deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-54484
Published: 2024-12-12
Description: The issue was resolved by sanitizing logging. This issue is fixed in macOS Sequoia 15.2. An app may be able to access user-sensitive data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-532, CWE-281
References: https://support.apple.com/en-us/121839; http://seclists.org/fulldisclosure/2024/Dec/7
CVE: CVE-2024-54485
Published: 2024-12-12
Description: The issue was addressed by adding additional logic. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2. An attacker with physical access to an iOS device may be able to view notification content from the lock screen.
CVSS Score: 2.4 (LOW)
CWE: CWE-922
References: https://support.apple.com/en-us/121837; https://support.apple.com/en-us/121838; https://support.apple.com/en-us/121839
CVE: CVE-2024-54486
Published: 2024-12-12
Description: The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Processing a maliciously crafted font may result in the disclosure of process memory.
CVSS Score: 6.5 (MEDIUM)
References: https://support.apple.com/en-us/121837; https://support.apple.com/en-us/121838; https://support.apple.com/en-us/121839
CVE: CVE-2024-54489
Published: 2024-12-12
Description: A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. Running a mount command may unexpectedly execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22
References: https://support.apple.com/en-us/121839; https://support.apple.com/en-us/121840; https://support.apple.com/en-us/121842
CVE: CVE-2024-54490
Published: 2024-12-12
Description: This issue was addressed by enabling hardened runtime. This issue is fixed in macOS Sequoia 15.2. A local attacker may gain access to user's Keychain items.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-346
References: https://support.apple.com/en-us/121839; http://seclists.org/fulldisclosure/2024/Dec/7
CVE: CVE-2024-54491
Published: 2024-12-12
Description: The issue was resolved by sanitizing logging. This issue is fixed in macOS Sequoia 15.2. A malicious application may be able to determine a user's current location.
CVSS Score: 3.3 (LOW)
References: https://support.apple.com/en-us/121839; http://seclists.org/fulldisclosure/2024/Dec/7
CVE: CVE-2024-54492
Published: 2024-12-12
Description: This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, visionOS 2.2. An attacker in a privileged network position may be able to alter network traffic.
CVSS Score: 5.9 (MEDIUM)
References: https://support.apple.com/en-us/121837; https://support.apple.com/en-us/121838; https://support.apple.com/en-us/121839
CVE: CVE-2024-54493
Published: 2024-12-12
Description: This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.2. Privacy indicators for microphone access may be attributed incorrectly.
CVSS Score: 3.3 (LOW)
References: https://support.apple.com/en-us/121839; http://seclists.org/fulldisclosure/2024/Dec/7
CVE: CVE-2024-54494
Published: 2024-12-12
Description: A race condition was addressed with additional validation. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. An attacker may be able to create a read-only memory mapping that can be written to.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://support.apple.com/en-us/121837; https://support.apple.com/en-us/121838; https://support.apple.com/en-us/121839
CVE: CVE-2024-54495
Published: 2024-12-12
Description: The issue was addressed with improved permissions logic. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2. An app may be able to modify protected parts of the file system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-863
References: https://support.apple.com/en-us/121839; https://support.apple.com/en-us/121840; http://seclists.org/fulldisclosure/2024/Dec/7
CVE: CVE-2024-54498
Published: 2024-12-12
Description: A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to break out of its sandbox.
CVSS Score: 8.8 (HIGH)
References: https://support.apple.com/en-us/121839; https://support.apple.com/en-us/121840; https://support.apple.com/en-us/121842
CVE: CVE-2024-54500
Published: 2024-12-12
Description: The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Processing a maliciously crafted image may result in disclosure of process memory.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/121837; https://support.apple.com/en-us/121838; https://support.apple.com/en-us/121839
CVE: CVE-2024-54501
Published: 2024-12-12
Description: The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Processing a maliciously crafted file may lead to a denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-770
References: https://support.apple.com/en-us/121837; https://support.apple.com/en-us/121838; https://support.apple.com/en-us/121839
CVE: CVE-2024-54502
Published: 2024-12-12
Description: The issue was addressed with improved checks. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.6, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Processing maliciously crafted web content may lead to an unexpected process crash.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/en-us/121837; https://support.apple.com/en-us/121839; https://support.apple.com/en-us/121843
CVE: CVE-2024-54503
Published: 2024-12-12
Description: An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 18.2 and iPadOS 18.2. Muting a call while ringing may not result in mute being enabled.
CVSS Score: 4.2 (MEDIUM)
References: https://support.apple.com/en-us/121837; http://seclists.org/fulldisclosure/2024/Dec/5
CVE: CVE-2024-54504
Published: 2024-12-12
Description: A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.2. An app may be able to access user-sensitive data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-922
References: https://support.apple.com/en-us/121839; http://seclists.org/fulldisclosure/2024/Dec/7
CVE: CVE-2024-54505
Published: 2024-12-12
Description: A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Processing maliciously crafted web content may lead to memory corruption.
CVSS Score: 8.8 (HIGH)
CWE: CWE-843, CWE-843
References: https://support.apple.com/en-us/121837; https://support.apple.com/en-us/121838; https://support.apple.com/en-us/121839
CVE: CVE-2024-54506
Published: 2024-12-12
Description: An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.2. An attacker may be able to cause unexpected system termination or arbitrary code execution in DCP firmware.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125, CWE-125
References: https://support.apple.com/en-us/121839; http://seclists.org/fulldisclosure/2024/Dec/7
CVE: CVE-2024-54508
Published: 2024-12-12
Description: The issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.6, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Processing maliciously crafted web content may lead to an unexpected process crash.
CVSS Score: 7.5 (HIGH)
References: https://support.apple.com/en-us/121837; https://support.apple.com/en-us/121839; https://support.apple.com/en-us/121843
CVE: CVE-2024-54510
Published: 2024-12-12
Description: A race condition was addressed with improved locking. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2, tvOS 18.2, watchOS 11.2. An app may be able to leak sensitive kernel state.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://support.apple.com/en-us/121837; https://support.apple.com/en-us/121838; https://support.apple.com/en-us/121839
CVE: CVE-2024-54513
Published: 2024-12-12
Description: A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. An app may be able to access sensitive user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-281
References: https://support.apple.com/en-us/121837; https://support.apple.com/en-us/121839; https://support.apple.com/en-us/121843
CVE: CVE-2024-54514
Published: 2024-12-12
Description: The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2, tvOS 18.2, watchOS 11.2. An app may be able to break out of its sandbox.
CVSS Score: 8.6 (HIGH)
References: https://support.apple.com/en-us/121837; https://support.apple.com/en-us/121839; https://support.apple.com/en-us/121840
CVE: CVE-2024-54515
Published: 2024-12-12
Description: A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.2. A malicious app may be able to gain root privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-281
References: https://support.apple.com/en-us/121839; http://seclists.org/fulldisclosure/2024/Dec/7
CVE: CVE-2024-54524
Published: 2024-12-12
Description: A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.2. A malicious app may be able to access arbitrary files.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-843
References: https://support.apple.com/en-us/121839; http://seclists.org/fulldisclosure/2024/Dec/7
CVE: CVE-2024-54526
Published: 2024-12-12
Description: The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2, tvOS 18.2, watchOS 11.2. A malicious app may be able to access private information.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/121837; https://support.apple.com/en-us/121839; https://support.apple.com/en-us/121840
CVE: CVE-2024-54527
Published: 2024-12-12
Description: This issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2, tvOS 18.2, watchOS 11.2. An app may be able to access sensitive user data.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/121837; https://support.apple.com/en-us/121839; https://support.apple.com/en-us/121840
CVE: CVE-2024-54528
Published: 2024-12-12
Description: A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to overwrite arbitrary files.
CVSS Score: 7.1 (HIGH)
References: https://support.apple.com/en-us/121839; https://support.apple.com/en-us/121840; https://support.apple.com/en-us/121842
CVE: CVE-2024-54529
Published: 2024-12-12
Description: A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: https://support.apple.com/en-us/121839; https://support.apple.com/en-us/121840; https://support.apple.com/en-us/121842
CVE: CVE-2024-54531
Published: 2024-12-12
Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.2. An app may be able to bypass kASLR.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/121839; http://seclists.org/fulldisclosure/2024/Dec/7
CVE: CVE-2024-54534
Published: 2024-12-12
Description: The issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.6, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Processing maliciously crafted web content may lead to memory corruption.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://support.apple.com/en-us/121837; https://support.apple.com/en-us/121839; https://support.apple.com/en-us/121843
CVE: CVE-2024-55652
Published: 2024-12-12
Description: PenDoc is a penetration testing reporting application. Prior to commit 1d4219c596f4f518798492e48386a20c6e9a2fe6, an attacker can write a malicious docx template containing expressions that escape the JavaScript sandbox to execute arbitrary code on the system. An attacker who can control the contents of the template document is able to execute arbitrary code on the system. By default, only users with the `admin` role are able to create or update templates. Commit 1d4219c596f4f518798492e48386a20c6e9a2fe6 patches the issue.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1336
References: https://github.com/pwndoc/pwndoc/blob/main/backend/src/lib/report-filters.js#L258-L260; https://github.com/pwndoc/pwndoc/commit/1d4219c596f4f518798492e48386a20c6e9a2fe6; https://github.com/pwndoc/pwndoc/security/advisories/GHSA-jw5r-6927-hwpc
CVE: CVE-2024-55657
Published: 2024-12-12
Description: SiYuan is a personal knowledge management system. Prior to version 3.1.16, an arbitrary file read vulnerability exists in Siyuan's `/api/template/render` endpoint. The absence of proper validation on the path parameter allows attackers to access sensitive files on the host system. Version 3.1.16 contains a patch for the issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/siyuan-note/siyuan/commit/e70ed57f6e4852e2bd702671aeb8eb3a47a36d71; https://github.com/siyuan-note/siyuan/security/advisories/GHSA-xx68-37v4-4596
CVE: CVE-2024-55658
Published: 2024-12-12
Description: SiYuan is a personal knowledge management system. Prior to version 3.1.16, SiYuan's /api/export/exportResources endpoint is vulnerable to arbitary file read via path traversal. It is possible to manipulate the paths parameter to access and download arbitrary files from the host system by traversing the workspace directory structure. Version 3.1.16 contains a patch for the issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/siyuan-note/siyuan/commit/e70ed57f6e4852e2bd702671aeb8eb3a47a36d71; https://github.com/siyuan-note/siyuan/security/advisories/GHSA-25w9-wqfq-gwqx
CVE: CVE-2024-55659
Published: 2024-12-12
Description: SiYuan is a personal knowledge management system. Prior to version 3.1.16, the `/api/asset/upload` endpoint in Siyuan is vulnerable to both arbitrary file write to the host and stored cross-site scripting (via the file write). Version 3.1.16 contains a patch for the issue.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-22, CWE-79
References: https://github.com/siyuan-note/siyuan/commit/e70ed57f6e4852e2bd702671aeb8eb3a47a36d71; https://github.com/siyuan-note/siyuan/security/advisories/GHSA-fqj6-whhx-47p7
CVE: CVE-2024-55660
Published: 2024-12-12
Description: SiYuan is a personal knowledge management system. Prior to version 3.1.16, SiYuan's `/api/template/renderSprig` endpoint is vulnerable to Server-Side Template Injection (SSTI) through the Sprig template engine. Although the engine has limitations, it allows attackers to access environment variables. Version 3.1.16 contains a patch for the issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1336, CWE-94
References: https://github.com/siyuan-note/siyuan/commit/e70ed57f6e4852e2bd702671aeb8eb3a47a36d71; https://github.com/siyuan-note/siyuan/security/advisories/GHSA-4pjc-pwgq-q9jp
CVE: CVE-2024-10111
Published: 2024-12-12
Description: The OAuth Single Sign On – SSO (OAuth Client) plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 6.26.3. This is due to insufficient verification on the user being returned by the social login token. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the username and the user does not have an already-existing account for the service returning the token.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3206462%40miniorange-login-with-eve-online-google-facebook&new=3206462%40miniorange-login-with-eve-online-google-facebook&sfp_email=&sfph_mail=; https://wordpress.org/plugins/miniorange-login-with-eve-online-google-facebook/; https://www.wordfence.com/threat-intel/vulnerabilities/id/ddd83877-739f-4c21-8179-20de8bbc4936?source=cve
CVE: CVE-2024-11015
Published: 2024-12-12
Description: The Sign In With Google plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.8.0. This is due to the 'authenticate_user' user function not implementing sufficient null value checks when setting the access token and user information. This makes it possible for unauthenticated attackers to log in as the first user who has signed in using Google OAuth, which could be the site administrator.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://plugins.trac.wordpress.org/browser/sign-in-with-google/trunk/src/admin/class-sign-in-with-google-admin.php#L525; https://www.wordfence.com/threat-intel/vulnerabilities/id/afe894b0-5e91-4aa2-bbd1-1f74274701cf?source=cve
CVE: CVE-2024-11279
Published: 2024-12-12
Description: The Schema App Structured Data plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.2.4. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3209940%40schema-app-structured-data-for-schemaorg%2Ftrunk&old=3161571%40schema-app-structured-data-for-schemaorg%2Ftrunk&sfp_email=&sfph_mail=; https://wordpress.org/plugins/schema-app-structured-data-for-schemaorg/; https://www.wordfence.com/threat-intel/vulnerabilities/id/48db673c-f978-45f4-9d7b-eddd81cee62e?source=cve
CVE: CVE-2024-11413
Published: 2024-12-12
Description: The HostFact bestelformulier integratie plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bestelformulier' shortcode in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/hostfact-bestelformulier-integratie/trunk/hostfact-bestelformulier.php#L38; https://plugins.trac.wordpress.org/changeset/3255232/hostfact-bestelformulier-integratie/trunk/hostfact-bestelformulier.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/24a33857-5df2-4747-950e-f5a87fd287c6?source=cve
CVE: CVE-2024-11417
Published: 2024-12-12
Description: The dejure.org Vernetzungsfunktion plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.97.5. This is due to missing or incorrect nonce validation on the djo_einstellungen_menue() function. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3206444%40dejureorg-vernetzungsfunktion&new=3206444%40dejureorg-vernetzungsfunktion&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/bfe35762-2cb1-4b62-8865-ab217ff29450?source=cve
CVE: CVE-2024-11419
Published: 2024-12-12
Description: The Password for WP plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5. This is due to missing or incorrect nonce validation on the get3_init_admin_page() function. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/changeset/3213879/; https://www.wordfence.com/threat-intel/vulnerabilities/id/9a5eb090-2dfb-4b30-bfc6-38061b94b87a?source=cve
CVE: CVE-2024-11427
Published: 2024-12-12
Description: The Catch Popup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'catch-popup' shortcode in all versions up to, and including, 1.4.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/catch-popup/trunk/inc/shortcode.php; https://wordpress.org/plugins/catch-popup/; https://www.wordfence.com/threat-intel/vulnerabilities/id/4ac7c825-aa5e-42fb-b1df-8be72945941c?source=cve
CVE: CVE-2024-11430
Published: 2024-12-12
Description: The SQL Chart Builder plugin for WordPress is vulnerable to SQL Injection via the 'arg1' arg of the 'gvn_schart_2' shortcode in all versions up to, and including, 2.3.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/browser/sql-chart-builder/tags/2.3.6/functions.php#L469; https://plugins.trac.wordpress.org/changeset/3206222/; https://www.wordfence.com/threat-intel/vulnerabilities/id/1f818aad-8d05-4665-a7dc-50bc56cbde5f?source=cve
CVE: CVE-2024-11433
Published: 2024-12-12
Description: The Surbma | SalesAutopilot Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sa-form' shortcode in all versions up to, and including, 2.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/surbma-salesautopilot-shortcode/trunk/surbma-salesautopilot-shortcode.php; https://wordpress.org/plugins/surbma-salesautopilot-shortcode/; https://www.wordfence.com/threat-intel/vulnerabilities/id/626c82a1-4157-4294-9563-08accccf2a10?source=cve