deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-52104
Published: 2024-01-16
Description: Vulnerability of parameters being not verified in the WMS module. Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 7.5 (HIGH)
References: https://consumer.huawei.com/en/support/bulletin/2024/1/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/1/
CVE: CVE-2023-52105
Published: 2024-01-16
Description: The nearby module has a privilege escalation vulnerability. Successful exploitation of this vulnerability may affect availability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-269, CWE-269, CWE-284
References: https://consumer.huawei.com/en/support/bulletin/2024/1/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/1/
CVE: CVE-2023-52106
Published: 2024-01-16
Description: Vulnerability of permission verification for APIs in the DownloadProviderMain module.
Impact: Successful exploitation of this vulnerability will affect integrity and availability.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-264
References: https://consumer.huawei.com/en/support/bulletin/2024/1/; https://consumer.huawei.com/en/support/bulletin/2024/9/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-[PII_REDACTED]
CVE: CVE-2024-0554
Published: 2024-01-16
Description: A Cross-site scripting (XSS) vulnerability has been found on WIC1200, affecting version 1.1. An authenticated user could store a malicious javascript payload in the device model parameter via '/setup/diags_ir_learn.asp', allowing the attacker to retrieve the session details of another user.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-full-compass-systems-wic1200; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-full-compass-systems-wic1200
CVE: CVE-2024-0555
Published: 2024-01-16
Description: A Cross-Site Request Forgery (CSRF) vulnerability has been found on WIC1200, affecting version 1.1. An authenticated user could lead another user into executing unwanted actions inside the application they are logged in. This vulnerability is possible due to the lack of propper CSRF token implementation.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-352
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-full-compass-systems-wic1200; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-full-compass-systems-wic1200
CVE: CVE-2024-0556
Published: 2024-01-16
Description: A Weak Cryptography for Passwords vulnerability has been detected on WIC200 affecting version 1.1. This vulnerability allows a remote user to intercept the traffic and retrieve the credentials from another user and decode it in base64 allowing the attacker to see the credentials in plain text.
CVSS Score: 7.1 (HIGH)
CWE: CWE-261
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-full-compass-systems-wic1200; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-full-compass-systems-wic1200
CVE: CVE-2024-0553
Published: 2024-01-16
Description: A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from the response times of ciphertexts with correct PKCS#1 v1.5 padding. This issue may allow a remote attacker to perform a timing side-channel attack in the RSA-PSK key exchange, potentially leading to the leakage of sensitive data. CVE-2024-0553 is designated as an incomplete resolution for CVE-2023-5981.
CVSS Score: 7.5 (HIGH)
CWE: CWE-203, CWE-203
References: https://access.redhat.com/errata/RHSA-2024:0533; https://access.redhat.com/errata/RHSA-2024:0627; https://access.redhat.com/errata/RHSA-2024:0796
CVE: CVE-2024-0569
Published: 2024-01-16
Description: A vulnerability classified as problematic has been found in Totolink T8 4.1.5cu.833_20220905. This affects the function getSysStatusCfg of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. The manipulation of the argument ssid/key leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.1.5cu.862_B20230228 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-250785 was assigned to this vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200, CWE-862
References: https://drive.google.com/file/d/1WSWrGEKUkvPk8hq1VRng-wbR7T6CknGY/view?usp=sharing; https://vuldb.com/?ctiid.250785; https://vuldb.com/?id.250785
CVE: CVE-2024-0232
Published: 2024-01-16
Description: A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray() function in sqlite3.c. This flaw allows a local attacker to leverage a victim to pass specially crafted malicious input to the application, potentially causing a crash and leading to a denial of service.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://access.redhat.com/security/cve/CVE-2024-0232; https://bugzilla.redhat.com/show_bug.cgi?id=2243754; https://access.redhat.com/security/cve/CVE-2024-0232
CVE: CVE-2024-0567
Published: 2024-01-16
Description: A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-347, CWE-347
References: https://access.redhat.com/errata/RHSA-2024:0533; https://access.redhat.com/errata/RHSA-2024:1082; https://access.redhat.com/errata/RHSA-2024:1383
CVE: CVE-2024-0570
Published: 2024-01-16
Description: A vulnerability classified as critical was found in Totolink N350RT 9.3.5u.6265. This vulnerability affects unknown code of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. It is recommended to upgrade the affected component. VDB-250786 is the identifier assigned to this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-284, CWE-862
References: https://vuldb.com/?ctiid.250786; https://vuldb.com/?id.250786; https://vuldb.com/?submit.263655
CVE: CVE-2024-0571
Published: 2024-01-16
Description: A vulnerability, which was classified as critical, has been found in Totolink LR1200GB 9.1.0u.6619_B20230130. This issue affects the function setSmsCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument text leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250787. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121
References: https://github.com/jylsec/vuldb/blob/main/TOTOLINK/LR1200GB/1/README.md; https://vuldb.com/?ctiid.250787; https://vuldb.com/?id.250787
CVE: CVE-2024-0572
Published: 2024-01-16
Description: A vulnerability, which was classified as critical, was found in Totolink LR1200GB 9.1.0u.6619_B20230130. Affected is the function setOpModeCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument pppoeUser leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250788. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121
References: https://github.com/jylsec/vuldb/blob/main/TOTOLINK/LR1200GB/2/README.md; https://vuldb.com/?ctiid.250788; https://vuldb.com/?id.250788
CVE: CVE-2024-0581
Published: 2024-01-16
Description: An Uncontrolled Resource Consumption vulnerability has been found on Sandsprite Scdbg.exe, affecting version 1.0. This vulnerability allows an attacker to send a specially crafted shellcode payload to the '/foff' parameter and cause an application shutdown. A malware program could use this shellcode sequence to shut down the application and evade the scan.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-400, CWE-400
References: https://www.incibe.es/en/incibe-cert/notices/aviso/uncontrolled-resource-consumption-vulnerability-sandsprite-scdbg; https://www.incibe.es/en/incibe-cert/notices/aviso/uncontrolled-resource-consumption-vulnerability-sandsprite-scdbg
CVE: CVE-2024-0584
Published: 2024-01-16
Description: Rejected reason: Do not use this CVE as it is duplicate of CVE-2023-6932
CVE: CVE-2021-4432
Published: 2024-01-16
Description: A vulnerability was found in PCMan FTP Server 2.0.7. It has been classified as problematic. This affects an unknown part of the component USER Command Handler. The manipulation leads to denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250719.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-404
References: https://0day.today/exploit/description/36412; https://packetstormsecurity.com/files/163104/PCMan-FTP-Server-2.0.7-Denial-Of-Service.html; https://vuldb.com/?ctiid.250719
CVE: CVE-2023-6395
Published: 2024-01-16
Description: The Mock software contains a vulnerability wherein an attacker could potentially exploit privilege escalation, enabling the execution of arbitrary code with root user privileges. This weakness stems from the absence of proper sandboxing during the expansion and execution of Jinja2 templates, which may be included in certain configuration parameters. While the Mock documentation advises treating users added to the mock group as privileged, certain build systems invoking mock on behalf of users might inadvertently permit less privileged users to define configuration tags. These tags could then be passed as parameters to mock during execution, potentially leading to the utilization of Jinja2 templates for remote privilege escalation and the execution of arbitrary code as the root user on the build server.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-20, CWE-94
References: http://www.openwall.com/lists/oss-security/2024/01/16/1; http://www.openwall.com/lists/oss-security/2024/01/16/3; https://access.redhat.com/security/cve/CVE-2023-6395
CVE: CVE-2024-0573
Published: 2024-01-16
Description: A vulnerability has been found in Totolink LR1200GB 9.1.0u.6619_B20230130 and classified as critical. Affected by this vulnerability is the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ip leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-250789 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121
References: https://github.com/jylsec/vuldb/blob/main/TOTOLINK/LR1200GB/3/README.md; https://vuldb.com/?ctiid.250789; https://vuldb.com/?id.250789
CVE: CVE-2024-0574
Published: 2024-01-16
Description: A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B20230130 and classified as critical. Affected by this issue is the function setParentalRules of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument sTime leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-250790 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121
References: https://github.com/jylsec/vuldb/blob/main/TOTOLINK/LR1200GB/4/README.md; https://vuldb.com/?ctiid.250790; https://vuldb.com/?id.250790
CVE: CVE-2024-0575
Published: 2024-01-16
Description: A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B20230130. It has been classified as critical. This affects the function setTracerouteCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument command leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250791. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121
References: https://github.com/jylsec/vuldb/blob/main/TOTOLINK/LR1200GB/5/README.md; https://vuldb.com/?ctiid.250791; https://vuldb.com/?id.250791
CVE: CVE-2024-0582
Published: 2024-01-16
Description: A memory leak flaw was found in the Linux kernel’s io_uring functionality in how a user registers a buffer ring with IORING_REGISTER_PBUF_RING, mmap() it, and then frees it. This flaw allows a local user to crash or potentially escalate their privileges on the system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://access.redhat.com/security/cve/CVE-2024-0582; https://bugs.chromium.org/p/project-zero/issues/detail?id=2504; https://bugzilla.redhat.com/show_bug.cgi?id=2254050
CVE: CVE-2021-24151
Published: 2024-01-16
Description: The WP Editor WordPress plugin before 1.2.7 did not sanitise or validate its setting fields leading to an authenticated (admin+) blind SQL injection issue via an arbitrary parameter when making a request to save the settings.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://wpscan.com/vulnerability/5ee77dd7-5a73-4d4e-8038-23e6e763e20c/; https://wpscan.com/vulnerability/5ee77dd7-5a73-4d4e-8038-23e6e763e20c/
CVE: CVE-2021-24432
Published: 2024-01-16
Description: The Advanced AJAX Product Filters WordPress plugin does not sanitise the 'term_id' POST parameter before outputting it in the page, leading to reflected Cross-Site Scripting issue.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/b92ec5f7-d6a8-476f-a01e-21001a558914/; https://wpscan.com/vulnerability/b92ec5f7-d6a8-476f-a01e-21001a558914/
CVE: CVE-2021-24433
Published: 2024-01-16
Description: The simple sort&search WordPress plugin through 0.0.3 does not make sure that the indexurl parameter of the shortcodes "category_sims", "order_sims", "orderby_sims", "period_sims", and "tag_sims" use allowed URL protocols, which can lead to stored cross-site scripting by users with a role as low as Contributor
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/2ce8c786-ba82-427c-b5e7-e3b300a24c5f/; https://wpscan.com/vulnerability/2ce8c786-ba82-427c-b5e7-e3b300a24c5f/
CVE: CVE-2021-24559
Published: 2024-01-16
Description: The Qyrr WordPress plugin before 0.7 does not escape the data-uri of the QR Code when outputting it in a src attribute, allowing for Cross-Site Scripting attacks. Furthermore, the data_uri_to_meta AJAX action, available to all authenticated users, only had a CSRF check in place, with the nonce available to users with a role as low as Contributor allowing any user with such role (and above) to set a malicious data-uri in arbitrary QR Code posts, leading to a Stored Cross-Site Scripting issue.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/65a29976-163a-4bbf-a4e8-590ddc4b83f2/; https://wpscan.com/vulnerability/65a29976-163a-4bbf-a4e8-590ddc4b83f2/
CVE: CVE-2021-24566
Published: 2024-01-16
Description: The WooCommerce Currency Switcher FOX WordPress plugin before 1.3.7 was vulnerable to LFI attacks via the "woocs" shortcode.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://jetpack.com/2021/07/22/severe-vulnerability-patched-in-woocommerce-currency-switcher/; https://wpscan.com/vulnerability/a0bc4b13-53fe-462d-8[PII_REDACTED]d3a5a/; https://jetpack.com/2021/07/22/severe-vulnerability-patched-in-woocommerce-currency-switcher/
CVE: CVE-2021-24567
Published: 2024-01-16
Description: The Simple Post WordPress plugin through 1.1 does not sanitize user input when an authenticated user Text value, then it does not escape these values when outputting to the browser leading to an Authenticated Stored XSS Cross-Site Scripting issue.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/a3cd3115-2181-4e14-8b39-4de096433847/; https://wpscan.com/vulnerability/a3cd3115-2181-4e14-8b39-4de096433847/
CVE: CVE-2021-24869
Published: 2024-01-16
Description: The WP Fastest Cache WordPress plugin before 0.9.5 does not escape user input in the set_urls_with_terms method before using it in a SQL statement, leading to an SQL injection exploitable by low privilege users such as subscriber
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://jetpack.com/2021/10/14/multiple-vulnerabilities-in-wp-fastest-cache-plugin/; https://wpscan.com/vulnerability/b2233795-1a32-45fc-9d51-b6bd0a073f5b/; https://jetpack.com/2021/10/14/multiple-vulnerabilities-in-wp-fastest-cache-plugin/
CVE: CVE-2021-24870
Published: 2024-01-16
Description: The WP Fastest Cache WordPress plugin before 0.9.5 is lacking a CSRF check in its wpfc_save_cdn_integration AJAX action, and does not sanitise and escape some the options available via the action, which could allow attackers to make logged in high privilege users call it and set a Cross-Site Scripting payload
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352
References: https://jetpack.com/2021/10/14/multiple-vulnerabilities-in-wp-fastest-cache-plugin/; https://wpscan.com/vulnerability/48de63ab-2ef1-4469-8fc4-9346068bdf06/; https://jetpack.com/2021/10/14/multiple-vulnerabilities-in-wp-fastest-cache-plugin/
CVE: CVE-2021-25117
Published: 2024-01-16
Description: The WP-PostRatings WordPress plugin before 1.86.1 does not sanitise the postratings_image parameter from its options page (wp-admin/admin.php?page=wp-postratings/postratings-options.php). Even though the page is only accessible to administrators, and protected against CSRF attacks, the issue is still exploitable when the unfiltered_html capability is disabled.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/d2d9a789-edae-4ae1-92af-e6132db7efcd/; https://wpscan.com/vulnerability/d2d9a789-edae-4ae1-92af-e6132db7efcd/
CVE: CVE-2021-4227
Published: 2024-01-16
Description: The ark-commenteditor WordPress plugin through 2.15.6 does not properly sanitise or encode the comments when in Source editor, allowing attackers to inject an iFrame in the page and thus load arbitrary content from any page to the comment section
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-74
References: https://wpscan.com/vulnerability/8d015eba-31dc-44cb-a051-4e95df782b75/; https://wpscan.com/vulnerability/8d015eba-31dc-44cb-a051-4e95df782b75/
CVE: CVE-2022-0402
Published: 2024-01-16
Description: The Super Forms - Drag & Drop Form Builder WordPress plugin before 6.0.4 does not escape the bob_czy_panstwa_sprawa_zostala_rozwiazana parameter before outputting it back in an attribute via the super_language_switcher AJAX action, leading to a Reflected Cross-Site Scripting. The action is also lacking CSRF, making the attack easier to perform against any user.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/RensTillmann/super-forms/commit/c19d65abbe43d9b6359c1bf3498dc697d0c19d02; https://wpscan.com/vulnerability/2e2e2478-2488-4c91-8af8-69b07783854f/; https://github.com/RensTillmann/super-forms/commit/c19d65abbe43d9b6359c1bf3498dc697d0c19d02
CVE: CVE-2022-0775
Published: 2024-01-16
Description: The WooCommerce WordPress plugin before 6.2.1 does not have proper authorisation check when deleting reviews, which could allow any authenticated users, such as subscriber to delete arbitrary comment
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: https://developer.woocommerce.com/2022/02/22/woocommerce-6-2-1-security-fix/; https://plugins.trac.wordpress.org/changeset/2683324; https://wpscan.com/vulnerability/b76dbf37-a0a2-48cf-bd85-3ebbc2f394dd/
CVE: CVE-2022-1538
Published: 2024-01-16
Description: Theme Demo Import WordPress plugin before 1.1.1 does not validate the imported file, allowing high-privilege users such as admin to upload arbitrary files (such as PHP) even when FILE_MODS and FILE_EDIT are disallowed.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://wpscan.com/vulnerability/b19adf7c-3983-487b-9b46-0f2922b08c1c/; https://wpscan.com/vulnerability/b19adf7c-3983-487b-9b46-0f2922b08c1c/
CVE: CVE-2022-1563
Published: 2024-01-16
Description: The WPGraphQL WooCommerce WordPress plugin before 0.12.4 does not prevent unauthenticated attackers from enumerating a shop's coupon codes and values via GraphQL.
CVSS Score: 5.3 (MEDIUM)
References: https://github.com/wp-graphql/wp-graphql-woocommerce/; https://wpscan.com/vulnerability/19138092-50d3-4d63-97c5-aa8e1ce39456/; https://github.com/wp-graphql/wp-graphql-woocommerce/
CVE: CVE-2022-1609
Published: 2024-01-16
Description: The School Management WordPress plugin before 9.9.7 contains an obfuscated backdoor injected in it's license checking code that registers a REST API handler, allowing an unauthenticated attacker to execute arbitrary PHP code on the site.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://wpscan.com/vulnerability/e2d546c9-85b6-47a4-b951-781b9ae5d0f2/; https://wpscan.com/vulnerability/e2d546c9-85b6-47a4-b951-781b9ae5d0f2/
CVE: CVE-2022-1617
Published: 2024-01-16
Description: The WP-Invoice WordPress plugin through 4.3.1 does not have CSRF check in place when updating its settings, and is lacking sanitisation as well as escaping in some of them, allowing attacker to make a logged in admin change them and add XSS payload in them
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/7e40e506-ad02-44ca-9d21-3634f3907aad/; https://wpscan.com/vulnerability/7e40e506-ad02-44ca-9d21-3634f3907aad/
CVE: CVE-2022-1618
Published: 2024-01-16
Description: The Coru LFMember WordPress plugin through 1.0.2 does not have CSRF check in place when adding a new game, and is lacking sanitisation as well as escaping in their settings, allowing attacker to make a logged in admin add an arbitrary game with XSS payloads
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/ddafcab2-b5db-4839-8ae1-188383f4250d/; https://wpscan.com/vulnerability/ddafcab2-b5db-4839-8ae1-188383f4250d/
CVE: CVE-2022-1760
Published: 2024-01-16
Description: The Core Control WordPress plugin through 1.2.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/c7906b1d-25c9-4f34-bd02-66824878b88e/; https://wpscan.com/vulnerability/c7906b1d-25c9-4f34-bd02-66824878b88e/
CVE: CVE-2022-23179
Published: 2024-01-16
Description: The Contact Form & Lead Form Elementor Builder WordPress plugin before 1.7.0 does not escape some of its form fields before outputting them in attributes, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/90b8af99-e4a1-4076-99fa-efe805dd4be4/; https://wpscan.com/vulnerability/90b8af99-e4a1-4076-99fa-efe805dd4be4/
CVE: CVE-2022-23180
Published: 2024-01-16
Description: The Contact Form & Lead Form Elementor Builder WordPress plugin before 1.7.4 doesn't have authorisation and nonce checks, which could allow any authenticated users, such as subscriber to update and change various settings
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/changeset/2670484; https://wpscan.com/vulnerability/da87358a-3a72-4cf7-a2af-a266dd9b4290/; https://plugins.trac.wordpress.org/changeset/2670484