deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-1507
Published: 2023-03-20
Description: A vulnerability has been found in SourceCodester E-Commerce System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /ecommerce/admin/category/controller.php of the component Category Name Handler. The manipulation of the argument CATEGORY leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223411.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://vuldb.com/?ctiid.223411; https://vuldb.com/?id.223411; https://vuldb.com/?ctiid.223411
CVE: CVE-2023-25782
Published: 2023-03-20
Description: Auth. (admin+) vulnerability in Second2none Service Area Postcode Checker plugin <= 2.0.8 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/service-area-postcode-checker/wordpress-service-area-postcode-checker-plugin-2-0-8-cross-site-scripting-xss?_s_id=cve; https://patchstack.com/database/vulnerability/service-area-postcode-checker/wordpress-service-area-postcode-checker-plugin-2-0-8-cross-site-scripting-xss?_s_id=cve
CVE: CVE-2023-22681
Published: 2023-03-20
Description: Cross-Site Request Forgery (CSRF) vulnerability in Aarvanshinfotech Online Exam Software: eExamhall plugin <= 4.0 versions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/eexamhall/wordpress-online-exam-software-eexamhall-plugin-4-0-cross-site-request-forgery-csrf?_s_id=cve; https://patchstack.com/database/vulnerability/eexamhall/wordpress-online-exam-software-eexamhall-plugin-4-0-cross-site-request-forgery-csrf?_s_id=cve
CVE: CVE-2023-24381
Published: 2023-03-20
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in NsThemes Advanced Social Pixel plugin <= 2.1.1 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://patchstack.com/database/vulnerability/ns-facebook-pixel-for-wp/wordpress-advanced-social-pixel-plugin-2-1-1-cross-site-scripting-xss?_s_id=cve; https://patchstack.com/database/vulnerability/ns-facebook-pixel-for-wp/wordpress-advanced-social-pixel-plugin-2-1-1-cross-site-scripting-xss?_s_id=cve
CVE: CVE-2023-25064
Published: 2023-03-20
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Matteo Candura WP htpasswd plugin <= 1.7 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/wp-htpasswd/wordpress-wp-htpasswd-plugin-1-7-cross-site-scripting-xss?_s_id=cve; https://patchstack.com/database/vulnerability/wp-htpasswd/wordpress-wp-htpasswd-plugin-1-7-cross-site-scripting-xss?_s_id=cve
CVE: CVE-2023-25794
Published: 2023-03-20
Description: Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Mighty Digital Nooz plugin <= 1.6.0 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/nooz/wordpress-nooz-plugin-1-6-0-cross-site-scripting-xss?_s_id=cve; https://patchstack.com/database/vulnerability/nooz/wordpress-nooz-plugin-1-6-0-cross-site-scripting-xss?_s_id=cve
CVE: CVE-2023-25795
Published: 2023-03-20
Description: Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in WP-master.Ir Feed Changer & Remover plugin <= 0.2 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/feed-changer/wordpress-feed-changer-plugin-0-2-cross-site-scripting-xss?_s_id=cve; https://patchstack.com/database/vulnerability/feed-changer/wordpress-feed-changer-plugin-0-2-cross-site-scripting-xss?_s_id=cve
CVE: CVE-2022-47592
Published: 2023-03-20
Description: Reflected Cross-Site Scripting (XSS) vulnerability in Dmytriy.Cooperman MagicForm plugin <= 0.1 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/magicform/wordpress-magicform-plugin-0-1-cross-site-scripting-xss?_s_id=cve; https://patchstack.com/database/vulnerability/magicform/wordpress-magicform-plugin-0-1-cross-site-scripting-xss?_s_id=cve
CVE: CVE-2023-22678
Published: 2023-03-20
Description: Cross-Site Request Forgery (CSRF) vulnerability in Rafael Dery Superior FAQ plugin <= 1.0.2 versions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/superior-faq/wordpress-superior-faq-plugin-1-0-2-cross-site-request-forgery-csrf?_s_id=cve; https://patchstack.com/database/vulnerability/superior-faq/wordpress-superior-faq-plugin-1-0-2-cross-site-request-forgery-csrf?_s_id=cve
CVE: CVE-2023-22679
Published: 2023-03-20
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Nicolas Lemoine WP Better Emails plugin <= 0.4 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/wp-better-emails/wordpress-wp-better-emails-plugin-0-4-cross-site-scripting-xss?_s_id=cve; https://patchstack.com/database/vulnerability/wp-better-emails/wordpress-wp-better-emails-plugin-0-4-cross-site-scripting-xss?_s_id=cve
CVE: CVE-2023-22680
Published: 2023-03-20
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Altanic No API Amazon Affiliate plugin <= 4.2.2 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/no-api-amazon-affiliate/wordpress-no-api-amazon-affiliate-plugin-4-2-2-cross-site-scripting-xss?_s_id=cve; https://patchstack.com/database/vulnerability/no-api-amazon-affiliate/wordpress-no-api-amazon-affiliate-plugin-4-2-2-cross-site-scripting-xss?_s_id=cve
CVE: CVE-2023-22682
Published: 2023-03-20
Description: Reflected Cross-Site Scripting (XSS) vulnerability in Manuel Masia | Pixedelic.Com Camera slideshow plugin <= 1.4.0.1 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/camera-slideshow/wordpress-camera-slideshow-plugin-1-4-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/camera-slideshow/wordpress-camera-slideshow-plugin-1-4-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-23718
Published: 2023-03-20
Description: Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Esstat17 Page Loading Effects plugin <= 2.0.0 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/page-loading-effects/wordpress-page-loading-effects-plugin-2-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/page-loading-effects/wordpress-page-loading-effects-plugin-2-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-23721
Published: 2023-03-20
Description: Cross-Site Request Forgery (CSRF) vulnerability in David Gwyer Admin Log plugin <= 1.50 versions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/admin-log/wordpress-admin-log-plugin-1-50-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/admin-log/wordpress-admin-log-plugin-1-50-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2022-47591
Published: 2023-03-20
Description: Reflected Cross-Site Scripting (XSS) vulnerability in Mickael Austoni Map Multi Marker plugin <= 3.2.1 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79, CWE-79
References: https://patchstack.com/database/vulnerability/map-multi-marker/wordpress-map-multi-marker-plugin-3-2-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/map-multi-marker/wordpress-map-multi-marker-plugin-3-2-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-0320
Published: 2023-03-20
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Izmir Katip Celebi University UBYS allows Stored XSS.This issue affects UBYS: before 23.03.16.


CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.usom.gov.tr/bildirim/tr-23-0159; https://www.usom.gov.tr/bildirim/tr-23-0159
CVE: CVE-2023-26513
Published: 2023-03-20
Description: Excessive Iteration vulnerability in Apache Software Foundation Apache Sling Resource Merger.This issue affects Apache Sling Resource Merger: from 1.2.0 before 1.4.2.


CVSS Score: 7.5 (HIGH)
CWE: CWE-834
References: https://lists.apache.org/thread/xpcpo1y88ldss5hgmvogsf6h3735l5zb; https://lists.apache.org/thread/xpcpo1y88ldss5hgmvogsf6h3735l5zb
CVE: CVE-2023-28118
Published: 2023-03-20
Description: kaml provides YAML support for kotlinx.serialization. Prior to version 0.53.0, applications that use kaml to parse untrusted input containing anchors and aliases may consume excessive memory and crash. Version 0.53.0 and later default to refusing to parse YAML documents containing anchors and aliases. There are no known workarounds.
CVSS Score: 7.5 (HIGH)
CWE: CWE-776
References: https://github.com/charleskorn/kaml/commit/5f82a2d7e00bfc307afca05d1dc4d7c50593531a; https://github.com/charleskorn/kaml/releases/tag/0.53.0; https://github.com/charleskorn/kaml/security/advisories/GHSA-c24f-2j3g-rg48
CVE: CVE-2023-28424
Published: 2023-03-20
Description: Soko if the code that powers packages.gentoo.org. Prior to version 1.0.2, the two package search handlers, `Search` and `SearchFeed`, implemented in `pkg/app/handler/packages/search.go`, are affected by a SQL injection via the `q` parameter. As a result, unauthenticated attackers can execute arbitrary SQL queries on `https://packages.gentoo.org/`. It was also demonstrated that primitive was enough to gain code execution in the context of the PostgreSQL container. The issue was addressed in commit `4fa6e4b619c[PII_REDACTED]b6ec56eab0e0cbf1e23y` of version 1.0.2 using prepared statements to interpolate user-controlled data in SQL queries.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/gentoo/soko/security/advisories/GHSA-gc2x-86p3-mxg2; https://gitweb.gentoo.org/sites/soko.git/commit/?id=4fa6e4b619c[PII_REDACTED]b6ec56eab0e0cbf1e23; https://www.sonarsource.com/blog/why-orms-and-prepared-statements-cant-always-win
CVE: CVE-2023-28426
Published: 2023-03-20
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: GHSA-xrqq-wqh4-5hg2. Reason: Further investigation showed that this CVE was assigned in error. Notes: See https://github.com/darylldoyle/svg-sanitizer/issues/88 for a technical discussion.
CVE: CVE-2023-1515
Published: 2023-03-20
Description: Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.19.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/pimcore/pimcore/commit/44c6b37aa649a0e3105fa41f3d74a3e511acf964; https://huntr.dev/bounties/ae0f2ec4-a245-4d0b-9d4d-bd8310dd6282; https://github.com/pimcore/pimcore/commit/44c6b37aa649a0e3105fa41f3d74a3e511acf964
CVE: CVE-2023-28428
Published: 2023-03-20
Description: PDFio is a C library for reading and writing PDF files. In versions 1.1.0 and prior, a denial of service vulnerability exists in the pdfio parser. Crafted pdf files can cause the program to run at 100% utilization and never terminate. This is different from CVE-2023-24808. A patch for this issue is available in version 1.1.1.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-770
References: https://github.com/michaelrsweet/pdfio/commit/97d[PII_REDACTED]dc5b0665e15dd951a5c12426a31; https://github.com/michaelrsweet/pdfio/security/advisories/GHSA-68x8-9phf-j7jf; https://github.com/michaelrsweet/pdfio/commit/97d[PII_REDACTED]dc5b0665e15dd951a5c12426a31
CVE: CVE-2023-28429
Published: 2023-03-20
Description: Pimcore is an open source data and experience management platform. Versions prior to 10.5.19 have an unsecured tooltip field in DataObject class definition. This vulnerability has the potential to steal a user's cookie and gain unauthorized access to that user's account through the stolen cookie or redirect users to other malicious sites. Users should upgrade to version 10.5.19 or, as a workaround, apply the patch manually.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/pimcore/pimcore/pull/14574; https://github.com/pimcore/pimcore/pull/14574.patch; https://github.com/pimcore/pimcore/security/advisories/GHSA-rcg9-hrhx-6q69
CVE: CVE-2022-3894
Published: 2023-03-20
Description: The WP OAuth Server (OAuth Authentication) WordPress plugin before 4.2.5 does not have CSRF check when deleting a client, and does not ensure that the object to be deleted is actually a client, which could allow attackers to make a logged in admin delete arbitrary client and post via a CSRF attack.
CVSS Score: 4.3 (MEDIUM)
References: https://wpscan.com/vulnerability/298487b2-4141-4c9f-9bb2-e1450aefc1a8; https://wpscan.com/vulnerability/298487b2-4141-4c9f-9bb2-e1450aefc1a8
CVE: CVE-2022-4148
Published: 2023-03-20
Description: The WP OAuth Server (OAuth Authentication) WordPress plugin before 4.3.0 has a flawed CSRF and authorisation check when deleting a client, which could allow any authenticated users, such as subscriber to delete arbitrary client.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-862
References: https://wpscan.com/vulnerability/be9b25c8-b0d7-4c22-81ff-e41650a4ed41; https://wpscan.com/vulnerability/be9b25c8-b0d7-4c22-81ff-e41650a4ed41
CVE: CVE-2023-0145
Published: 2023-03-20
Description: The Saan World Clock WordPress plugin through 1.8 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/f4e4b4a2-c7cb-42ce-9d5b-bd84efcbf54d; https://wpscan.com/vulnerability/f4e4b4a2-c7cb-42ce-9d5b-bd84efcbf54d
CVE: CVE-2023-0167
Published: 2023-03-20
Description: The GetResponse for WordPress plugin through 5.5.31 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/fafbf666-b908-48ef-9041-fea653e9bfeb; https://wpscan.com/vulnerability/fafbf666-b908-48ef-9041-fea653e9bfeb
CVE: CVE-2023-0175
Published: 2023-03-20
Description: The Responsive Clients Logo Gallery Plugin for WordPress plugin through 1.1.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/cdcd3c2c-cb29-4b21-8d3d-7eafbc1d3098; https://wpscan.com/vulnerability/cdcd3c2c-cb29-4b21-8d3d-7eafbc1d3098
CVE: CVE-2023-0273
Published: 2023-03-20
Description: The Custom Content Shortcode WordPress plugin through 4.0.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/5cafbba6-478f-4f5d-a2d4-60c6a22f2f1e; https://wpscan.com/vulnerability/5cafbba6-478f-4f5d-a2d4-60c6a22f2f1e
CVE: CVE-2023-0340
Published: 2023-03-20
Description: The Custom Content Shortcode WordPress plugin through 4.0.2 does not validate one of its shortcode attribute, which could allow users with a contributor role and above to include arbitrary files via a traversal attack. This could also allow them to read non PHP files and retrieve their content. RCE could also be achieved if the attacker manage to upload a malicious image containing PHP code, and then include it via the affected attribute, on a default WP install, authors could easily achieve that given that they have the upload_file capability.
CVSS Score: 8.8 (HIGH)
References: https://wpscan.com/vulnerability/71956598-90aa-4557-947a-c[PII_REDACTED]d; https://wpscan.com/vulnerability/71956598-90aa-4557-947a-c[PII_REDACTED]d
CVE: CVE-2023-0364
Published: 2023-03-20
Description: The real.Kit WordPress plugin before 5.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/e56759ae-7530-467a-b9ba-e9a404afb872; https://wpscan.com/vulnerability/e56759ae-7530-467a-b9ba-e9a404afb872
CVE: CVE-2023-0365
Published: 2023-03-20
Description: The React Webcam WordPress plugin through 1.2.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/d268d7a3-82fd-4444-bc0e-27c7cc279b5a; https://wpscan.com/vulnerability/d268d7a3-82fd-4444-bc0e-27c7cc279b5a
CVE: CVE-2023-0369
Published: 2023-03-20
Description: The GoToWP WordPress plugin through 5.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/351f31e0-cd13-4079-8fd1-447f319133c9; https://wpscan.com/vulnerability/351f31e0-cd13-4079-8fd1-447f319133c9
CVE: CVE-2023-0370
Published: 2023-03-20
Description: The WPB Advanced FAQ WordPress plugin through 1.0.6 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/4f5597f9-ab27-42d2-847c-14455b7d0849; https://wpscan.com/vulnerability/4f5597f9-ab27-42d2-847c-14455b7d0849
CVE: CVE-2023-0630
Published: 2023-03-20
Description: The Slimstat Analytics WordPress plugin before 4.9.3.3 does not prevent subscribers from rendering shortcodes that concatenates attributes directly into an SQL query.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://wpscan.com/vulnerability/b82bdd02-b699-4527-86cc-d60b56ab0c55; https://wpscan.com/vulnerability/b82bdd02-b699-4527-86cc-d60b56ab0c55
CVE: CVE-2023-0631
Published: 2023-03-20
Description: The Paid Memberships Pro WordPress plugin before 2.9.12 does not prevent subscribers from rendering shortcodes that concatenate attributes directly into an SQL query.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://wpscan.com/vulnerability/19ef92fd-b493-4488-91f0-e6ba51362f79; https://wpscan.com/vulnerability/19ef92fd-b493-4488-91f0-e6ba51362f79
CVE: CVE-2023-0865
Published: 2023-03-20
Description: The WooCommerce Multiple Customer Addresses & Shipping WordPress plugin before 21.7 does not ensure that the address to add/update/retrieve/delete and duplicate belong to the user making the request, or is from a high privilege users, allowing any authenticated users, such as subscriber to add/update/duplicate/delete as well as retrieve addresses of other users.
CVSS Score: 8.8 (HIGH)
CWE: CWE-639
References: https://wpscan.com/vulnerability/e39c0171-ed4a-4143-9a31-c407e3555eec; https://wpscan.com/vulnerability/e39c0171-ed4a-4143-9a31-c407e3555eec
CVE: CVE-2023-0875
Published: 2023-03-20
Description: The WP Meta SEO WordPress plugin before 4.5.3 does not properly sanitize and escape inputs into SQL queries, leading to a blind SQL Injection vulnerability that can be exploited by subscriber+ users.
CVSS Score: 8.8 (HIGH)
References: https://wpscan.com/vulnerability/d44e9a45-cbdf-46b1-8b48-7d934b617534; https://wpscan.com/vulnerability/d44e9a45-cbdf-46b1-8b48-7d934b617534
CVE: CVE-2023-0876
Published: 2023-03-20
Description: The WP Meta SEO WordPress plugin before 4.5.3 does not authorize several ajax actions, allowing low-privilege users to make updates to certain data and leading to an arbitrary redirect vulnerability.
CVSS Score: 6.1 (MEDIUM)
References: https://wpscan.com/vulnerability/1a8c97f9-98fa-4e29-b7f7-bb9abe0c42ea; https://wpscan.com/vulnerability/1a8c97f9-98fa-4e29-b7f7-bb9abe0c42ea
CVE: CVE-2023-0890
Published: 2023-03-20
Description: The WordPress Shortcodes Plugin — Shortcodes Ultimate WordPress plugin before 5.12.8 does not ensure that posts to be displayed via some shortcodes are already public and can be accessed by the user making the request, allowing any authenticated users such as subscriber to view draft, private or even password protected posts. It is also possible to leak the password of protected posts
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://wpscan.com/vulnerability/8a466f15-f112-4527-8b02-4544a8032671; https://wpscan.com/vulnerability/8a466f15-f112-4527-8b02-4544a8032671
CVE: CVE-2023-0911
Published: 2023-03-20
Description: The WordPress Shortcodes Plugin — Shortcodes Ultimate WordPress plugin before 5.12.8 does not validate the user meta to be retrieved via the user shortcode, allowing any authenticated users such as subscriber to retrieve arbitrary user meta (except the user_pass), such as the user email and activation key by default.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://wpscan.com/vulnerability/35404d16-7213-4293-ac0d-926bd6c17444; https://wpscan.com/vulnerability/35404d16-7213-4293-ac0d-926bd6c17444
CVE: CVE-2023-0937
Published: 2023-03-20
Description: The VK All in One Expansion Unit WordPress plugin before 9.87.1.0 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers
CVSS Score: 6.1 (MEDIUM)
References: https://wpscan.com/vulnerability/5110ff02-c721-43eb-b13e-50aca25e1162; https://wpscan.com/vulnerability/5110ff02-c721-43eb-b13e-50aca25e1162
CVE: CVE-2023-0940
Published: 2023-03-20
Description: The ProfileGrid WordPress plugin before 5.3.1 provides an AJAX endpoint for resetting a user password but does not implement proper authorization. This allows a user with low privileges, such as subscriber, to change the password of any account, including Administrator ones.
CVSS Score: 8.8 (HIGH)
CWE: CWE-863
References: https://wpscan.com/vulnerability/56744f72-2d48-4f42-8195-24b4dd951bb5; https://wpscan.com/vulnerability/56744f72-2d48-4f42-8195-24b4dd951bb5
CVE: CVE-2023-1517
Published: 2023-03-20
Description: Cross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.19.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/pimcore/pimcore/commit/3a22700dacd8a439cffcb208838a4199e732cff7; https://huntr.dev/bounties/82adf0dd-8ebd-4d15-9f91-6060c8fa5a0d; https://github.com/pimcore/pimcore/commit/3a22700dacd8a439cffcb208838a4199e732cff7
CVE: CVE-2023-22288
Published: 2023-03-20
Description: HTML Email Injection in Tribe29 Checkmk <=2.1.0p23; <=2.0.0p34, and all versions of Checkmk 1.6.0 allows an authenticated attacker to inject malicious HTML into Emails
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-138, CWE-79
References: https://checkmk.com/werk/15069; https://checkmk.com/werk/15069
CVE: CVE-2023-27586
Published: 2023-03-20
Description: CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to version 2.7.0, Cairo can send requests to external hosts when processing SVG files. A malicious actor could send a specially crafted SVG file that allows them to perform a server-side request forgery or denial of service. Version 2.7.0 disables CairoSVG's ability to access other files online by default.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-20, CWE-918, CWE-918
References: https://github.com/Kozea/CairoSVG/commit/12d31c653c0254fa9d9853f66b04ea46e7397255; https://github.com/Kozea/CairoSVG/commit/33007d4af9195e2bfb2ff9af064c4c2d8e4b2b53; https://github.com/Kozea/CairoSVG/releases/tag/2.7.0