deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-44020
Published: 2022-10-30
Description: An issue was discovered in OpenStack Sushy-Tools through 0.21.0 and VirtualBMC through 2.2.2. Changing the boot device configuration with these packages removes password protection from the managed libvirt XML domain. NOTE: this only affects an "unsupported, production-like configuration."
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-281, CWE-281
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GAD7QJIUWPCKJIGYP7PPHH5DILOEONFE/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEQVJF3OQGSDCSQTQQSC54JEGLMSNB4Q/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QMSUGS4B6EBRHBJMTRXL5RIKJTZTEMJC/
CVE: CVE-2022-44022
Published: 2022-10-30
Description: PwnDoc through 0.5.3 might allow remote attackers to identify valid user account names by leveraging response timings for authentication attempts.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-307
References: https://cve.nstsec.com/cve-2022-44022; https://github.com/pwndoc/pwndoc/issues/381; https://cve.nstsec.com/cve-2022-44022
CVE: CVE-2022-44023
Published: 2022-10-30
Description: PwnDoc through 0.5.3 might allow remote attackers to identify disabled user account names by leveraging response messages for authentication attempts.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-307
References: https://cve.nstsec.com/cve-2022-44023; https://github.com/pwndoc/pwndoc/issues/382; https://cve.nstsec.com/cve-2022-44023
CVE: CVE-2022-44032
Published: 2022-10-30
Description: An issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/cm4000_cs.c has a race condition and resultant use-after-free if a physically proximate attacker removes a PCMCIA device while calling open(), aka a race condition between cmm_open() and cm4000_detach().
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9b12f050c76f090cc6d0aebe0ef76fed79ec3f15; https://lore.kernel.org/lkml/[PII_REDACTED]0834.GA110086%40ubuntu/; https://lore.kernel.org/lkml/[PII_REDACTED]0701.GA302806%40ubuntu/
CVE: CVE-2022-44033
Published: 2022-10-30
Description: An issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/cm4040_cs.c has a race condition and resultant use-after-free if a physically proximate attacker removes a PCMCIA device while calling open(), aka a race condition between cm4040_open() and reader_detach().
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-362
References: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9b12f050c76f090cc6d0aebe0ef76fed79ec3f15; https://lore.kernel.org/lkml/[PII_REDACTED]0834.GA110086%40ubuntu/; https://lore.kernel.org/lkml/[PII_REDACTED]0457.GA302681%40ubuntu/
CVE: CVE-2022-44034
Published: 2022-10-30
Description: An issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/scr24x_cs.c has a race condition and resultant use-after-free if a physically proximate attacker removes a PCMCIA device while calling open(), aka a race condition between scr24x_open() and scr24x_remove().
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-362
References: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9b12f050c76f090cc6d0aebe0ef76fed79ec3f15; https://lore.kernel.org/lkml/[PII_REDACTED]0333.GA188358%40ubuntu/; https://lore.kernel.org/lkml/[PII_REDACTED]1825.GA313940%40ubuntu/
CVE: CVE-2022-40617
Published: 2022-10-31
Description: strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that contains a CRL/OCSP URL that points to a server (under the attacker's control) that doesn't properly respond but (for example) just does nothing after the initial TCP handshake, or sends an excessive amount of application data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J3GAYIOCSLU57C45CO4UE4IV4JZE4W3L/; https://www.strongswan.org/blog/2022/10/03/strongswan-vulnerability-%28cve-2022-40617%29.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J3GAYIOCSLU57C45CO4UE4IV4JZE4W3L/
CVE: CVE-2022-39021
Published: 2022-10-31
Description: U-Office Force login function has an Open Redirect vulnerability. An unauthenticated remote attacker can exploit this vulnerability to redirect user to arbitrary website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://www.twcert.org.tw/tw/cp-132-6636-a35ed-1.html; https://www.twcert.org.tw/tw/cp-132-6636-a35ed-1.html
CVE: CVE-2022-39022
Published: 2022-10-31
Description: U-Office Force Download function has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to download arbitrary system file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://www.twcert.org.tw/tw/cp-132-6637-eed19-1.html; https://www.twcert.org.tw/tw/cp-132-6637-eed19-1.html
CVE: CVE-2022-39023
Published: 2022-10-31
Description: U-Office Force Download function has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to download arbitrary system file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://www.twcert.org.tw/tw/cp-132-6638-08596-1.html; https://www.twcert.org.tw/tw/cp-132-6638-08596-1.html
CVE: CVE-2022-39024
Published: 2022-10-31
Description: U-Office Force Bulletin function has insufficient filtering for special characters. An unauthenticated remote attacker can exploit this vulnerability to inject JavaScript and perform XSS (Reflected Cross-Site Scripting) attack.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.twcert.org.tw/tw/cp-132-6639-fad13-1.html; https://www.twcert.org.tw/tw/cp-132-6639-fad13-1.html
CVE: CVE-2022-39025
Published: 2022-10-31
Description: U-Office Force PrintMessage function has insufficient filtering for special characters. An unauthenticated remote attacker can exploit this vulnerability to inject JavaScript and perform XSS (Reflected Cross-Site Scripting) attack.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.twcert.org.tw/tw/cp-132-6640-e74a3-1.html; https://www.twcert.org.tw/tw/cp-132-6640-e74a3-1.html
CVE: CVE-2022-39026
Published: 2022-10-31
Description: U-Office Force UserDefault page has insufficient filtering for special characters in the HTTP header fields. A remote attacker with general user privilege can exploit this vulnerability to inject JavaScript and perform XSS (Stored Cross-Site Scripting) attack.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.twcert.org.tw/tw/cp-132-6641-55796-1.html; https://www.twcert.org.tw/tw/cp-132-6641-55796-1.html
CVE: CVE-2022-39027
Published: 2022-10-31
Description: U-Office Force Forum function has insufficient filtering for special characters. A remote attacker with general user privilege can inject JavaScript and perform XSS (Stored Cross-Site Scripting) attack.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.twcert.org.tw/tw/cp-132-6642-bf567-1.html; https://www.twcert.org.tw/tw/cp-132-6642-bf567-1.html
CVE: CVE-2022-40739
Published: 2022-10-31
Description: Ragic report generation page has insufficient filtering for special characters. A remote attacker with general user privilege can inject JavaScript to perform XSS (Reflected Cross-Site Scripting) attack.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.twcert.org.tw/tw/cp-132-6645-77bf8-1.html; https://www.twcert.org.tw/tw/cp-132-6645-77bf8-1.html
CVE: CVE-2022-40741
Published: 2022-10-31
Description: Mail SQR Expert’s specific function has insufficient filtering for special characters. An unauthenticated remote attacker can exploit this vulnerability to perform arbitrary system command and disrupt service.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://www.twcert.org.tw/tw/cp-132-6643-89bfa-1.html; https://www.twcert.org.tw/tw/cp-132-6643-89bfa-1.html
CVE: CVE-2022-40742
Published: 2022-10-31
Description: Mail SQR Expert system has a Local File Inclusion vulnerability. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary PHP file with .asp file extension under specific system paths, to access and modify partial system information but does not affect service availability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://www.twcert.org.tw/tw/cp-132-6644-d7aac-1.html; https://www.twcert.org.tw/tw/cp-132-6644-d7aac-1.html
CVE: CVE-2022-3765
Published: 2022-10-31
Description: Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.8.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/thorsten/phpmyfaq/commit/372428d02a08e90b3a253ba5c506cda84581a5af; https://huntr.dev/bounties/613143a1-8e51-449a-b[PII_REDACTED]8835d; https://github.com/thorsten/phpmyfaq/commit/372428d02a08e90b3a253ba5c506cda84581a5af
CVE: CVE-2022-3766
Published: 2022-10-31
Description: Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.8.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/thorsten/phpmyfaq/commit/c7904f2236c6c0dd64c2226b90c30af0f7e5a72d; https://huntr.dev/bounties/d9666520-4ff5-43bb-aacf-50c8e5570983; https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2022-3766.md
CVE: CVE-2021-40661
Published: 2022-10-31
Description: A remote, unauthenticated, directory traversal vulnerability was identified within the web interface used by IND780 Advanced Weighing Terminals Build 8.0.07 March 19, 2018 (SS Label 'IND780_8.0.07'), Version 7.2.10 June 18, 2012 (SS Label 'IND780_7.2.10'). It was possible to traverse the folders of the affected host by providing a traversal path to the 'webpage' parameter in AutoCE.ini This could allow a remote unauthenticated adversary to access additional files on the affected system. This could also allow the adversary to perform further enumeration against the affected host to identify the versions of the systems in use, in order to launch further attacks in future.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://sidsecure.au/blog/cve-2021-40661/?_sm_pdc=1&_sm_rid=MRRqb4KBDnjBMJk24b40LMS3SKqPMqb4KVn32Kr; https://www.mt.com/au/en/home/products/Industrial_Weighing_Solutions/Terminals-and-Controllers/terminals-bench-floor-scales/advanced-bench-floor-applications/IND780/IND780_.html#overviewpm; https://sidsecure.au/blog/cve-2021-40661/?_sm_pdc=1&_sm_rid=MRRqb4KBDnjBMJk24b40LMS3SKqPMqb4KVn32Kr
CVE: CVE-2022-37620
Published: 2022-10-31
Description: A Regular Expression Denial of Service (ReDoS) flaw was found in kangax html-minifier 4.0.0 because of the reCustomIgnore regular expression.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333, CWE-1333
References: https://github.com/kangax/html-minifier/blob/51ce10f4daedb1de483ffbcccecc41be1c873da2/src/htmlminifier.js#L1338; https://github.com/kangax/html-minifier/blob/51ce10f4daedb1de483ffbcccecc41be1c873da2/src/htmlminifier.js#L294; https://github.com/kangax/html-minifier/issues/1135
CVE: CVE-2022-37623
Published: 2022-10-31
Description: Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the shimPath variable in resolve-shims.js.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1321, CWE-1321
References: https://github.com/thlorenz/browserify-shim/blob/464b32bbe142664cd[PII_REDACTED]f6c738ea3de8f/lib/resolve-shims.js#L158; https://github.com/thlorenz/browserify-shim/blob/464b32bbe142664cd[PII_REDACTED]f6c738ea3de8f/lib/resolve-shims.js#L94; https://github.com/thlorenz/browserify-shim/issues/248
CVE: CVE-2022-40487
Published: 2022-10-31
Description: ProcessWire v3.0.200 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via the Search Users and Search Pages function. These vulnerabilities allow attackers to execute arbitrary web scripts or HTML via injection of a crafted payload.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://processwire.com; https://gist.github.com/filipaze/32ab8683af8d[PII_REDACTED]4e361b6e86; http://processwire.com
CVE: CVE-2022-40488
Published: 2022-10-31
Description: ProcessWire v3.0.200 was discovered to contain a Cross-Site Request Forgery (CSRF).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352, CWE-352
References: http://processwire.com; https://gist.github.com/filipaze/76138289ded98aa45dfcd939a8afd331; http://processwire.com
CVE: CVE-2020-21016
Published: 2022-10-31
Description: D-Link DIR-846 devices with firmware 100A35 allow remote attackers to execute arbitrary code as root via HNAP1/control/SetGuestWLanSettings.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/dahua966/Routers-vuls/blob/master/DIR-846/GuestWLanSetting_RCE.md; https://www.dlink.com/en/security-bulletin/; https://github.com/dahua966/Routers-vuls/blob/master/DIR-846/GuestWLanSetting_RCE.md
CVE: CVE-2022-3770
Published: 2022-10-31
Description: A vulnerability classified as critical was found in Yunjing CMS. This vulnerability affects unknown code of the file /index/user/upload_img.html. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-212500.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-266
References: https://github.com/swzaq/swzaq; https://vuldb.com/?id.212500; https://github.com/swzaq/swzaq
CVE: CVE-2022-3771
Published: 2022-10-31
Description: A vulnerability, which was classified as critical, has been found in easyii CMS. This issue affects the function file of the file helpers/Upload.php of the component File Upload Management. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The identifier VDB-212501 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-266, CWE-434
References: https://vuldb.com/?id.212501; https://vuldb.com/?id.212501
CVE: CVE-2022-3772
Published: 2022-10-31
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-36534. Reason: This candidate is a reservation duplicate of CVE-2020-36534. Notes: All CVE users should reference CVE-2020-36534 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2021-40241
Published: 2022-10-31
Description: xfig 3.2.7 is vulnerable to Buffer Overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=992395; https://lists.debian.org/debian-lts-announce/2023/03/msg00005.html; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=992395
CVE: CVE-2022-2167
Published: 2022-10-31
Description: The Newspaper WordPress theme before 12 does not sanitise a parameter before outputting it back in an HTML attribute via an AJAX action, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/ad35fbae-1e90-47a0-b1d2-f8d91a5db90e; https://wpscan.com/vulnerability/ad35fbae-1e90-47a0-b1d2-f8d91a5db90e
CVE: CVE-2022-2190
Published: 2022-10-31
Description: The Gallery Plugin for WordPress plugin before 1.8.4.7 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/1af4beb6-ba16-429b-acf2-43f9594f5ace; https://wpscan.com/vulnerability/1af4beb6-ba16-429b-acf2-43f9594f5ace
CVE: CVE-2022-2627
Published: 2022-10-31
Description: The Newspaper WordPress theme before 12 does not sanitise a parameter before outputting it back in an HTML attribute via an AJAX action, leading to a Reflected Cross-Site Scripting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/038327d0-568f-4011-9b7e-3da39e8b6aea; https://wpscan.com/vulnerability/038327d0-568f-4011-9b7e-3da39e8b6aea
CVE: CVE-2022-3096
Published: 2022-10-31
Description: The WP Total Hacks WordPress plugin through 4.7.2 does not prevent low privilege users from modifying the plugin's settings. This could allow users such as subscribers to perform Stored Cross-Site Scripting attacks against other users, like administrators, due to the lack of sanitisation and escaping as well.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-862
References: https://wpscan.com/vulnerability/46996537-a874-4b2e-9cd7-7d0832f9704d; https://wpscan.com/vulnerability/46996537-a874-4b2e-9cd7-7d0832f9704d
CVE: CVE-2022-3237
Published: 2022-10-31
Description: The WP Contact Slider WordPress plugin before 2.4.8 does not sanitize and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/cd2fd6cd-a839-4de8-af28-b5134873c40e; https://wpscan.com/vulnerability/cd2fd6cd-a839-4de8-af28-b5134873c40e
CVE: CVE-2022-3254
Published: 2022-10-31
Description: The WordPress Classifieds Plugin WordPress plugin before 4.3 does not properly sanitise and escape some parameters before using them in a SQL statement via an AJAX action available to unauthenticated users and when a specific premium module is active, leading to a SQL injection
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://wpscan.com/vulnerability/546c47c2-5b4b-46db-b754-c6b43aef2660; https://wpscan.com/vulnerability/546c47c2-5b4b-46db-b754-c6b43aef2660
CVE: CVE-2022-3334
Published: 2022-10-31
Description: The Easy WP SMTP WordPress plugin before 1.5.0 unserialises the content of an imported file, which could lead to PHP object injection issue when an admin import (intentionally or not) a malicious file and a suitable gadget chain is present on the blog.
CVSS Score: 7.2 (HIGH)
CWE: CWE-502
References: https://wpscan.com/vulnerability/0e735502-eaa2-4047-949e-bc8eb6b39fc9; https://wpscan.com/vulnerability/0e735502-eaa2-4047-949e-bc8eb6b39fc9
CVE: CVE-2022-3357
Published: 2022-10-31
Description: The Smart Slider 3 WordPress plugin before 3.5.1.11 unserialises the content of an imported file, which could lead to PHP object injection issues when a user import (intentionally or not) a malicious file, and a suitable gadget chain is present on the site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://wpscan.com/vulnerability/2e28a4e7-e7d3-485c-949c-e300e5b66cbd; https://wpscan.com/vulnerability/2e28a4e7-e7d3-485c-949c-e300e5b66cbd
CVE: CVE-2022-3360
Published: 2022-10-31
Description: The LearnPress WordPress plugin before 4.1.7.2 unserialises user input in a REST API endpoint available to unauthenticated users, which could lead to PHP Object Injection when a suitable gadget is present, leadint to remote code execution (RCE). To successfully exploit this vulnerability attackers must have knowledge of the site secrets, allowing them to generate a valid hash via the wp_hash() function.
CVSS Score: 8.1 (HIGH)
CWE: CWE-502, CWE-502
References: https://wpscan.com/vulnerability/acea7a54-a964-4127-a93f-f38f883074e3; https://wpscan.com/vulnerability/acea7a54-a964-4127-a93f-f38f883074e3
CVE: CVE-2022-3366
Published: 2022-10-31
Description: The PublishPress Capabilities WordPress plugin before 2.5.2, PublishPress Capabilities Pro WordPress plugin before 2.5.2 unserializes the content of imported files, which could lead to PHP object injection attacks by administrators, on multisite WordPress configurations. Successful exploitation in this case requires other plugins with a suitable gadget chain to be present on the site.
CVSS Score: 7.2 (HIGH)
CWE: CWE-502
References: https://wpscan.com/vulnerability/72639924-e7a7-4f7d-bd50-015d05ffd4fb; https://wpscan.com/vulnerability/72639924-e7a7-4f7d-bd50-015d05ffd4fb
CVE: CVE-2022-3374
Published: 2022-10-31
Description: The Ocean Extra WordPress plugin before 2.0.5 unserialises the content of an imported file, which could lead to PHP object injections issues when a high privilege user import (intentionally or not) a malicious Customizer Styling file and a suitable gadget chain is present on the blog.
CVSS Score: 7.2 (HIGH)
CWE: CWE-502
References: https://wpscan.com/vulnerability/22fd3f28-9036-4bd5-ad98-ff78bd1b51bc; https://wpscan.com/vulnerability/22fd3f28-9036-4bd5-ad98-ff78bd1b51bc
CVE: CVE-2022-3380
Published: 2022-10-31
Description: The Customizer Export/Import WordPress plugin before 0.9.5 unserializes the content of an imported file, which could lead to PHP object injection issues when an admin imports (intentionally or not) a malicious file and a suitable gadget chain is present on the blog.
CVSS Score: 7.2 (HIGH)
CWE: CWE-502, CWE-502
References: https://wpscan.com/vulnerability/a42272a2-f9ce-4aab-9a94-8a4d85008746; https://wpscan.com/vulnerability/a42272a2-f9ce-4aab-9a94-8a4d85008746
CVE: CVE-2022-3408
Published: 2022-10-31
Description: The WP Word Count WordPress plugin through 3.2.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/395bc893-2067-4f76-b49f-9ed8e1e8f330; https://wpscan.com/vulnerability/395bc893-2067-4f76-b49f-9ed8e1e8f330
CVE: CVE-2022-3419
Published: 2022-10-31
Description: The Automatic User Roles Switcher WordPress plugin before 1.1.2 does not have authorisation and proper CSRF checks, allowing any authenticated users like subscriber to add any role to themselves, such as administrator
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-269, CWE-352
References: https://wpscan.com/vulnerability/5909a423-9841-449c-a569-f687c609817b; https://wpscan.com/vulnerability/5909a423-9841-449c-a569-f687c609817b
CVE: CVE-2022-3420
Published: 2022-10-31
Description: The Official Integration for Billingo WordPress plugin before 3.4.0 does not sanitise and escape some of its settings, which could allow high privilege users with a role as low as Shop Manager to perform Stored Cross-Site Scripting attacks.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/ce5fac6e-8da1-4042-9cf8-7988613f92a5; https://wpscan.com/vulnerability/ce5fac6e-8da1-4042-9cf8-7988613f92a5
CVE: CVE-2022-3440
Published: 2022-10-31
Description: The Rock Convert WordPress plugin before 2.11.0 does not sanitise and escape an URL before outputting it back in an attribute when a specific widget is present on a page, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/e39fcf30-1e69-4399-854c-4c5b6ccc22a2; https://wpscan.com/vulnerability/e39fcf30-1e69-4399-854c-4c5b6ccc22a2
CVE: CVE-2022-3441
Published: 2022-10-31
Description: The Rock Convert WordPress plugin before 2.11.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/7b51b1f0-17ca-46b7-ada1-20bd926f3023; https://wpscan.com/vulnerability/7b51b1f0-17ca-46b7-ada1-20bd926f3023
CVE: CVE-2022-3773
Published: 2022-10-31
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.