deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-42262
Published: 2022-03-11
Description: An issue was discovered in Softing OPC UA C++ SDK before 5.70. An invalid XML element in the type dictionary makes the OPC/UA client crash due to an out-of-memory condition.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: https://industrial.softing.com/fileadmin/sof-files/pdf/ia/support/Security_Bulletin_CVE-2021-42262.pdf; https://industrial.softing.com/us/solutions/opc-and-opc-ua.html; https://industrial.softing.com/fileadmin/sof-files/pdf/ia/support/Security_Bulletin_CVE-2021-42262.pdf
CVE: CVE-2021-42577
Published: 2022-03-11
Description: An issue was discovered in Softing OPC UA C++ SDK before 5.70. A malformed OPC/UA message abort packet makes the client crash with a NULL pointer dereference.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://industrial.softing.com/fileadmin/sof-files/pdf/ia/support/Security_Bulletin_CVE-2021-42577.pdf; https://softing.com; https://industrial.softing.com/fileadmin/sof-files/pdf/ia/support/Security_Bulletin_CVE-2021-42577.pdf
CVE: CVE-2022-24760
Published: 2022-03-12
Description: Parse Server is an open source http web server backend. In versions prior to 4.10.7 there is a Remote Code Execution (RCE) vulnerability in Parse Server. This vulnerability affects Parse Server in the default configuration with MongoDB. The main weakness that leads to RCE is the Prototype Pollution vulnerable code in the file `DatabaseController.js`, so it is likely to affect Postgres and any other database backend as well. This vulnerability has been confirmed on Linux (Ubuntu) and Windows. Users are advised to upgrade as soon as possible. The only known workaround is to manually patch your installation with code referenced at the source GHSA-p6h4-93qp-jhcm.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-74, CWE-1321
References: https://github.com/parse-community/parse-server/commit/886bfd7cac69496e3f73d4bb536f0eec3cba0e4d; https://github.com/parse-community/parse-server/security/advisories/GHSA-p6h4-93qp-jhcm; https://www.huntr.dev/bounties/ac24b343-e7da-4bc7-ab38-4f4f5cc9d099/
CVE: CVE-2022-26276
Published: 2022-03-12
Description: An issue in index.php of OneNav v0.9.14 allows attackers to perform directory traversal.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/helloxz/onenav/issues/44; https://github.com/helloxz/onenav/issues/44
CVE: CVE-2022-26533
Published: 2022-03-12
Description: Alist v2.1.0 and below was discovered to contain a cross-site scripting (XSS) vulnerability via /i/:data/ipa.plist.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Xhofe/alist/issues/645; https://github.com/Xhofe/alist/issues/645
CVE: CVE-2022-0880
Published: 2022-03-12
Description: Cross-site Scripting (XSS) - Stored in GitHub repository star7th/showdoc prior to 2.10.2.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/star7th/showdoc/commit/818d7fe731f452acccacf731ce47ec27ad68049c; https://huntr.dev/bounties/df347aa9-ed9b-4f75-af99-c83b8aad3bcf; https://github.com/star7th/showdoc/commit/818d7fe731f452acccacf731ce47ec27ad68049c
CVE: CVE-2022-0926
Published: 2022-03-12
Description: File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/microweber/microweber/commit/89200cfcc2cfefe5554721e7fa3cf52f6a2a9120; https://huntr.dev/bounties/dc5d1555-0108-4627-b542-93352f35fa17; https://github.com/microweber/microweber/commit/89200cfcc2cfefe5554721e7fa3cf52f6a2a9120
CVE: CVE-2022-0929
Published: 2022-03-12
Description: XSS on dynamic_text module in GitHub repository microweber/microweber prior to 1.2.11.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/microweber/microweber/commit/de6d17b52d261902653fbdd2ecefcaac82e54256; https://huntr.dev/bounties/66abf7ec-2dd7-4cb7-87f5-e91375883f03; https://github.com/microweber/microweber/commit/de6d17b52d261902653fbdd2ecefcaac82e54256
CVE: CVE-2022-0930
Published: 2022-03-12
Description: File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-434, CWE-79
References: https://github.com/microweber/microweber/commit/33eb4cc0f80c1f86388c1862a8aee1061fa5d72e; https://huntr.dev/bounties/d184ce19-9608-42f1-bc3d-06ece2d9a993; https://github.com/microweber/microweber/commit/33eb4cc0f80c1f86388c1862a8aee1061fa5d72e
CVE: CVE-2022-26966
Published: 2022-03-12
Description: An issue was discovered in the Linux kernel before 5.16.12. drivers/net/usb/sr9700.c allows attackers to obtain sensitive information from heap memory via crafted frame lengths from a device.
CVSS Score: 5.5 (MEDIUM)
References: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.10; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=e9da0b56fe27206b49f39805f7dcda8a89379062; https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html
CVE: CVE-2022-26967
Published: 2022-03-12
Description: GPAC 2.0 allows a heap-based buffer overflow in gf_base64_encode. It can be triggered via MP4Box.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/gpac/gpac/issues/2138; https://www.debian.org/security/2023/dsa-5411; https://github.com/gpac/gpac/issues/2138
CVE: CVE-2021-36368
Published: 2022-03-13
Description: An issue was discovered in OpenSSH before 8.9. If a client is using public-key authentication with agent forwarding but without -oLogLevel=verbose, and an attacker has silently modified the server to support the None authentication option, then the user cannot determine whether FIDO authentication is going to confirm that the user wishes to connect to that server, or that the user wishes to allow that server to connect to a different server on the user's behalf. NOTE: the vendor's position is "this is not an authentication bypass, since nothing is being bypassed.
CVSS Score: 3.7 (LOW)
CWE: CWE-287
References: https://bugzilla.mindrot.org/show_bug.cgi?id=3316; https://docs.ssh-mitm.at/trivialauth.html; https://github.com/openssh/openssh-portable/pull/258
CVE: CVE-2022-23960
Published: 2022-03-13
Description: Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB. An attacker can leverage the shared branch history in the Branch History Buffer (BHB) to influence mispredicted branches. Then, cache allocation can allow the attacker to obtain sensitive information.
CVSS Score: 5.6 (MEDIUM)
References: http://www.openwall.com/lists/oss-security/2022/03/18/2; https://developer.arm.com/support/arm-security-updates; https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability
CVE: CVE-2021-45886
Published: 2022-03-13
Description: An issue was discovered in PONTON X/P Messenger before 3.11.2. Anti-CSRF tokens are globally valid, making the web application vulnerable to a weakened version of CSRF, where an arbitrary token of a low-privileged user (such as operator) can be used to confirm actions of higher-privileged ones (such as xpadmin).
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://www.ponton.de/products/xpmessenger/; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-080.txt; https://www.ponton.de/products/xpmessenger/
CVE: CVE-2021-45887
Published: 2022-03-13
Description: An issue was discovered in PONTON X/P Messenger before 3.11.2. Due to path traversal in private/SchemaSetUpload.do for uploaded ZIP files, an executable script can be uploaded by web application administrators, giving the attacker remote code execution on the underlying server via an imgs/*.jsp URI.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://www.ponton.de/products/xpmessenger/; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-077.txt; https://www.ponton.de/products/xpmessenger/
CVE: CVE-2021-45888
Published: 2022-03-13
Description: An issue was discovered in PONTON X/P Messenger before 3.11.2. The navigation tree that is shown on the left side of every page of the web application is vulnerable to XSS: it allows injection of JavaScript into its nodes. Creating such nodes is only possible for users who have the role Configuration Administrator or Administrator.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://www.ponton.de/products/xpmessenger/; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-079.txt; https://www.ponton.de/products/xpmessenger/
CVE: CVE-2021-45889
Published: 2022-03-13
Description: An issue was discovered in PONTON X/P Messenger before 3.11.2. Several functions are vulnerable to reflected XSS, as demonstrated by private/index.jsp?partners/ShowNonLocalPartners.do?localID= or private/index.jsp or private/index.jsp?database/databaseTab.jsp or private/index.jsp?activation/activationMainTab.jsp or private/index.jsp?communication/serverTab.jsp or private/index.jsp?emailNotification/notificationTab.jsp.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.ponton.de/products/xpmessenger/; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-078.txt; https://www.ponton.de/products/xpmessenger/
CVE: CVE-2022-24128
Published: 2022-03-13
Description: Timescale TimescaleDB 1.x and 2.x before 2.5.2 may allow privilege escalation during extension installation. The installation process uses commands such as CREATE x IF NOT EXIST that allow an unprivileged user to precreate objects. These objects will be used by the installer (which executes as Superuser), leading to privilege escalation. In order to be able to take advantage of this, an unprivileged user would need to be able to create objects in a database and then get a Superuser to install TimescaleDB into their database. (In the fixed versions, the installation aborts when it finds that an object already exists.)
CVSS Score: 8.0 (HIGH)
CWE: CWE-863
References: https://docs.timescale.com/timescaledb/latest/overview/release-notes/; https://github.com/timescale/timescaledb/commit/6275c2985927cfd4900b85cac5120227c8cb1f0c; https://github.com/timescale/timescaledb/commit/c8b8516e466c2bb7d2ae6a4b0b2e8e60b24b24a2
CVE: CVE-2022-24696
Published: 2022-03-13
Description: Mirametrix Glance before 5.1.1.42207 (released on 2018-08-30) allows a local attacker to elevate privileges. NOTE: this is unrelated to products from the glance.com and glance.net websites.
CVSS Score: 7.8 (HIGH)
References: https://help.mirametrix.com/hc/en-us/articles/[PII_REDACTED]157; https://help.mirametrix.com/hc/en-us/articles/[PII_REDACTED]157
CVE: CVE-2022-26981
Published: 2022-03-13
Description: Liblouis through 3.21.0 has a buffer overflow in compilePassOpcode in compileTranslationTable.c (called, indirectly, by tools/lou_checktable.c).
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: http://seclists.org/fulldisclosure/2022/Jul/12; http://seclists.org/fulldisclosure/2022/Jul/15; http://seclists.org/fulldisclosure/2022/Jul/16
CVE: CVE-2021-46709
Published: 2022-03-13
Description: phpLiteAdmin through 1.9.8.2 allows XSS via the index.php newRows parameter (aka num or number).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://bitbucket.org/phpliteadmin/public/issues/399/xss-vulnerability; https://bitbucket.org/phpliteadmin/public/issues/399/xss-vulnerability
CVE: CVE-2021-43954
Published: 2022-03-14
Description: The DefaultRepositoryAdminService class in Fisheye and Crucible before version 4.8.9 allowed remote attackers, who have 'can add repository permission', to enumerate the existence of internal network and filesystem resources via a Server-Side Request Forgery (SSRF) vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-918
References: https://jira.atlassian.com/browse/CRUC-8520; https://jira.atlassian.com/browse/FE-7384; https://jira.atlassian.com/browse/CRUC-8520
CVE: CVE-2022-0937
Published: 2022-03-14
Description: Stored xss in showdoc through file upload in GitHub repository star7th/showdoc prior to 2.10.4.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/star7th/showdoc/commit/42c0d9813df3035728b36116a6ce9116e6fa8ed3; https://huntr.dev/bounties/6127739d-f4f2-44cd-ae3d-e3ccb7f0d7b5; https://github.com/star7th/showdoc/commit/42c0d9813df3035728b36116a6ce9116e6fa8ed3
CVE: CVE-2022-0341
Published: 2022-03-14
Description: Cross-site Scripting (XSS) - Stored in GitHub repository vanessa219/vditor prior to 3.8.12.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/vanessa219/vditor/commit/219f8a9e272aba3cbc0096a82cac776532dbb9e5; https://huntr.dev/bounties/fa546b57-bc15-4705-824e-9474b616f628; https://github.com/vanessa219/vditor/commit/219f8a9e272aba3cbc0096a82cac776532dbb9e5
CVE: CVE-2022-0938
Published: 2022-03-14
Description: Stored XSS via file upload in GitHub repository star7th/showdoc prior to v2.10.4.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/star7th/showdoc/commit/830c89a4c2c5fd0dd491422bf8e97b4eb5713f55; https://huntr.dev/bounties/3eb5a8f9-24e3-4eae-a212-070b2fbc237e; https://github.com/star7th/showdoc/commit/830c89a4c2c5fd0dd491422bf8e97b4eb5713f55
CVE: CVE-2022-0940
Published: 2022-03-14
Description: Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/star7th/showdoc/commit/[PII_REDACTED]2d4e29cc94148c6ec84a204a607b73; https://huntr.dev/bounties/856bd2e2-db4f-4b7d-9927-222261ae3782; https://github.com/star7th/showdoc/commit/[PII_REDACTED]2d4e29cc94148c6ec84a204a607b73
CVE: CVE-2022-22719
Published: 2022-03-14
Description: A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This issue affects Apache HTTP Server 2.4.52 and earlier.
CVSS Score: 7.5 (HIGH)
CWE: CWE-665, CWE-665
References: http://seclists.org/fulldisclosure/2022/May/33; http://seclists.org/fulldisclosure/2022/May/35; http://seclists.org/fulldisclosure/2022/May/38
CVE: CVE-2022-22720
Published: 2022-03-14
Description: Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-444, CWE-444
References: http://seclists.org/fulldisclosure/2022/May/33; http://seclists.org/fulldisclosure/2022/May/35; http://seclists.org/fulldisclosure/2022/May/38
CVE: CVE-2022-22721
Published: 2022-03-14
Description: If LimitXMLRequestBody is set to allow request bodies larger than 350MB (defaults to 1M) on 32 bit systems an integer overflow happens which later causes out of bounds writes. This issue affects Apache HTTP Server 2.4.52 and earlier.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-190, CWE-190
References: http://seclists.org/fulldisclosure/2022/May/33; http://seclists.org/fulldisclosure/2022/May/35; http://seclists.org/fulldisclosure/2022/May/38
CVE: CVE-2022-23943
Published: 2022-03-14
Description: Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data. This issue affects Apache HTTP Server 2.4 version 2.4.52 and prior versions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190, CWE-787, CWE-787
References: http://www.openwall.com/lists/oss-security/2022/03/14/1; https://httpd.apache.org/security/vulnerabilities_24.html; https://lists.debian.org/debian-lts-announce/2022/03/msg00033.html
CVE: CVE-2022-0941
Published: 2022-03-14
Description: Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/star7th/showdoc/commit/4b6e6603c714aab1de346c5f5cb0bbb4c871be1f; https://huntr.dev/bounties/040a910e-e689-4fcb-9e4f-95206515d1bc; https://github.com/star7th/showdoc/commit/4b6e6603c714aab1de346c5f5cb0bbb4c871be1f
CVE: CVE-2022-24384
Published: 2022-03-14
Description: Cross-site Scripting (XSS) vulnerability in SmarterTools SmarterTrack This issue affects: SmarterTools SmarterTrack 100.0.8019.14010.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79, CWE-79
References: https://csirt.divd.nl/CVE-2022-24384; https://csirt.divd.nl/DIVD-2021-00029; https://csirt.divd.nl/CVE-2022-24384
CVE: CVE-2022-24385
Published: 2022-03-14
Description: A Direct Object Access vulnerability in SmarterTools SmarterTrack leads to information disclosure This issue affects: SmarterTools SmarterTrack 100.0.8019.14010.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-425, CWE-425
References: https://csirt.divd.nl/CVE-2022-24385; https://csirt.divd.nl/DIVD-2021-00029; https://csirt.divd.nl/CVE-2022-24385
CVE: CVE-2022-24386
Published: 2022-03-14
Description: Stored XSS in SmarterTools SmarterTrack This issue affects: SmarterTools SmarterTrack 100.0.8019.14010.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79, CWE-79
References: https://csirt.divd.nl/CVE-2022-24386; https://csirt.divd.nl/DIVD-2021-00029; https://csirt.divd.nl/CVE-2022-24386
CVE: CVE-2022-24387
Published: 2022-03-14
Description: With administrator or admin privileges the application can be tricked into overwriting files in app_data/Config folder, e.g. the systemsettings.xml file. THis is possible in SmarterTrack v100.0.8019.14010
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://csirt.divd.nl/CVE-2022-24387/; https://csirt.divd.nl/DIVD-2021-00029; https://csirt.divd.nl/DIVD-2021-00029
CVE: CVE-2022-0946
Published: 2022-03-14
Description: Stored XSS viva cshtm file upload in GitHub repository star7th/showdoc prior to v2.10.4.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/star7th/showdoc/commit/e5d575928b1371a7e07b09b[PII_REDACTED]335062a; https://huntr.dev/bounties/1f8f0021-396e-428e-9748-dd4e359715e1; https://github.com/star7th/showdoc/commit/e5d575928b1371a7e07b09b[PII_REDACTED]335062a
CVE: CVE-2022-24574
Published: 2022-03-14
Description: GPAC 1.0.1 is affected by a NULL pointer dereference in gf_dump_vrml_field.isra ().
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://huntr.dev/bounties/a08437cc-25aa-4116-8069-816f78a2247c/; https://www.debian.org/security/2023/dsa-5411; https://huntr.dev/bounties/a08437cc-25aa-4116-8069-816f78a2247c/
CVE: CVE-2022-24575
Published: 2022-03-14
Description: GPAC 1.0.1 is affected by a stack-based buffer overflow through MP4Box.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/gpac/gpac/issues/2058; https://huntr.dev/bounties/1d9bf402-f756-4583-9a1d-436722609c1e/; https://github.com/gpac/gpac/issues/2058
CVE: CVE-2022-24576
Published: 2022-03-14
Description: GPAC 1.0.1 is affected by Use After Free through MP4Box.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://github.com/gpac/gpac/issues/2061; https://huntr.dev/bounties/011ac07c-6139-4f43-b745-424143e60ac7/; https://github.com/gpac/gpac/issues/2061
CVE: CVE-2021-24692
Published: 2022-03-14
Description: The Simple Download Monitor WordPress plugin before 3.9.5 allows users with a role as low as Contributor to download any file on the web server (such as wp-config.php) via a path traversal vector.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://wpscan.com/vulnerability/4c9fe97e-3d9b-4079-88d9-34e2d0605215; https://wpscan.com/vulnerability/4c9fe97e-3d9b-4079-88d9-34e2d0605215
CVE: CVE-2021-24895
Published: 2022-03-14
Description: The Cybersoldier WordPress plugin before 1.7.0 does not sanitise and escape the URL settings before outputting it in an attribute, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/be7bbf4f-6f6a-4a44-bf86-2f096351ae08; https://wpscan.com/vulnerability/be7bbf4f-6f6a-4a44-bf86-2f096351ae08
CVE: CVE-2021-24897
Published: 2022-03-14
Description: The Add Subtitle WordPress plugin through 1.1.0 does not sanitise or escape the sub-title field (available only with classic editor) when output in the page, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/a0dd1da8-f8d2-453d-a2f2-711a49fb6466; https://wpscan.com/vulnerability/a0dd1da8-f8d2-453d-a2f2-711a49fb6466
CVE: CVE-2021-24940
Published: 2022-03-14
Description: The Persian Woocommerce WordPress plugin through 5.8.0 does not escape the s parameter before outputting it back in an attribute in the admin dashboard, which could lead to a Reflected Cross-Site Scripting issue
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/1980c5ca-447d-4875-b542-9212cc7ff77f; https://wpscan.com/vulnerability/1980c5ca-447d-4875-b542-9212cc7ff77f
CVE: CVE-2021-24950
Published: 2022-03-14
Description: The Insight Core WordPress plugin through 1.0 does not have any authorisation and CSRF checks in the insight_customizer_options_import (available to any authenticated user), does not validate user input before passing it to unserialize(), nor sanitise and escape it before outputting it in the response. As a result, it could allow users with a role as low as Subscriber to perform PHP Object Injection, as well as Stored Cross-Site Scripting attacks
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862
References: https://wpscan.com/vulnerability/01d430ea-ef85-4529-9ae4-c1f70016bb75; https://wpscan.com/vulnerability/01d430ea-ef85-4529-9ae4-c1f70016bb75
CVE: CVE-2021-24958
Published: 2022-03-14
Description: The Meks Easy Photo Feed Widget WordPress plugin before 1.2.4 does not have capability and CSRF checks in the meks_save_business_selected_account AJAX action, available to any authenticated user, and does not escape some of the settings. As a result, any authenticated user, such as subscriber could update the plugin's settings and put Cross-Site Scripting payloads in them
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/011c2519-fd84-4c95-b8b8-23654af59d70; https://wpscan.com/vulnerability/011c2519-fd84-4c95-b8b8-23654af59d70
CVE: CVE-2021-24959
Published: 2022-03-14
Description: The WP Email Users WordPress plugin through 1.7.6 does not escape the data_raw parameter in the weu_selected_users_1 AJAX action, available to any authenticated users, allowing them to perform SQL injection attacks.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://wpscan.com/vulnerability/0471d2e2-e759-468f-becd-0b062f00b435; https://wpscan.com/vulnerability/0471d2e2-e759-468f-becd-0b062f00b435
CVE: CVE-2021-24966
Published: 2022-03-14
Description: The Error Log Viewer WordPress plugin through 1.1.1 does not validate the path of the log file to clear, allowing high privilege users to clear arbitrary files on the web server, including those outside of the blog folder
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-73
References: https://wpscan.com/vulnerability/166a4f88-4f0c-4bf4-b624-5e6a02e21fa0; https://wpscan.com/vulnerability/166a4f88-4f0c-4bf4-b624-5e6a02e21fa0
CVE: CVE-2021-24982
Published: 2022-03-14
Description: The Child Theme Generator WordPress plugin through 2.2.7 does not sanitise escape the parade parameter before outputting it back, leading to a Reflected Cross-Site Scripting in the admin dashboard
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/8e53f15e-8b6a-4d47-a40d-4ebbe6934286; https://wpscan.com/vulnerability/8e53f15e-8b6a-4d47-a40d-4ebbe6934286
CVE: CVE-2021-24995
Published: 2022-03-14
Description: The HTML5 Responsive FAQ WordPress plugin through 2.8.5 does not properly sanitise and escape some of its settings, which could allow a high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/3caf0de0-57f2-4c87-8713-d00a7db9eeef; https://wpscan.com/vulnerability/3caf0de0-57f2-4c87-8713-d00a7db9eeef
CVE: CVE-2021-24996
Published: 2022-03-14
Description: The IDPay for Contact Form 7 WordPress plugin through 2.1.2 does not sanitise and escape the idpay_error parameter before outputting it back in the page leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/6ee14423-f7ff-4433-987a-a1a6b7bd65e3; https://wpscan.com/vulnerability/6ee14423-f7ff-4433-987a-a1a6b7bd65e3