deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-2249
Published: 2025-03-29
Description: The SoJ SoundSlides plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the soj_soundslides_options_subpanel() function in all versions up to, and including, 1.2.2. This makes it possible for authenticated attackers, with Contributor-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://plugins.trac.wordpress.org/browser/soj-soundslides/tags/1.2.2/soj-soundslides.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/f648e7f3-d93a-4a46-ae77-81a94880869c?source=cve
CVE: CVE-2025-2266
Published: 2025-03-29
Description: The Checkout Mestres do WP for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the cwmpUpdateOptions() function in versions 8.6.5 to 8.7.5. This makes it possible for unauthenticated attackers to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/checkout-mestres-wp/trunk/backend/core/base/ajax.php#L31; https://wordpress.org/plugins/checkout-mestres-wp/; https://www.wordfence.com/threat-intel/vulnerabilities/id/9834fd5b-8445-4c6f-95f9-f0df785c65f8?source=cve
CVE: CVE-2025-2803
Published: 2025-03-29
Description: The So-Called Air Quotes plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 0.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.
CVSS Score: 7.3 (HIGH)
CWE: CWE-94
References: https://plugins.svn.wordpress.org/so-called-air-quotes/trunk/airquote.php; https://wordpress.org/plugins/so-called-air-quotes/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/83f2ceee-4422-4ed5-adc7-91bc022ae42d?source=cve
CVE: CVE-2025-2840
Published: 2025-03-29
Description: The DAP to Autoresponders Email Syncing plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0 through the publicly accessible phpinfo.php script. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed file.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://plugins.trac.wordpress.org/browser/dap-to-autoresponders-daar/trunk/infusionsoft_src/phpinfo.php#L3; https://wordpress.org/plugins/dap-to-autoresponders-daar/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/3ff90774-f5f6-4d9c-9565-1cff31f9bec4?source=cve
CVE: CVE-2024-11180
Published: 2025-03-29
Description: The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown Timer Widget ekit_countdown_timer_title parameter in all versions up to, and including, 3.4.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/3190501/elementskit-lite/trunk/widgets/countdown-timer/countdown-timer.php; https://plugins.trac.wordpress.org/changeset/3262976/elementskit-lite/trunk/widgets/init/assets/js/elementor.js; https://www.wordfence.com/threat-intel/vulnerabilities/id/35969379-e668-4045-8de7-696f196ba5b0?source=cve
CVE: CVE-2024-55895
Published: 2025-03-29
Description: IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.  This information could be used in further attacks against the system.
CVSS Score: 2.7 (LOW)
CWE: CWE-209
References: https://www.ibm.com/support/pages/node/7185450
CVE: CVE-2025-1219
Published: 2025-03-30
Description: In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when requesting a HTTP resource using the DOM or SimpleXML extensions, the wrong content-type header is used to determine the charset when the requested resource performs a redirect. This may cause the resulting document to be parsed incorrectly or bypass validations.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-1116
References: https://github.com/php/php-src/security/advisories/GHSA-p3x9-6h7p-cgfc; https://lists.debian.org/debian-lts-announce/2025/03/msg00014.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2025-1734
Published: 2025-03-30
Description: In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when receiving headers from HTTP server, the headers missing a colon (:) are treated as valid headers even though they are not. This may confuse applications into accepting invalid headers.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: https://github.com/php/php-src/security/advisories/GHSA-pcmh-g36c-qc44; https://lists.debian.org/debian-lts-announce/2025/03/msg00014.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2025-1736
Published: 2025-03-30
Description: In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when user-supplied headers are sent, the insufficient validation of the end-of-line characters may prevent certain headers from being sent or lead to certain headers be misinterpreted.
CVSS Score: 7.3 (HIGH)
CWE: CWE-20
References: https://github.com/php/php-src/security/advisories/GHSA-hgf5-96fm-v528; https://lists.debian.org/debian-lts-announce/2025/03/msg00014.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2025-1861
Published: 2025-03-30
Description: In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when parsing HTTP redirect in the response to an HTTP request, there is currently limit on the location value size caused by limited size of the location buffer to 1024. However as per RFC9110, the limit is recommended to be 8000. This may lead to incorrect URL truncation and redirecting to a wrong location.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-131
References: https://github.com/php/php-src/security/advisories/GHSA-52jp-hrpf-2jff; https://lists.debian.org/debian-lts-announce/2025/03/msg00014.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2025-2951
Published: 2025-03-30
Description: A vulnerability classified as critical has been found in Bluestar Micro Mall 1.0. Affected is an unknown function of the file /api/data.php. The manipulation of the argument Search leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://vuldb.com/?ctiid.302004; https://vuldb.com/?id.302004; https://vuldb.com/?submit.521162
CVE: CVE-2025-2952
Published: 2025-03-30
Description: A vulnerability classified as critical was found in Bluestar Micro Mall 1.0. Affected by this vulnerability is an unknown functionality of the file /api/api.php?mod=upload&type=1. The manipulation of the argument File leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-284, CWE-434, CWE-434
References: https://vuldb.com/?ctiid.302005; https://vuldb.com/?id.302005; https://www.jianshu.com/p/22d3ae38e628?v=[PII_REDACTED]58
CVE: CVE-2025-2953
Published: 2025-03-30
Description: A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0+cu124. Affected by this issue is the function torch.mkldnn_max_pool2d. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The security policy of the project warns to use unknown models which might establish malicious effects.
CVSS Score: 3.3 (LOW)
CWE: CWE-404
References: https://github.com/pytorch/pytorch/blob/main/SECURITY.md#untrusted-models; https://github.com/pytorch/pytorch/issues/149274; https://github.com/pytorch/pytorch/issues/149274#issue[PII_REDACTED]
CVE: CVE-2025-2954
Published: 2025-03-30
Description: A vulnerability, which was classified as problematic, was found in mannaandpoem OpenManus up to 2025.3.13. This affects the function execute of the file app/tool/file_saver.py of the component File Handler. The manipulation leads to improper access controls. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.3 (LOW)
CWE: CWE-266, CWE-284
References: https://magnificent-dill-351.notion.site/Arbitrary-File-Writing-in-OpenManus-2025-3-13-1b9c693918ed805e8e7fd35a896d2d41; https://vuldb.com/?ctiid.302007; https://vuldb.com/?id.302007
CVE: CVE-2025-2955
Published: 2025-03-30
Description: A vulnerability has been found in TOTOLINK A3000RU up to 5.9c.5185 and classified as problematic. This vulnerability affects unknown code of the file /cgi-bin/ExportIbmsConfig.sh of the component IBMS Configuration File Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-266, CWE-284
References: https://lavender-bicycle-a5a.notion.site/TOTOLINK-A3000RU-ExportIbmsConfig-1b953a41781f80b89397e8c34717eb94?pvs=4; https://vuldb.com/?ctiid.302008; https://vuldb.com/?id.302008
CVE: CVE-2025-2956
Published: 2025-03-30
Description: A vulnerability was found in TRENDnet TI-G102i 1.0.7.S0_ /1.0.8.S0_ and classified as problematic. This issue affects the function plugins_call_handle_uri_raw of the file /usr/sbin/lighttpd of the component HTTP Request Handler. The manipulation leads to null pointer dereference. The attack can only be done within the local network. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-404, CWE-476
References: https://docs.google.com/document/d/16iWGXHpmlwJ0GAOi458YlpR56McCvDcN/edit#heading=h.gjdgxs; https://drive.google.com/file/d/1irEQCJRvcJbh1PdPbk0PRwJB8-fc5mYR/view?usp=sharing; https://vuldb.com/?ctiid.302009
CVE: CVE-2025-2957
Published: 2025-03-30
Description: A vulnerability was found in TRENDnet TEW-411BRP+ 2.07. It has been classified as problematic. Affected is the function sub_401DB0 of the file /usr/sbin/httpd of the component HTTP Request Handler. The manipulation leads to null pointer dereference. The attack can only be initiated within the local network. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-404, CWE-476
References: https://docs.google.com/document/d/1NnvweBsYJQ0MGwBvpi5aAe69g8g5PaNL/edit#heading=h.gjdgxs; https://drive.google.com/file/d/1Hq3-cTke0SeJguNpop-jpzMtoCHkg9Cb/view?usp=drive_link; https://vuldb.com/?ctiid.302010
CVE: CVE-2025-2958
Published: 2025-03-30
Description: A vulnerability was found in TRENDnet TEW-818DRU 1.0.14.6. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /usr/sbin/httpd of the component HTTP Request Handler. The manipulation leads to denial of service. The attack needs to be done within the local network. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-404
References: https://docs.google.com/document/d/1DHUsUpeizmqFbJe_0SjsJvCFspPeFDaK/edit#heading=h.gjdgxs; https://drive.google.com/file/d/1SbZ63uqg6QJYjPFcLY5wBqWrh-NMrnZq/view?usp=drive_link; https://vuldb.com/?ctiid.302011
CVE: CVE-2025-2959
Published: 2025-03-30
Description: A vulnerability was found in TRENDnet TEW-410APB 1.3.06b. It has been rated as problematic. Affected by this issue is the function sub_4019A0 of the file /usr/sbin/httpd of the component HTTP Request Handler. The manipulation leads to null pointer dereference. The attack needs to be initiated within the local network. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-404, CWE-476, CWE-476
References: https://docs.google.com/document/d/1PcJZQ364MQxz1eUt6PLnWIQYTLNuJ5_3/edit#heading=h.gjdgxs; https://drive.google.com/file/d/1idRNkvFHyh5vOxw2VIs2wcwdVOVLuqkG/view?usp=drive_link; https://vuldb.com/?ctiid.302012
CVE: CVE-2025-2960
Published: 2025-03-30
Description: A vulnerability classified as problematic has been found in TRENDnet TEW-637AP and TEW-638APB 1.2.7/1.3.0.106. This affects the function sub_41DED0 of the file /bin/goahead of the component HTTP Request Handler. The manipulation leads to null pointer dereference. Access to the local network is required for this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-404, CWE-476, CWE-476
References: https://docs.google.com/document/d/17FadWn-UWXjvcYNzDI4JRjag-lGUU9pJ/edit#heading=h.gjdgxs; https://drive.google.com/file/d/1SS7jsYBNl0faSOy_vH5tNn_xJJ_HA1xU/view?usp=drive_link; https://vuldb.com/?ctiid.302013
CVE: CVE-2024-13804
Published: 2025-03-30
Description: Unauthenticated RCE in HPE Insight Cluster Management Utility
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://red.0xbad53c.com/vulnerability-research/rce-in-hpe-insight-cluster-management-utility-cve-2024-13804; https://red.0xbad53c.com/vulnerability-research/rce-in-hpe-insight-cluster-management-utility-cve-2024-13804
CVE: CVE-2025-2961
Published: 2025-03-30
Description: A vulnerability classified as problematic was found in opensolon up to 3.1.0. This vulnerability affects the function render_mav of the file /aa of the component org.noear.solon.core.handle.RenderManager. The manipulation of the argument template with the input ../org/example/HelloApp.class leads to path traversal: '../filedir'. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-23, CWE-24
References: https://github.com/Q16G/cve_detail/blob/main/solon/templateRCE.md; https://vuldb.com/?ctiid.302014; https://vuldb.com/?id.302014
CVE: CVE-2025-2963
Published: 2025-03-30
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2025-2964
Published: 2025-03-30
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2025-2965
Published: 2025-03-30
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2025-2966
Published: 2025-03-31
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2025-2967
Published: 2025-03-31
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2025-2968
Published: 2025-03-31
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2025-1268
Published: 2025-03-31
Description: Out-of-bounds vulnerability in EMF Recode processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic Plus LIPS4 Printer Driver / Generic Plus LIPSLX Printer Driver / Generic Plus PS Printer Driver / Generic FAX Printer Driver / UFRII LT Printer Driver / CARPS2 Printer Driver / PDF Driver / LIPS4 Printer Driver / LIPSLX Printer Driver / UFR II Printer Driver / PS Printer Driver / PCL6 Printer Driver
CVSS Score: 9.4 (CRITICAL)
CWE: CWE-787
References: https://canon.jp/support/support-info/250328vulnerability-response; https://psirt.canon/advisory-information/cp2025-003/; https://www.canon-europe.com/support/product-security/
CVE: CVE-2025-2969
Published: 2025-03-31
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2025-2970
Published: 2025-03-31
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2025-2971
Published: 2025-03-31
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2025-2972
Published: 2025-03-31
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2025-2973
Published: 2025-03-31
Description: A vulnerability, which was classified as critical, was found in code-projects College Management System 1.0. This affects an unknown part of the file /Admin/student.php. The manipulation of the argument profile_image leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-284, CWE-434, CWE-434
References: https://code-projects.org/; https://github.com/hak0neP/cve/blob/main/cve-RCE.md; https://vuldb.com/?ctiid.302025
CVE: CVE-2025-2974
Published: 2025-03-31
Description: A vulnerability has been found in CodeCanyon Perfex CRM up to 3.2.1 and classified as problematic. This vulnerability affects unknown code of the file /contract of the component Contracts. The manipulation of the argument content leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://bytium.com/stored-xss-in-perfex-crm-3-2-1-contracts-module/; https://vuldb.com/?ctiid.302026; https://vuldb.com/?id.302026
CVE: CVE-2025-2975
Published: 2025-03-31
Description: A vulnerability was found in GFI KerioConnect 10.0.6 and classified as problematic. This issue affects some unknown processing of the file Settings/Email/Signature/EditHtmlSource of the component Signature Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://github.com/0xs1ash/poc/blob/main/xss.md#1-stored-xss; https://vuldb.com/?ctiid.302027; https://vuldb.com/?id.302027
CVE: CVE-2025-3011
Published: 2025-03-31
Description: SOOP-CLM from PiExtract has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.twcert.org.tw/en/cp-139-10049-394bd-2.html; https://www.twcert.org.tw/tw/cp-132-10048-d690c-1.html
CVE: CVE-2025-3013
Published: 2025-03-31
Description: Insecure Direct Object References (IDOR) in access control in Customer Portal before 2.1.4 on NightWolf Penetration Testing allows an attacker to access via manipulating request parameters or object references.
CWE: CWE-285
References: https://bug.report.night-wolf.io/changelogs
CVE: CVE-2025-3014
Published: 2025-03-31
Description: Insecure Direct Object References (IDOR) in access control in Tracking 2.1.4 on NightWolf Penetration Testing allows an attacker to access via manipulating request parameters or object references.
CWE: CWE-285
References: https://bug.report.night-wolf.io/changelogs
CVE: CVE-2025-24517
Published: 2025-03-31
Description: Use of client-side authentication issue exists in CHOCO TEI WATCHER mini (IB-MCT001) all versions. If this issue is exploited, a remote attacker may obtain the product login password without authentication.
CVSS Score: 7.5 (HIGH)
CWE: CWE-603
References: https://jvn.jp/en/vu/JVNVU91154745/; https://www.cisa.gov/news-events/ics-advisories/icsa-25-084-04; https://www.inaba.co.jp/files/chocomini_vulnerability.pdf
CVE: CVE-2025-24852
Published: 2025-03-31
Description: Storing passwords in a recoverable format issue exists in CHOCO TEI WATCHER mini (IB-MCT001) all versions. If this issue is exploited, an attacker who can access the microSD card used on the product may obtain the product login password.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-257
References: https://jvn.jp/en/vu/JVNVU91154745/; https://www.cisa.gov/news-events/ics-advisories/icsa-25-084-04; https://www.inaba.co.jp/files/chocomini_vulnerability.pdf
CVE: CVE-2025-25211
Published: 2025-03-31
Description: Weak password requirements issue exists in CHOCO TEI WATCHER mini (IB-MCT001) all versions. If this issue is exploited, a brute-force attack may allow an attacker unauthorized access and login.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-521
References: https://jvn.jp/en/vu/JVNVU91154745/; https://www.cisa.gov/news-events/ics-advisories/icsa-25-084-04; https://www.inaba.co.jp/files/chocomini_vulnerability.pdf
CVE: CVE-2025-26689
Published: 2025-03-31
Description: Direct request ('Forced Browsing') issue exists in CHOCO TEI WATCHER mini (IB-MCT001) all versions. If a remote attacker sends a specially crafted HTTP request to the product, the product data may be obtained or deleted, and/or the product settings may be altered.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-425
References: https://jvn.jp/en/vu/JVNVU91154745/; https://www.cisa.gov/news-events/ics-advisories/icsa-25-084-04; https://www.inaba.co.jp/files/chocomini_vulnerability.pdf
CVE: CVE-2025-2976
Published: 2025-03-31
Description: A vulnerability was found in GFI KerioConnect 10.0.6. It has been classified as problematic. Affected is an unknown function of the component File Upload. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://github.com/0xs1ash/poc/blob/main/xss.md#2-when-a-file-with-a-malicious-javascript-code-in-its-name-is-uploaded-to-the-system-it-is-displayed-again-on-the-page-within-the-input-field-without-being-sanitized-this-creates-the-potential-for-an-xss-att; https://vuldb.com/?ctiid.302028; https://vuldb.com/?id.302028
CVE: CVE-2025-2977
Published: 2025-03-31
Description: A vulnerability was found in GFI KerioConnect 10.0.6. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component PDF File Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://github.com/0xs1ash/poc/blob/main/portable_data_exfiltration.md; https://vuldb.com/?ctiid.302029; https://vuldb.com/?id.302029
CVE: CVE-2025-31103
Published: 2025-03-31
Description: Untrusted data deserialization vulnerability exists in a-blog cms. Processing a specially crafted request may store arbitrary files on the server where the product is running. This can be leveraged to execute an arbitrary script on the server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-502
References: https://developer.a-blogcms.jp/blog/news/entry-4197.html; https://developer.a-blogcms.jp/blog/news/security-update202503.html; https://jvn.jp/en/jp/JVN66982699/