deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-3646
Published: 2021-09-10
Description: btcpayserver is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/btcpayserver/btcpayserver/commit/fc4e47cec608cc3dba24b19d0145ac69320b975e; https://huntr.dev/bounties/32e30ecf-31fa-45f6-8552-47250ef0e613; https://github.com/btcpayserver/btcpayserver/commit/fc4e47cec608cc3dba24b19d0145ac69320b975e
CVE: CVE-2021-3145
Published: 2021-09-10
Description: In Ionic Identity Vault before 5, a local root attacker on an Android device can bypass biometric authentication.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-287
References: http://packetstormsecurity.com/files/164085/Ionic-Identity-Vault-4.7-Android-Biometric-Authentication-Bypass.html; https://ionic.io/products/identity-vault; http://packetstormsecurity.com/files/164085/Ionic-Identity-Vault-4.7-Android-Biometric-Authentication-Bypass.html
CVE: CVE-2021-40347
Published: 2021-09-10
Description: An issue was discovered in views/list.py in GNU Mailman Postorius before 1.3.5. An attacker (logged into any account) can send a crafted POST request to unsubscribe any user from a mailing list, also revealing whether that address was subscribed in the first place.
CVSS Score: 5.4 (MEDIUM)
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=993746; https://gitlab.com/mailman/postorius/-/commit/3d880c56b58bc26b32eac0799407d74b64b7474b; https://gitlab.com/mailman/postorius/-/issues/531
CVE: CVE-2021-40864
Published: 2021-09-10
Description: The Translate plugin 6.1.x through 6.3.x before 6.3.0.72 for ONLYOFFICE Document Server lacks escape calls for the msg.data and text fields.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/ONLYOFFICE/plugin-translator/commit/2206c0179cb97e3b8b290a0ab5719b1f0f54542b; https://github.com/ONLYOFFICE/plugin-translator/compare/v6.3.0.71...v6.3.0.72; https://github.com/ONLYOFFICE/plugin-translator/commit/2206c0179cb97e3b8b290a0ab5719b1f0f54542b
CVE: CVE-2021-24040
Published: 2021-09-10
Description: Due to use of unsafe YAML deserialization logic, an attacker with the ability to modify local YAML configuration files could provide malicious input, resulting in remote code execution or similar risks. This issue affects ParlAI prior to v1.1.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502, CWE-502
References: http://packetstormsecurity.com/files/164136/Facebook-ParlAI-1.0.0-Code-Execution-Deserialization.html; https://github.com/facebookresearch/ParlAI/releases/tag/v1.1.0; https://github.com/facebookresearch/ParlAI/security/advisories/GHSA-m87f-9fvv-2mgg
CVE: CVE-2021-39207
Published: 2021-09-10
Description: parlai is a framework for training and evaluating AI models on a variety of openly available dialogue datasets. In affected versions the package is vulnerable to YAML deserialization attack caused by unsafe loading which leads to Arbitary code execution. This security bug is patched by avoiding unsafe loader users should update to version above v1.1.0. If upgrading is not possible then users can change the Loader used to SafeLoader as a workaround. See commit 507d066ef432ea27d3e201da08009872a2f37725 for details.
CVSS Score: 8.4 (HIGH)
CWE: CWE-502
References: https://github.com/facebookresearch/ParlAI/commit/4374fa2aba383db6526ab36e939eb1cf8ef99879; https://github.com/facebookresearch/ParlAI/commit/507d066ef432ea27d3e201da08009872a2f37725; https://github.com/facebookresearch/ParlAI/security/advisories/GHSA-m87f-9fvv-2mgg
CVE: CVE-2021-38555
Published: 2021-09-11
Description: An XML external entity (XXE) injection vulnerability was discovered in the Any23 StreamUtils.java file and is known to affect Any23 versions < 2.5. XML external entity injection (also known as XXE) is a web security vulnerability that allows an attacker to interfere with an application's processing of XML data. It often allows an attacker to view files on the application server filesystem, and to interact with any back-end or external systems that the application itself can access.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-611
References: https://lists.apache.org/thread.html/r589d1a9f94dbeee7a0f5dbe8513a0e300dfe669bd964ba2fbfe28e07%40%3Cannounce.apache.org%3E; https://lists.apache.org/thread.html/r589d1a9f94dbeee7a0f5dbe8513a0e300dfe669bd964ba2fbfe28e07%40%3Cannounce.apache.org%3E
CVE: CVE-2021-40146
Published: 2021-09-11
Description: A Remote Code Execution (RCE) vulnerability was discovered in the Any23 YAMLExtractor.java file and is known to affect Any23 versions < 2.5. RCE vulnerabilities allow a malicious actor to execute any code of their choice on a remote machine over LAN, WAN, or internet. RCE belongs to the broader class of arbitrary code execution (ACE) vulnerabilities.
CVSS Score: 9.8 (CRITICAL)
References: http://www.openwall.com/lists/oss-security/2021/09/11/2; https://lists.apache.org/thread.html/r7c521ed85c7ae1bad4fdf95b459f2aaa8a67eae338636b7b7ec35d86%40%3Cannounce.apache.org%3E; http://www.openwall.com/lists/oss-security/2021/09/11/2
CVE: CVE-2021-23440
Published: 2021-09-12
Description: This affects the package set-value before <2.0.1, >=3.0.0 <4.0.1. A type confusion vulnerability can lead to a bypass of CVE-2019-10747 when the user-provided keys used in the path parameter are arrays.
CVSS Score: 7.3 (HIGH)
CWE: CWE-843
References: https://github.com/jonschlinkert/set-value/commit/7cf8073bb06bf0c15e08475f9f952823b4576452; https://github.com/jonschlinkert/set-value/pull/33; https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1584212
CVE: CVE-2021-23435
Published: 2021-09-12
Description: This affects the package clearance before 2.5.0. The vulnerability can be possible when users are able to set the value of session[:return_to]. If the value used for return_to contains multiple leading slashes (/////example.com) the user ends up being redirected to the external domain that comes after the slashes (http://example.com).
CVSS Score: 7.6 (HIGH)
CWE: CWE-601
References: https://github.com/thoughtbot/clearance/pull/945; https://snyk.io/vuln/SNYK-RUBY-CLEARANCE-1577284; https://github.com/thoughtbot/clearance/pull/945
CVE: CVE-2021-40866
Published: 2021-09-13
Description: Certain NETGEAR smart switches are affected by a remote admin password change by an unauthenticated attacker via the (disabled by default) /sqfs/bin/sccd daemon, which fails to check authentication when the authentication TLV is missing from a received NSDP packet. This affects GC108P before 1.0.8.2, GC108PP before 1.0.8.2, GS108Tv3 before 7.0.7.2, GS110TPP before 7.0.7.2, GS110TPv3 before 7.0.7.2, GS110TUP before 1.0.5.3, GS308T before 1.0.3.2, GS310TP before 1.0.3.2, GS710TUP before 1.0.5.3, GS716TP before 1.0.4.2, GS716TPP before 1.0.4.2, GS724TPP before 2.0.6.3, GS724TPv2 before 2.0.6.3, GS728TPPv2 before 6.0.8.2, GS728TPv2 before 6.0.8.2, GS750E before 1.0.1.10, GS752TPP before 6.0.8.2, GS752TPv2 before 6.0.8.2, MS510TXM before 1.0.4.2, and MS510TXUP before 1.0.4.2.
CVSS Score: 9.8 (CRITICAL)
References: https://gynvael.coldwind.pl/?id=740; https://kb.netgear.com/000063978/Security-Advisory-for-Multiple-Vulnerabilities-on-Some-Smart-Switches-PSV-2021-0140-PSV-2021-0144-PSV-2021-0145; https://gynvael.coldwind.pl/?id=740
CVE: CVE-2021-40867
Published: 2021-09-13
Description: Certain NETGEAR smart switches are affected by an authentication hijacking race-condition vulnerability by an unauthenticated attacker who uses the same source IP address as an admin in the process of logging in (e.g., behind the same NAT device, or already in possession of a foothold on an admin's machine). This occurs because the multi-step HTTP authentication process is effectively tied only to the source IP address. This affects GC108P before 1.0.8.2, GC108PP before 1.0.8.2, GS108Tv3 before 7.0.7.2, GS110TPP before 7.0.7.2, GS110TPv3 before 7.0.7.2, GS110TUP before 1.0.5.3, GS308T before 1.0.3.2, GS310TP before 1.0.3.2, GS710TUP before 1.0.5.3, GS716TP before 1.0.4.2, GS716TPP before 1.0.4.2, GS724TPP before 2.0.6.3, GS724TPv2 before 2.0.6.3, GS728TPPv2 before 6.0.8.2, GS728TPv2 before 6.0.8.2, GS750E before 1.0.1.10, GS752TPP before 6.0.8.2, GS752TPv2 before 6.0.8.2, MS510TXM before 1.0.4.2, and MS510TXUP before 1.0.4.2.
CVSS Score: 7.8 (HIGH)
CWE: CWE-290
References: https://gynvael.coldwind.pl/?id=741; https://kb.netgear.com/000063978/Security-Advisory-for-Multiple-Vulnerabilities-on-Some-Smart-Switches-PSV-2021-0140-PSV-2021-0144-PSV-2021-0145; https://gynvael.coldwind.pl/?id=741
CVE: CVE-2021-40870
Published: 2021-09-13
Description: An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. Unrestricted upload of a file with a dangerous type is possible, which allows an unauthenticated user to execute arbitrary code via directory traversal.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-23
References: http://packetstormsecurity.com/files/164461/Aviatrix-Controller-6.x-Path-Traversal-Code-Execution.html; https://docs.aviatrix.com/HowTos/UCC_Release_Notes.html#security-note-9-11-2021; https://wearetradecraft.com/advisories/tc-2021-0002/
CVE: CVE-2020-27969
Published: 2021-09-13
Description: Yandex Browser for Android 20.8.4 allows remote attackers to perform SOP bypass and addresss bar spoofing
CVSS Score: 7.3 (HIGH)
CWE: CWE-346
References: https://yandex.com/bugbounty/i/hall-of-fame-browser/; https://yandex.com/bugbounty/i/hall-of-fame-browser/
CVE: CVE-2020-27970
Published: 2021-09-13
Description: Yandex Browser before 20.10.0 allows remote attackers to spoof the address bar
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-290
References: https://yandex.com/bugbounty/i/hall-of-fame-browser/; https://yandex.com/bugbounty/i/hall-of-fame-browser/
CVE: CVE-2021-22524
Published: 2021-09-13
Description: Injection attack caused the denial of service vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-91, CWE-91
References: https://support.microfocus.com/kb/doc.php?id=7025256; https://www.microfocus.com/documentation/access-manager/5.0/accessmanager501-release-notes/accessmanager501-release-notes.html; https://support.microfocus.com/kb/doc.php?id=7025256
CVE: CVE-2021-22526
Published: 2021-09-13
Description: Open Redirection vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://support.microfocus.com/kb/doc.php?id=7025257; https://www.microfocus.com/documentation/access-manager/5.0/accessmanager501-release-notes/accessmanager501-release-notes.html; https://support.microfocus.com/kb/doc.php?id=7025257
CVE: CVE-2021-22527
Published: 2021-09-13
Description: Information leakage vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-200
References: https://support.microfocus.com/kb/doc.php?id=7025258; https://www.microfocus.com/documentation/access-manager/5.0/accessmanager501-release-notes/accessmanager501-release-notes.html; https://support.microfocus.com/kb/doc.php?id=7025258
CVE: CVE-2021-22528
Published: 2021-09-13
Description: Reflected Cross Site Scripting (XSS) vulnerability in NetIQ Access Manager prior to 5.0.1 and 4.5.4
CVSS Score: 8.0 (HIGH)
CWE: CWE-79, CWE-79
References: https://support.microfocus.com/kb/doc.php?id=7025259; https://www.microfocus.com/documentation/access-manager/5.0/accessmanager501-release-notes/accessmanager501-release-notes.html; https://support.microfocus.com/kb/doc.php?id=7025259
CVE: CVE-2021-40214
Published: 2021-09-13
Description: Gibbon v22.0.00 suffers from a stored XSS vulnerability within the wall messages component.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://gibbonedu.org/; https://github.com/GibbonEdu/core/blob/v22.0.01/CHANGELOG.txt; https://github.com/GibbonEdu/core/releases/download/v22.0.00/GibbonEduCore-InstallBundle.zip
CVE: CVE-2021-32136
Published: 2021-09-13
Description: Heap buffer overflow in the print_udta function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/gpac/gpac/commit/eb71812fcc10e9c5348a5d1c61bd25b6fa06eaed; https://github.com/gpac/gpac/issues/1765; https://github.com/gpac/gpac/commit/eb71812fcc10e9c5348a5d1c61bd25b6fa06eaed
CVE: CVE-2021-32134
Published: 2021-09-13
Description: The gf_odf_desc_copy function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/gpac/gpac/commit/328c6d682698fdb9878dbb4f282963d42c538c01; https://github.com/gpac/gpac/issues/1756; https://github.com/gpac/gpac/commit/328c6d682698fdb9878dbb4f282963d42c538c01
CVE: CVE-2021-32137
Published: 2021-09-13
Description: Heap buffer overflow in the URL_GetProtocolType function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/gpac/gpac/commit/328def7d3b93847d64ecb6e9e0399684e57c3eca; https://github.com/gpac/gpac/issues/1766; https://github.com/gpac/gpac/commit/328def7d3b93847d64ecb6e9e0399684e57c3eca
CVE: CVE-2021-29643
Published: 2021-09-13
Description: PRTG Network Monitor before 21.3.69.1333 allows stored XSS via an unsanitized string imported from a User Object in a connected Active Directory instance.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://raxis.com/blog/prtg-network-monitor-cve-2021-29643; https://www.paessler.com/prtg/history/stable#21.3.69.1333; https://raxis.com/blog/prtg-network-monitor-cve-2021-29643
CVE: CVE-2021-32132
Published: 2021-09-13
Description: The abst_box_size function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/gpac/gpac/commit/e74be5976a6fee059c638050a237893f7e9a3b23; https://github.com/gpac/gpac/issues/1753; https://github.com/gpac/gpac/commit/e74be5976a6fee059c638050a237893f7e9a3b23
CVE: CVE-2021-32135
Published: 2021-09-13
Description: The trak_box_size function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/gpac/gpac/commit/b8f8b202d4fc23eb0ab4ce71ae96536ca6f5d3f8; https://github.com/gpac/gpac/issues/1757; https://github.com/gpac/gpac/commit/b8f8b202d4fc23eb0ab4ce71ae96536ca6f5d3f8
CVE: CVE-2021-24431
Published: 2021-09-13
Description: The Language Bar Flags WordPress plugin through 1.0.8 does not have any CSRF in place when saving its settings and did not sanitise or escape them when generating the flag bar in the frontend. This could allow attackers to make a logged in admin change the settings, and set Cross-Site Scripting payload in them, which will be executed in the frontend for all users
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79, CWE-352, CWE-79, CWE-352
References: https://wpscan.com/vulnerability/ae50cec9-5f80-4221-b6a8-4593ab66c37b; https://wpscan.com/vulnerability/ae50cec9-5f80-4221-b6a8-4593ab66c37b
CVE: CVE-2021-24490
Published: 2021-09-13
Description: The Email Artillery (MASS EMAIL) WordPress plugin through 4.1 does not properly check the uploaded files from the Import Emails feature, allowing arbitrary files to be uploaded. Furthermore, the plugin is also lacking any CSRF check, allowing such issue to be exploited via a CSRF attack as well. However, due to the presence of a .htaccess, denying access to everything in the folder the file is uploaded to, the malicious uploaded file will only be accessible on Web Servers such as Nginx/IIS
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352, CWE-434
References: https://wpscan.com/vulnerability/4ea0127e-afef-41bf-a005-c57432f9f58c; https://wpscan.com/vulnerability/4ea0127e-afef-41bf-a005-c57432f9f58c
CVE: CVE-2021-24491
Published: 2021-09-13
Description: The Fileviewer WordPress plugin through 2.2 does not have CSRF checks in place when performing actions such as upload and delete files. As a result, attackers could make a logged in administrator delete and upload arbitrary files via a CSRF attack
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://wpscan.com/vulnerability/ddd37827-f4c1-4806-8846-d06d9fbf23dd; https://wpscan.com/vulnerability/ddd37827-f4c1-4806-8846-d06d9fbf23dd
CVE: CVE-2021-24493
Published: 2021-09-13
Description: The shopp_upload_file AJAX action of the Shopp WordPress plugin through 1.4, available to both unauthenticated and authenticated user does not have any security measure in place to prevent upload of malicious files, such as PHP, allowing unauthenticated users to upload arbitrary files and leading to RCE
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://wpscan.com/vulnerability/dcc7be04-550b-427a-a14f-a2365d96a00e; https://wpscan.com/vulnerability/dcc7be04-550b-427a-a14f-a2365d96a00e
CVE: CVE-2021-24508
Published: 2021-09-13
Description: The Smash Balloon Social Post Feed WordPress plugin before 2.19.2 does not sanitise or escape the feedID POST parameter in its feed_locator AJAX action (available to both authenticated and unauthenticated users) before outputting a truncated version of it in the admin dashboard, leading to an unauthenticated Stored Cross-Site Scripting issue which will be executed in the context of a logged in administrator.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/2b543740-d4b0-49b5-a021-454a3a72162f; https://wpscan.com/vulnerability/2b543740-d4b0-49b5-a021-454a3a72162f
CVE: CVE-2021-24510
Published: 2021-09-13
Description: The MF Gig Calendar WordPress plugin before 1.2 does not sanitise and escape the id GET parameter before outputting back in the admin dashboard when editing an Event, leading to a reflected Cross-Site Scripting issue
CVSS Score: 6.1 (MEDIUM)
References: https://wpscan.com/vulnerability/715721b0-13a1-413a-864d-2380f38ecd39; https://wpscan.com/vulnerability/715721b0-13a1-413a-864d-2380f38ecd39
CVE: CVE-2021-24523
Published: 2021-09-13
Description: The Daily Prayer Time WordPress plugin before 2021.08.10 does not sanitise or escape some of its settings before outputting them in the page, leading to Authenticated Stored Cross-Site Scripting issues.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/832fe086-1d33-430b-bdb5-e444761576b2; https://wpscan.com/vulnerability/832fe086-1d33-430b-bdb5-e444761576b2
CVE: CVE-2021-24560
Published: 2021-09-13
Description: The Software License Manager WordPress plugin before 4.4.8 does not sanitise or escape the edit_record parameter before outputting it back in the page in the admin dashboard, leading to a Reflected Cross-Site Scripting issue
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/d51fcd97-e535-42dd-997a-edc2f5f12269; https://wpscan.com/vulnerability/d51fcd97-e535-42dd-997a-edc2f5f12269
CVE: CVE-2021-24586
Published: 2021-09-13
Description: The Per page add to head WordPress plugin before 1.4.4 is lacking any CSRF check when saving its settings, which could allow attackers to make a logged in admin change them. Furthermore, as the plugin allows arbitrary HTML to be inserted in one of the setting (feature mentioned by the plugin), this could lead to Stored XSS issue which will be triggered either in the backend, frontend or both depending on the payload used.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79, CWE-352, CWE-79, CWE-352
References: https://wpscan.com/vulnerability/e9885fba-0e73-41a0-9e1d-47badc09be85; https://wpscan.com/vulnerability/e9885fba-0e73-41a0-9e1d-47badc09be85
CVE: CVE-2021-24605
Published: 2021-09-13
Description: The create_post_page AJAX action of the Custom Post View Generator WordPress plugin through 0.4.6 (available to authenticated user) does not sanitise or escape user input before outputting it back in the response, leading to a Reflected Cross-Site issue
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/e0be384c-3e63-49f6-b2ab-3024dcd88686; https://wpscan.com/vulnerability/e0be384c-3e63-49f6-b2ab-3024dcd88686
CVE: CVE-2021-24614
Published: 2021-09-13
Description: The Book appointment online WordPress plugin before 1.39 does not sanitise or escape Service Prices before outputting it in the List, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/e8b5c609-dc67-4dce-b6bb-7d63c0c2a014; https://wpscan.com/vulnerability/e8b5c609-dc67-4dce-b6bb-7d63c0c2a014
CVE: CVE-2021-24619
Published: 2021-09-13
Description: The Per page add to head WordPress plugin through 1.4.4 does not properly sanitise one of its setting, allowing malicious HTML to be inserted by high privilege users even when the unfiltered_html capability is disallowed, which could lead to Cross-Site Scripting issues.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/f360f383-0646-44ca-b49e-e2258dfbf3a6; https://wpscan.com/vulnerability/f360f383-0646-44ca-b49e-e2258dfbf3a6
CVE: CVE-2021-24620
Published: 2021-09-13
Description: The WordPress Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal plugin through 2.2.5 does not check for the uploaded Downloadable Digital product file, allowing any file, such as PHP to be uploaded by an administrator. Furthermore, as there is no CSRF in place, attackers could also make a logged admin upload a malicious PHP file, which would lead to RCE
CVSS Score: 8.8 (HIGH)
CWE: CWE-434, CWE-352, CWE-434
References: https://wpscan.com/vulnerability/1f2b3c4a-f7e9-4d22-b71e-f6b051fd8349; https://wpscan.com/vulnerability/1f2b3c4a-f7e9-4d22-b71e-f6b051fd8349
CVE: CVE-2021-24621
Published: 2021-09-13
Description: The WP Courses LMS WordPress plugin before 2.0.44 does not sanitise its Video Embed Code, allowing malicious code to be injected in it by high privilege users, even when the unfiltered_html capability is disallowed, which could lead to Stored Cross-Site Scripting issues
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/bfbb32ac-9ef9-46de-8e5e-7d6d6fb868d8; https://wpscan.com/vulnerability/bfbb32ac-9ef9-46de-8e5e-7d6d6fb868d8
CVE: CVE-2021-24623
Published: 2021-09-13
Description: The WordPress Advanced Ticket System, Elite Support Helpdesk WordPress plugin before 1.0.64 does not sanitize or escape form values before saving to the database or when outputting, which allows high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/41d9027c-a982-44c7-889e-721333496b5c; https://wpscan.com/vulnerability/41d9027c-a982-44c7-889e-721333496b5c
CVE: CVE-2021-24724
Published: 2021-09-13
Description: The Timetable and Event Schedule by MotoPress WordPress plugin before 2.3.19 does not sanitise some of its parameters, which could allow low privilege users such as author to perform XSS attacks against frontend and backend users when viewing the related event/s
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2573479/; https://wpscan.com/vulnerability/c1194a1e-bf33-4f3f-a4a6-27b76b1b1eeb; https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=29235
CVE: CVE-2021-24725
Published: 2021-09-13
Description: The Comment Link Remove and Other Comment Tools WordPress plugin before 2.1.6 does not have CSRF check in its 'Delete comments easily', which could allow attackers to make logged in admin delete arbitrary comments
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/01483284-57f5-4ae9-b5f1-ae26b623571f; https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=29225; https://wpscan.com/vulnerability/01483284-57f5-4ae9-b5f1-ae26b623571f