deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-52891
Published: 2024-07-09
Description: A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.5), SIMATIC Energy Manager PRO (All versions < V7.5), SIMATIC IPC DiagBase (All versions), SIMATIC IPC DiagMonitor (All versions), SIMIT V10 (All versions), SIMIT V11 (All versions < V11.1). Unified Automation .NET based OPC UA Server SDK before 3.2.2 used in Siemens products are affected by a similar vulnerability as documented in CVE-2023-27321 for the OPC Foundation UA .NET Standard implementation. A successful attack may lead to high load situation and memory exhaustion, and may block the server.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-1325
References: https://cert-portal.siemens.com/productcert/html/ssa-088132.html; https://cert-portal.siemens.com/productcert/html/ssa-088132.html
CVE: CVE-2024-30321
Published: 2024-07-09
Description: A vulnerability has been identified in SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC WinCC Runtime Professional V18 (All versions < V18 Update 5), SIMATIC WinCC Runtime Professional V19 (All versions < V19 Update 2), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 23), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 17), SIMATIC WinCC V8.0 (All versions < V8.0 Update 5). The affected products do not properly handle certain requests to their web application, which may lead to the leak of privileged information.
This could allow an unauthenticated remote attacker to retrieve information such as users and passwords.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-359
References: https://cert-portal.siemens.com/productcert/html/ssa-883918.html; https://cert-portal.siemens.com/productcert/html/ssa-883918.html
CVE: CVE-2024-32056
Published: 2024-07-09
Description: A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted IGS part file. This could allow an attacker to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://cert-portal.siemens.com/productcert/html/ssa-064222.html; https://cert-portal.siemens.com/productcert/html/ssa-064222.html
CVE: CVE-2024-33653
Published: 2024-07-09
Description: A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted BMP files. This could allow an attacker to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://cert-portal.siemens.com/productcert/html/ssa-064222.html; https://cert-portal.siemens.com/productcert/html/ssa-064222.html
CVE: CVE-2024-33654
Published: 2024-07-09
Description: A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted BMP files. This could allow an attacker to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://cert-portal.siemens.com/productcert/html/ssa-064222.html; https://cert-portal.siemens.com/productcert/html/ssa-064222.html
CVE: CVE-2024-37464
Published: 2024-07-09
Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPZOOM Beaver Builder Addons by WPZOOM allows Path Traversal.This issue affects Beaver Builder Addons by WPZOOM: from n/a through 1.3.5.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-22
References: https://patchstack.com/database/vulnerability/wpzoom-addons-for-beaver-builder/wordpress-beaver-builder-addons-by-wpzoom-plugin-1-3-5-local-file-inclusion-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wpzoom-addons-for-beaver-builder/wordpress-beaver-builder-addons-by-wpzoom-plugin-1-3-5-local-file-inclusion-vulnerability?_s_id=cve
CVE: CVE-2024-37484
Published: 2024-07-09
Description: Improper Privilege Management vulnerability in Dylan James Zephyr Project Manager allows Privilege Escalation.This issue affects Zephyr Project Manager: from n/a through 3.3.97.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://patchstack.com/database/vulnerability/zephyr-project-manager/wordpress-zephyr-project-manager-plugin-3-3-97-privilege-escalation-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/zephyr-project-manager/wordpress-zephyr-project-manager-plugin-3-3-97-privilege-escalation-vulnerability?_s_id=cve
CVE: CVE-2024-37497
Published: 2024-07-09
Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Crocoblock JetThemeCore jet-theme-core.This issue affects JetThemeCore: from n/a through < 2.2.1.
CVSS Score: 7.7 (HIGH)
CWE: CWE-22
References: https://patchstack.com/database/Wordpress/Plugin/jet-theme-core/vulnerability/wordpress-jetthemecore-plugin-2-2-1-subscriber-arbitrary-file-deletion-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/jet-theme-core/wordpress-jetthemecore-plugin-2-2-1-subscriber-arbitrary-file-deletion-vulnerability?_s_id=cve
CVE: CVE-2024-37499
Published: 2024-07-09
Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in vCita Online Booking & Scheduling Calendar for WordPress by vcita allows Path Traversal.This issue affects Online Booking & Scheduling Calendar for WordPress by vcita: from n/a through 4.4.2.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://patchstack.com/database/vulnerability/meeting-scheduler-by-vcita/wordpress-online-booking-scheduling-calendar-for-wordpress-plugin-4-4-2-local-file-inclusion-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/meeting-scheduler-by-vcita/wordpress-online-booking-scheduling-calendar-for-wordpress-plugin-4-4-2-local-file-inclusion-vulnerability?_s_id=cve
CVE: CVE-2024-37501
Published: 2024-07-09
Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PluginsWare Advanced Classifieds & Directory Pro allows Path Traversal.This issue affects Advanced Classifieds & Directory Pro: from n/a through 3.1.3.
CVSS Score: 8.5 (HIGH)
CWE: CWE-22
References: https://patchstack.com/database/vulnerability/advanced-classifieds-and-directory-pro/wordpress-advanced-classifieds-directory-pro-plugin-3-1-3-local-file-inclusion-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/advanced-classifieds-and-directory-pro/wordpress-advanced-classifieds-directory-pro-plugin-3-1-3-local-file-inclusion-vulnerability?_s_id=cve
CVE: CVE-2024-37996
Published: 2024-07-09
Description: A vulnerability has been identified in JT Open (All versions < V11.5), JT2Go (All versions < V2406.0003), PLM XML SDK (All versions < V7.1.0.014), Teamcenter Visualization V14.2 (All versions < V14.2.0.13), Teamcenter Visualization V14.3 (All versions < V14.3.0.11), Teamcenter Visualization V2312 (All versions < V2312.0008), Teamcenter Visualization V2406 (All versions < V2406.0003). The affected applications contain a null pointer dereference vulnerability while parsing specially crafted XML files. An attacker could leverage this vulnerability to crash the application causing denial of service condition.
CVSS Score: 3.3 (LOW)
CWE: CWE-476
References: https://cert-portal.siemens.com/productcert/html/ssa-824889.html; https://cert-portal.siemens.com/productcert/html/ssa-959281.html; https://cert-portal.siemens.com/productcert/html/ssa-824889.html
CVE: CVE-2024-37997
Published: 2024-07-09
Description: A vulnerability has been identified in JT Open (All versions < V11.5), JT2Go (All versions < V2406.0003), PLM XML SDK (All versions < V7.1.0.014), Teamcenter Visualization V14.2 (All versions < V14.2.0.13), Teamcenter Visualization V14.3 (All versions < V14.3.0.11), Teamcenter Visualization V2312 (All versions < V2312.0008), Teamcenter Visualization V2406 (All versions < V2406.0003). The affected applications contain a stack based overflow vulnerability while parsing specially crafted XML files. This could allow an attacker to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121
References: https://cert-portal.siemens.com/productcert/html/ssa-824889.html; https://cert-portal.siemens.com/productcert/html/ssa-959281.html; https://cert-portal.siemens.com/productcert/html/ssa-824889.html
CVE: CVE-2024-38278
Published: 2024-07-09
Description: A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All versions < V5.9.0), RUGGEDCOM RMC8388NC V5.X (All versions < V5.9.0), RUGGEDCOM RS416NCv2 V5.X (All versions < V5.9.0), RUGGEDCOM RS416PNCv2 V5.X (All versions < V5.9.0), RUGGEDCOM RS416Pv2 V5.X (All versions < V5.9.0), RUGGEDCOM RS416v2 V5.X (All versions < V5.9.0), RUGGEDCOM RS900 (32M) V5.X (All versions < V5.9.0), RUGGEDCOM RS900G (32M) V5.X (All versions < V5.9.0), RUGGEDCOM RS900GNC(32M) V5.X (All versions < V5.9.0), RUGGEDCOM RS900NC(32M) V5.X (All versions < V5.9.0), RUGGEDCOM RSG2100 (32M) V5.X (All versions < V5.9.0), RUGGEDCOM RSG2100NC(32M) V5.X (All versions < V5.9.0), RUGGEDCOM RSG2100P (32M) V5.X (All versions < V5.9.0), RUGGEDCOM RSG2100PNC (32M) V5.X (All versions < V5.9.0), RUGGEDCOM RSG2288 V5.X (All versions < V5.9.0), RUGGEDCOM RSG2288NC V5.X (All versions < V5.9.0), RUGGEDCOM RSG2300 V5.X (All versions < V5.9.0), RUGGEDCOM RSG2300NC V5.X (All versions < V5.9.0), RUGGEDCOM RSG2300P V5.X (All versions < V5.9.0), RUGGEDCOM RSG2300PNC V5.X (All versions < V5.9.0), RUGGEDCOM RSG2488 V5.X (All versions < V5.9.0), RUGGEDCOM RSG2488NC V5.X (All versions < V5.9.0), RUGGEDCOM RSG907R (All versions < V5.9.0), RUGGEDCOM RSG908C (All versions < V5.9.0), RUGGEDCOM RSG909R (All versions < V5.9.0), RUGGEDCOM RSG910C (All versions < V5.9.0), RUGGEDCOM RSG920P V5.X (All versions < V5.9.0), RUGGEDCOM RSG920PNC V5.X (All versions < V5.9.0), RUGGEDCOM RSL910 (All versions < V5.9.0), RUGGEDCOM RSL910NC (All versions < V5.9.0), RUGGEDCOM RST2228 (All versions < V5.9.0), RUGGEDCOM RST2228P (All versions < V5.9.0), RUGGEDCOM RST916C (All versions < V5.9.0), RUGGEDCOM RST916P (All versions < V5.9.0). The affected products with IP forwarding enabled wrongly make available certain remote services in non-managed VLANs, even if these services are not intentionally activated. An attacker could leverage this vulnerability to create a remote shell to the affected system.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-266
References: https://cert-portal.siemens.com/productcert/html/ssa-170375.html; https://cert-portal.siemens.com/productcert/html/ssa-170375.html
CVE: CVE-2024-39567
Published: 2024-07-09
Description: A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 HF1). The system service of affected applications is vulnerable to command injection due to missing server side input sanitation when loading VPN configurations. This could allow an authenticated local attacker to execute arbitrary code with system privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-77
References: https://cert-portal.siemens.com/productcert/html/ssa-868282.html; https://cert-portal.siemens.com/productcert/html/ssa-868282.html
CVE: CVE-2024-39568
Published: 2024-07-09
Description: A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 HF1). The system service of affected applications is vulnerable to command injection due to missing server side input sanitation when loading proxy configurations. This could allow an authenticated local attacker to execute arbitrary code with system privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-77
References: https://cert-portal.siemens.com/productcert/html/ssa-868282.html; https://cert-portal.siemens.com/productcert/html/ssa-868282.html
CVE: CVE-2024-39569
Published: 2024-07-09
Description: A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 HF1). The system service of affected applications is vulnerable to command injection due to missing server side input sanitation when loading VPN configurations. This could allow an administrative remote attacker running a corresponding SINEMA Remote Connect Server to execute arbitrary code with system privileges on the client system.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-77
References: https://cert-portal.siemens.com/productcert/html/ssa-868282.html; https://cert-portal.siemens.com/productcert/html/ssa-868282.html
CVE: CVE-2024-39570
Published: 2024-07-09
Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 HF1). Affected applications are vulnerable to command injection due to missing server side input sanitation when loading VxLAN configurations. This could allow an authenticated attacker to execute arbitrary code with root privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: https://cert-portal.siemens.com/productcert/html/ssa-928781.html; https://cert-portal.siemens.com/productcert/html/ssa-928781.html
CVE: CVE-2024-39571
Published: 2024-07-09
Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 HF1). Affected applications are vulnerable to command injection due to missing server side input sanitation when loading SNMP configurations. This could allow an attacker with the right to modify the SNMP configuration to execute arbitrary code with root privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77, CWE-77
References: https://cert-portal.siemens.com/productcert/html/ssa-928781.html; https://cert-portal.siemens.com/productcert/html/ssa-928781.html
CVE: CVE-2024-39675
Published: 2024-07-09
Description: A vulnerability has been identified in RUGGEDCOM RMC30 (All versions < V4.3.10), RUGGEDCOM RMC30NC (All versions < V4.3.10), RUGGEDCOM RP110 (All versions < V4.3.10), RUGGEDCOM RP110NC (All versions < V4.3.10), RUGGEDCOM RS400 (All versions < V4.3.10), RUGGEDCOM RS400NC (All versions < V4.3.10), RUGGEDCOM RS401 (All versions < V4.3.10), RUGGEDCOM RS401NC (All versions < V4.3.10), RUGGEDCOM RS416 (All versions < V4.3.10), RUGGEDCOM RS416NC (All versions < V4.3.10), RUGGEDCOM RS416NCv2 V4.X (All versions < V4.3.10), RUGGEDCOM RS416NCv2 V5.X (All versions < V5.9.0), RUGGEDCOM RS416P (All versions < V4.3.10), RUGGEDCOM RS416PNC (All versions < V4.3.10), RUGGEDCOM RS416PNCv2 V4.X (All versions < V4.3.10), RUGGEDCOM RS416PNCv2 V5.X (All versions < V5.9.0), RUGGEDCOM RS416Pv2 V4.X (All versions < V4.3.10), RUGGEDCOM RS416Pv2 V5.X (All versions < V5.9.0), RUGGEDCOM RS416v2 V4.X (All versions < V4.3.10), RUGGEDCOM RS416v2 V5.X (All versions < V5.9.0), RUGGEDCOM RS910 (All versions < V4.3.10), RUGGEDCOM RS910L (All versions), RUGGEDCOM RS910LNC (All versions), RUGGEDCOM RS910NC (All versions < V4.3.10), RUGGEDCOM RS910W (All versions < V4.3.10), RUGGEDCOM RS920L (All versions), RUGGEDCOM RS920LNC (All versions), RUGGEDCOM RS920W (All versions). In some configurations the affected products wrongly enable the Modbus service in non-managed VLANS. Only serial devices are affected by this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-497
References: https://cert-portal.siemens.com/productcert/html/ssa-170375.html; https://cert-portal.siemens.com/productcert/html/ssa-170375.html
CVE: CVE-2024-39865
Published: 2024-07-09
Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application allows users to upload encrypted backup files. As part of this backup, files can be restored without correctly checking the path of the restored file. This could allow an attacker with access to the backup encryption key to upload malicious files, that could potentially lead to remote code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://cert-portal.siemens.com/productcert/html/ssa-381581.html; https://cert-portal.siemens.com/productcert/html/ssa-381581.html
CVE: CVE-2024-39866
Published: 2024-07-09
Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application allows users to upload encrypted backup files. This could allow an attacker with access to the backup encryption key and with the right to upload backup files to create a user with administrative privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-267
References: https://cert-portal.siemens.com/productcert/html/ssa-381581.html; https://cert-portal.siemens.com/productcert/html/ssa-381581.html
CVE: CVE-2024-39867
Published: 2024-07-09
Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected devices do not properly validate the authentication when performing certain actions in the web interface allowing an unauthenticated attacker to access and edit device configuration information of devices for which they have no privileges.
CVSS Score: 7.6 (HIGH)
CWE: CWE-425, CWE-425
References: https://cert-portal.siemens.com/productcert/html/ssa-381581.html; https://cert-portal.siemens.com/productcert/html/ssa-381581.html
CVE: CVE-2024-39868
Published: 2024-07-09
Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected devices do not properly validate the authentication when performing certain actions in the web interface allowing an unauthenticated attacker to access and edit VxLAN configuration information of networks for which they have no privileges.
CVSS Score: 7.6 (HIGH)
CWE: CWE-425, CWE-425
References: https://cert-portal.siemens.com/productcert/html/ssa-381581.html; https://cert-portal.siemens.com/productcert/html/ssa-381581.html
CVE: CVE-2024-39869
Published: 2024-07-09
Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected products allow to upload certificates. An authenticated attacker could upload a crafted certificates leading to a permanent denial-of-service situation. In order to recover from such an attack, the offending certificate needs to be removed manually.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-754
References: https://cert-portal.siemens.com/productcert/html/ssa-381581.html; https://cert-portal.siemens.com/productcert/html/ssa-381581.html
CVE: CVE-2024-39870
Published: 2024-07-09
Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected applications can be configured to allow users to manage own users. A local authenticated user with this privilege could use this modify users outside of their own scope as well as to escalate privileges.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-602
References: https://cert-portal.siemens.com/productcert/html/ssa-381581.html; https://cert-portal.siemens.com/productcert/html/ssa-381581.html
CVE: CVE-2024-39871
Published: 2024-07-09
Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected applications do not properly separate the rights to edit device settings and to edit settings for communication relations. This could allow an authenticated attacker with the permission to manage devices to gain access to participant groups that the attacked does not belong to.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-863
References: https://cert-portal.siemens.com/productcert/html/ssa-381581.html; https://cert-portal.siemens.com/productcert/html/ssa-381581.html
CVE: CVE-2024-39872
Published: 2024-07-09
Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application does not properly assign rights to temporary files created during its update process. This could allow an authenticated attacker with the 'Manage firmware updates' role to escalate their privileges on the underlying OS level.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-378
References: https://cert-portal.siemens.com/productcert/html/ssa-381581.html; https://cert-portal.siemens.com/productcert/html/ssa-381581.html
CVE: CVE-2024-39873
Published: 2024-07-09
Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application does not properly implement brute force protection against user credentials in its web API. This could allow an attacker to learn user credentials that are vulnerable to brute force attacks.
CVSS Score: 7.5 (HIGH)
CWE: CWE-307, CWE-307
References: https://cert-portal.siemens.com/productcert/html/ssa-381581.html; https://cert-portal.siemens.com/productcert/html/ssa-381581.html
CVE: CVE-2024-39874
Published: 2024-07-09
Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application does not properly implement brute force protection against user credentials in its Client Communication component. This could allow an attacker to learn user credentials that are vulnerable to brute force attacks.
CVSS Score: 7.5 (HIGH)
CWE: CWE-307
References: https://cert-portal.siemens.com/productcert/html/ssa-381581.html; https://cert-portal.siemens.com/productcert/html/ssa-381581.html
CVE: CVE-2024-39875
Published: 2024-07-09
Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application allows authenticated, low privilege users with the 'Manage own remote connections' permission to retrieve details about other users and group memberships.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-732
References: https://cert-portal.siemens.com/productcert/html/ssa-381581.html; https://cert-portal.siemens.com/productcert/html/ssa-381581.html
CVE: CVE-2024-39876
Published: 2024-07-09
Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected applications do not properly handle log rotation. This could allow an unauthenticated remote attacker to cause a denial of service condition through resource exhaustion on the device.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-770
References: https://cert-portal.siemens.com/productcert/html/ssa-381581.html; https://cert-portal.siemens.com/productcert/html/ssa-381581.html
CVE: CVE-2024-39888
Published: 2024-07-09
Description: A vulnerability has been identified in Mendix Encryption (All versions >= V10.0.0 < V10.0.2). Affected versions of the module define a specific hard-coded default value for the EncryptionKey constant, which is used in projects where no individual EncryptionKey was specified.

This could allow to an attacker to decrypt any encrypted project data, as the default encryption key can be considered compromised.
CVSS Score: 7.5 (HIGH)
CWE: CWE-547
References: https://cert-portal.siemens.com/productcert/html/ssa-998949.html; https://cert-portal.siemens.com/productcert/html/ssa-998949.html
CVE: CVE-2024-3596
Published: 2024-07-09
Description: RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-354, CWE-924
References: http://www.openwall.com/lists/oss-security/2024/07/09/4; https://cert-portal.siemens.com/productcert/html/ssa-723487.html; https://cert-portal.siemens.com/productcert/html/ssa-794185.html
CVE: CVE-2024-6391
Published: 2024-07-09
Description: The oik plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's bw_button shortcode in all versions up to, and including, 4.10.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/oik/trunk/shortcodes/oik-button.php#L34; https://plugins.trac.wordpress.org/changeset/3112763/; https://wordpress.org/plugins/oik/#developers