021-24771
Published: 2021-12-13
Description: The Inspirational Quote Rotator WordPress plugin through 1.0.0 does not sanitize and escape some of its quote fields when adding/editing a quote as admin, leading to Stored Cross-Site scripting issues when the quote is output in the "Quotes list" even when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/a6d57fda-79a7-4bf8-b18e-8cf0a4efd1b3; https://wpscan.com/vulnerability/a6d57fda-79a7-4bf8-b18e-8cf0a4efd1b3
CVE: CVE-2021-24780
Published: 2021-12-13
Description: The Single Post Exporter WordPress plugin through 1.1.1 does not have CSRF checks when saving its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and give access to the export feature to any role such as subscriber. Subscriber users would then be able to export an arbitrary post/page (such as private and password protected) via a direct URL
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://wpscan.com/vulnerability/8764e550-4127-471e-84e6-494d6106a3b0; https://wpscan.com/vulnerability/8764e550-4127-471e-84e6-494d6106a3b0
CVE: CVE-2021-24782
Published: 2021-12-13
Description: The Flex Local Fonts WordPress plugin through 1.0.0 does not escape the Class Name field when adding a font, which could allow hight privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/5cd846df-1d8b-488d-a691-b76850e8687a; https://wpscan.com/vulnerability/5cd846df-1d8b-488d-a691-b76850e8687a
CVE: CVE-2021-24784
Published: 2021-12-13
Description: The WP Admin Logo Changer WordPress plugin through 1.0 does not have CSRF check when saving its settings, which could allow attackers to make a logged in admin update them via a CSRF attack.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/2e9132b5-f8cd-4acc-839c-188d79277270; https://wpscan.com/vulnerability/2e9132b5-f8cd-4acc-839c-188d79277270
CVE: CVE-2021-24790
Published: 2021-12-13
Description: The Contact Form Advanced Database WordPress plugin through 1.0.8 does not have any authorisation as well as CSRF checks in its delete_cf7_data and export_cf7_data AJAX actions, available to any authenticated users, which could allow users with a role as low as subscriber to call them. The delete_cf7_data would lead to arbitrary metadata deletion, as well as PHP Object Injection if a suitable gadget chain is present in another plugin, as user data is passed to the maybe_unserialize() function without being first validated.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862, CWE-352, CWE-862
References: https://wpscan.com/vulnerability/adc5dd9b-0781-4cea-8cc5-2c10ac35b968; https://wpscan.com/vulnerability/adc5dd9b-0781-4cea-8cc5-2c10ac35b968
CVE: CVE-2021-24792
Published: 2021-12-13
Description: The Shiny Buttons WordPress plugin through 1.1.0 does not have any authorisation and CSRF in place when saving a template (wpbtn_save_template function hooked to the init action), nor sanitise and escape them before outputting them in the admin dashboard, which allow unauthenticated users to add a malicious template and lead to Stored Cross-Site Scripting issues.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/29514d8e-9d1c-4fb6-b378-f6b7374989ca; https://wpscan.com/vulnerability/29514d8e-9d1c-4fb6-b378-f6b7374989ca
CVE: CVE-2021-24795
Published: 2021-12-13
Description: The Filter Portfolio Gallery WordPress plugin through 1.5 is lacking Cross-Site Request Forgery (CSRF) check when deleting a Gallery, which could allow attackers to make a logged in admin delete arbitrary Gallery.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/ef3c1d4f-53a4-439e-9434-b3b4adb687a4; https://wpscan.com/vulnerability/ef3c1d4f-53a4-439e-9434-b3b4adb687a4
CVE: CVE-2021-24817
Published: 2021-12-13
Description: The Ultimate NoFollow WordPress plugin through 1.4.8 does not sanitise and escape the href attribute of its shortcodes, allowing users with a role as low as contributor to perform Cross-Site Scripting attacks
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/ccb27d2e-2d2a-40d3-ba7e-bcd5e5012a9a; https://wpscan.com/vulnerability/ccb27d2e-2d2a-40d3-ba7e-bcd5e5012a9a
CVE: CVE-2021-24818
Published: 2021-12-13
Description: The WP Limits WordPress plugin through 1.0 does not have CSRF check when saving its settings, allowing attacker to make a logged in admin change them, which could make the blog unstable by setting low values
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/7cd524ed-5eb9-4d6b-b4d2-3d4be6b57879; https://wpscan.com/vulnerability/7cd524ed-5eb9-4d6b-b4d2-3d4be6b57879
CVE: CVE-2021-24819
Published: 2021-12-13
Description: The Page/Post Content Shortcode WordPress plugin through 1.0 does not have proper authorisation in place, allowing users with a role as low as contributor to access draft/private/password protected/trashed posts/pages they should not be allowed to, including posts created by other users such as admins and editors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://wpscan.com/vulnerability/c97b218c-b430-4301-884f-f64d0dd08f07; https://wpscan.com/vulnerability/c97b218c-b430-4301-884f-f64d0dd08f07
CVE: CVE-2021-24836
Published: 2021-12-13
Description: The Temporary Login Without Password WordPress plugin before 1.7.1 does not have authorisation and CSRF checks when updating its settings, which could allows any logged-in users, such as subscribers to update them
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-862, CWE-352, CWE-862
References: https://wpscan.com/vulnerability/15eed13f-3195-4f5d-8933-36695c830f4f; https://wpscan.com/vulnerability/15eed13f-3195-4f5d-8933-36695c830f4f
CVE: CVE-2021-24845
Published: 2021-12-13
Description: The Improved Include Page WordPress plugin through 1.2 allows passing shortcode attributes with post_type & post_status which can be used to retrieve arbitrary content. This way, users with a role as low as Contributor can gain access to content they are not supposed to.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: https://wpscan.com/vulnerability/ab857454-7c7c-454d-9c7f-1db767961e5f; https://wpscan.com/vulnerability/ab857454-7c7c-454d-9c7f-1db767961e5f
CVE: CVE-2021-24848
Published: 2021-12-13
Description: The mediamaticAjaxRenameCategory AJAX action of the Mediamatic WordPress plugin before 2.8.1, available to any authenticated user, does not sanitise the categoryID parameter before using it in a SQL statement, leading to an SQL injection
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://wpscan.com/vulnerability/156d4faf-7d34-4d9f-a654-9064d4eb3aea; https://wpscan.com/vulnerability/156d4faf-7d34-4d9f-a654-9064d4eb3aea
CVE: CVE-2021-24855
Published: 2021-12-13
Description: The Display Post Metadata WordPress plugin before 1.5.0 adds a shortcode to print out custom fields, however their content is not sanitised or escaped which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/49328498-d3a0-4d27-8a52-24054b5e42f3; https://wpscan.com/vulnerability/49328498-d3a0-4d27-8a52-24054b5e42f3
CVE: CVE-2021-24857
Published: 2021-12-13
Description: The ToTop Link WordPress plugin through 1.7.1 passes base64 encoded user input to the unserialize() PHP function, which could lead to PHP Object injection if a plugin installed on the blog has a suitable gadget chain.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://wpscan.com/vulnerability/518204d8-fbf5-4bfa-9db5-835f908f8d8e; https://wpscan.com/vulnerability/518204d8-fbf5-4bfa-9db5-835f908f8d8e
CVE: CVE-2021-24859
Published: 2021-12-13
Description: The User Meta Shortcodes WordPress plugin through 0.5 registers a shortcode that allows any user with a role as low as contributor to access other users metadata by specifying the user login as a parameter. This makes the WP instance vulnerable to data extrafiltration, including password hashes
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: https://wpscan.com/vulnerability/958f44a5-07e7-4349-9212-2a039a082ba0; https://wpscan.com/vulnerability/958f44a5-07e7-4349-9212-2a039a082ba0
CVE: CVE-2021-24861
Published: 2021-12-13
Description: The Quotes Collection WordPress plugin through 2.5.2 does not validate and escape the bulkcheck parameter before using it in a SQL statement, leading to a SQL injection
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://wpscan.com/vulnerability/9a50d5d0-7a50-47d1-a8f9-e0eb217919d9; https://wpscan.com/vulnerability/9a50d5d0-7a50-47d1-a8f9-e0eb217919d9
CVE: CVE-2021-24863
Published: 2021-12-13
Description: The WP Block and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection Plugin StopBadBots WordPress plugin before 6.67 does not sanitise and escape the User Agent before using it in a SQL statement to save it, leading to a SQL injection
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://wpscan.com/vulnerability/1e4dd002-6c96-44f9-bd55-61359265f7ae; https://wpscan.com/vulnerability/1e4dd002-6c96-44f9-bd55-61359265f7ae
CVE: CVE-2021-24871
Published: 2021-12-13
Description: The Get Custom Field Values WordPress plugin before 4.0.1 does not escape custom fields before outputting them in the page, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/28007c80-dc14-4987-a52c-f2a05cfe5905; https://wpscan.com/vulnerability/28007c80-dc14-4987-a52c-f2a05cfe5905
CVE: CVE-2021-24872
Published: 2021-12-13
Description: The Get Custom Field Values WordPress plugin before 4.0 allows users with a role as low as Contributor to access other posts metadata without validating the permissions. Eg. contributors can access admin posts metadata.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863
References: https://wpscan.com/vulnerability/ec23734a-5ea7-4e46-aba9-3dee4e6dffb6; https://wpscan.com/vulnerability/ec23734a-5ea7-4e46-aba9-3dee4e6dffb6
CVE: CVE-2021-24896
Published: 2021-12-13
Description: The Caldera Forms WordPress plugin before 1.9.5 does not sanitise and escape the Form Name before outputting it in attributes, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/2c469e8b-c761-460b-b31d-9219a43006ff; https://wpscan.com/vulnerability/2c469e8b-c761-460b-b31d-9219a43006ff
CVE: CVE-2021-24922
Published: 2021-12-13
Description: The Pixel Cat WordPress plugin before 2.6.2 does not have CSRF check when saving its settings, and did not sanitise as well as escape some of them, which could allow attacker to make a logged in admin change them and perform Cross-Site Scripting attacks
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-352
References: https://wpscan.com/vulnerability/399ffd65-f3c0-4fbe-a83a-2a620976aad2; https://wpscan.com/vulnerability/399ffd65-f3c0-4fbe-a83a-2a620976aad2
CVE: CVE-2021-24925
Published: 2021-12-13
Description: The Modern Events Calendar Lite WordPress plugin before 6.1.5 does not sanitise and escape the current_month_divider parameter of its mec_list_load_more AJAX call (available to both unauthenticated and authenticated users) before outputting it back in the response, leading to a Reflected Cross-Site Scripting issue
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/82[PII_REDACTED]-462d-b886-a8ef5ee9adb0; https://wpscan.com/vulnerability/82[PII_REDACTED]-462d-b886-a8ef5ee9adb0
CVE: CVE-2021-24932
Published: 2021-12-13
Description: The Auto Featured Image (Auto Post Thumbnail) WordPress plugin before 3.9.3 does not sanitise and escape the post_id parameter before outputting back in an admin page within a JS block, leading to a Reflected Cross-Site Scripting issue.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/575c02ea-4fe9-428c-bbc8-e161af679b6d; https://wpscan.com/vulnerability/575c02ea-4fe9-428c-bbc8-e161af679b6d
CVE: CVE-2021-24945
Published: 2021-12-13
Description: The Like Button Rating ♥ LikeBtn WordPress plugin before 2.6.38 does not have any authorisation and CSRF checks in the likebtn_export_votes AJAX action, which could allow any authenticated user, such as subscriber, to get a list of email and IP addresses of people who liked content from the blog.
CVSS Score: 8.0 (HIGH)
CWE: CWE-200, CWE-352
References: https://wpscan.com/vulnerability/d7618061-a7fa-4da4-9384-be19bc5e8548; https://wpscan.com/vulnerability/d7618061-a7fa-4da4-9384-be19bc5e8548
CVE: CVE-2021-24946
Published: 2021-12-13
Description: The Modern Events Calendar Lite WordPress plugin before 6.1.5 does not sanitise and escape the time parameter before using it in a SQL statement in the mec_load_single_page AJAX action, available to unauthenticated users, leading to an unauthenticated SQL injection issue
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: http://packetstormsecurity.com/files/165742/WordPress-Modern-Events-Calendar-6.1-SQL-Injection.html; https://github.com/Hacker5preme/Exploits/tree/main/Wordpress/CVE-2021-24946; https://wpscan.com/vulnerability/09871847-1d6a-4dfe-8a8c-f2f53ff87445
CVE: CVE-2021-24951
Published: 2021-12-13
Description: The LearnPress WordPress plugin before 4.1.4 does not sanitise, validate and escape the id parameter before using it in SQL statements when duplicating course/lesson/quiz/question, leading to SQL Injections issues
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://wpscan.com/vulnerability/0a16ddc5-5ab9-4a8f-86b5-41edcbeafc50; https://wpscan.com/vulnerability/0a16ddc5-5ab9-4a8f-86b5-41edcbeafc50
CVE: CVE-2021-24954
Published: 2021-12-13
Description: The User Registration, Login Form, User Profile & Membership WordPress plugin before 3.2.3 does not sanitise and escape the ppress_cc_data parameter before outputting it back in an attribute of an admin dashboard page, leading to a Reflected Cross-Site Scripting issue
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2626573/; https://wpscan.com/vulnerability/54ff0db8-1d9e-4e67-b71a-142a9e5ed851; https://plugins.trac.wordpress.org/changeset/2626573/
CVE: CVE-2021-24955
Published: 2021-12-13
Description: The User Registration, Login Form, User Profile & Membership WordPress plugin before 3.2.3 does not escape the data parameter of the pp_get_forms_by_builder_type AJAX action before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting issue
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2626573/; https://wpscan.com/vulnerability/e8005d4d-41c3-451d-b85a-2626decaa080; https://plugins.trac.wordpress.org/changeset/2626573/
CVE: CVE-2021-24970
Published: 2021-12-13
Description: The All-in-One Video Gallery WordPress plugin before 2.5.0 does not sanitise and validate the tab parameter before using it in a require statement in the admin dashboard, leading to a Local File Inclusion issue
CVSS Score: 7.2 (HIGH)
CWE: CWE-22
References: https://wpscan.com/vulnerability/9b15d47e-43b6-49a8-b2c3-b99c92101e10; https://wpscan.com/vulnerability/9b15d47e-43b6-49a8-b2c3-b99c92101e10
CVE: CVE-2021-24972
Published: 2021-12-13
Description: The Pixel Cat WordPress plugin before 2.6.3 does not escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/b960cb36-62de-4b9f-a35d-144a34a4c63d; https://wpscan.com/vulnerability/b960cb36-62de-4b9f-a35d-144a34a4c63d
CVE: CVE-2021-42546
Published: 2021-12-13
Description: Insufficient Input Validation in the search functionality of Wordpress plugin Use-Your-Drive prior to 1.18.3 allows unauthenticated user to craft a reflected Cross-Site Scripting attack.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.wpcloudplugins.com/wp-content/plugins/use-your-drive/_documentation/index.html#releasenotes; https://www.wpcloudplugins.com/wp-content/plugins/use-your-drive/_documentation/index.html#releasenotes
CVE: CVE-2021-42547
Published: 2021-12-13
Description: Insufficient Input Validation in the search functionality of Wordpress plugin Out-of-the-Box prior to 1.20.3 allows unauthenticated user to craft a reflected Cross-Site Scripting attack.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.wpcloudplugins.com/wp-content/plugins/out-of-the-box/_documentation/index.html#releasenotes; https://www.wpcloudplugins.com/wp-content/plugins/out-of-the-box/_documentation/index.html#releasenotes
CVE: CVE-2021-42548
Published: 2021-12-13
Description: Insufficient Input Validation in the search functionality of Wordpress plugin Share-one-Drive prior to 1.15.3 allows unauthenticated user to craft a reflected Cross-Site Scripting attack.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.wpcloudplugins.com/wp-content/plugins/share-one-drive/_documentation/index.html#releasenotes; https://www.wpcloudplugins.com/wp-content/plugins/share-one-drive/_documentation/index.html#releasenotes
CVE: CVE-2021-42549
Published: 2021-12-13
Description: Insufficient Input Validation in the search functionality of Wordpress plugin Lets-Box prior to 1.15.3 allows unauthenticated user to craft a reflected Cross-Site Scripting attack.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.wpcloudplugins.com/wp-content/plugins/lets-box/_documentation/index.html#releasenotes; https://www.wpcloudplugins.com/wp-content/plugins/lets-box/_documentation/index.html#releasenotes
CVE: CVE-2021-43117
Published: 2021-12-13
Description: fastadmin v1.2.1 is affected by a file upload vulnerability which allows arbitrary code execution through shell access.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/ambitiousleader/some-automated-script/issues/1; https://github.com/ambitiousleader/some-automated-script/issues/1
CVE: CVE-2021-36169
Published: 2021-12-13
Description: A Hidden Functionality in Fortinet FortiOS 7.x before 7.0.1, FortiOS 6.4.x before 6.4.7 allows attacker to Execute unauthorized code or commands via specific hex read/write operations.
CVSS Score: 4.2 (MEDIUM)
References: https://fortiguard.com/advisory/FG-IR-21-091; https://fortiguard.com/advisory/FG-IR-21-091