deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-13087
Published: 2025-11-20
Description: A vulnerability exists in the Opto22 Groov Manage REST API on GRV-EPIC and groov RIO Products that allows remote code execution with root privileges. When a POST request is executed against the vulnerable endpoint, the application reads certain header details and unsafely uses these values to build commands, allowing an attacker with administrative privileges to inject arbitrary commands that execute as root.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-78
References: https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-324-03.json; https://www.cisa.gov/news-events/ics-advisories/icsa-25-324-03; https://www.opto22.com/support/resources-tools/knowledgebase/kb91326
CVE: CVE-2025-36153
Published: 2025-11-20
Description: IBM Concert 1.0.0 through 2.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.ibm.com/support/pages/node/7252019
CVE: CVE-2025-36158
Published: 2025-11-20
Description: IBM Concert 1.0.0 through 2.0.0 could allow a local user with specific permission to obtain sensitive information from files due to uncontrolled recursive directory copying.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-674
References: https://www.ibm.com/support/pages/node/7252019
CVE: CVE-2025-36159
Published: 2025-11-20
Description: IBM Concert 1.0.0 through 2.0.0 could allow a local user to forge log files to impersonate other users or hide their identity due to improper neutralization of output.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-117
References: https://www.ibm.com/support/pages/node/7252019
CVE: CVE-2025-36160
Published: 2025-11-20
Description: IBM Concert 1.0.0 through 2.0.0 could disclose sensitive server information from HTTP response headers that could aid in further attacks against the system.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-497
References: https://www.ibm.com/support/pages/node/7252019
CVE: CVE-2025-61138
Published: 2025-11-20
Description: Qlik Sense Enterprise v14.212.13 was discovered to contain an information leak via the /dev-hub/ directory.
CVSS Score: 7.5 (HIGH)
CWE: CWE-538
References: https://gist.github.com/Israel0x00/8a81ec98162e9ca8e4a3a6c8b4ef4762
CVE: CVE-2025-13484
Published: 2025-11-20
Description: A vulnerability was identified in Campcodes Complete Online Beauty Parlor Management System 1.0. This vulnerability affects unknown code of the file /admin/customer-list.php. The manipulation of the argument Name leads to cross site scripting. The attack may be initiated remotely. The exploit is publicly available and might be used.
CVSS Score: 2.4 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://github.com/Abxery/cveee/issues/8; https://vuldb.com/?ctiid.333084; https://vuldb.com/?id.333084
CVE: CVE-2025-36072
Published: 2025-11-20
Description: IBM webMethods Integration 10.11 through 10.11_Core_Fix22, 10.15 through 10.15_Core_Fix22, and 11.1 through 11.1_Core_Fix6 IBM webMethods Integration allow an authenticated user to execute arbitrary code on the system, caused by the deserialization of untrusted object graphs data.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://www.ibm.com/support/pages/node/7252090
CVE: CVE-2025-49752
Published: 2025-11-20
Description: Azure Bastion Elevation of Privilege Vulnerability
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-294
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49752
CVE: CVE-2025-59245
Published: 2025-11-20
Description: Microsoft SharePoint Online Elevation of Privilege Vulnerability
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59245
CVE: CVE-2025-62207
Published: 2025-11-20
Description: Azure Monitor Elevation of Privilege Vulnerability
CVSS Score: 8.6 (HIGH)
CWE: CWE-918
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62207
CVE: CVE-2025-62459
Published: 2025-11-20
Description: Microsoft Defender Portal Spoofing Vulnerability
CVSS Score: 8.3 (HIGH)
CWE: CWE-79
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62459
CVE: CVE-2025-64655
Published: 2025-11-20
Description: Improper authorization in Dynamics OmniChannel SDK Storage Containers allows an unauthorized attacker to elevate privileges over a network.
CVSS Score: 8.8 (HIGH)
CWE: CWE-285
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-64655
CVE: CVE-2025-64660
Published: 2025-11-20
Description: Improper access control in GitHub Copilot and Visual Studio Code allows an authorized attacker to execute code over a network.
CVSS Score: 8.0 (HIGH)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-64660
CVE: CVE-2025-13485
Published: 2025-11-21
Description: A security flaw has been discovered in itsourcecode Online File Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=login. The manipulation of the argument Username results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be exploited.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/jaisurya-me/CVE/issues/1; https://itsourcecode.com/; https://vuldb.com/?ctiid.333085
CVE: CVE-2025-62164
Published: 2025-11-21
Description: vLLM is an inference and serving engine for large language models (LLMs). From versions 0.10.2 to before 0.11.1, a memory corruption vulnerability could lead to a crash (denial-of-service) and potentially remote code execution (RCE), exists in the Completions API endpoint. When processing user-supplied prompt embeddings, the endpoint loads serialized tensors using torch.load() without sufficient validation. Due to a change introduced in PyTorch 2.8.0, sparse tensor integrity checks are disabled by default. As a result, maliciously crafted tensors can bypass internal bounds checks and trigger an out-of-bounds memory write during the call to to_dense(). This memory corruption can crash vLLM and potentially lead to code execution on the server hosting vLLM. This issue has been patched in version 0.11.1.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20, CWE-123, CWE-502, CWE-787
References: https://github.com/vllm-project/vllm/commit/58fab50d82838d5014f4a14d991fdb9352c9c84b; https://github.com/vllm-project/vllm/pull/27204; https://github.com/vllm-project/vllm/security/advisories/GHSA-mrw7-hf4f-83pf
CVE: CVE-2025-62372
Published: 2025-11-21
Description: vLLM is an inference and serving engine for large language models (LLMs). From version 0.5.5 to before 0.11.1, users can crash the vLLM engine serving multimodal models by passing multimodal embedding inputs with correct ndim but incorrect shape (e.g. hidden dimension is wrong), regardless of whether the model is intended to support such inputs (as defined in the Supported Models page). This issue has been patched in version 0.11.1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-129
References: https://github.com/vllm-project/vllm/commit/58fab50d82838d5014f4a14d991fdb9352c9c84b; https://github.com/vllm-project/vllm/pull/27204; https://github.com/vllm-project/vllm/pull/6613
CVE: CVE-2025-62426
Published: 2025-11-21
Description: vLLM is an inference and serving engine for large language models (LLMs). From version 0.5.5 to before 0.11.1, the /v1/chat/completions and /tokenize endpoints allow a chat_template_kwargs request parameter that is used in the code before it is properly validated against the chat template. With the right chat_template_kwargs parameters, it is possible to block processing of the API server for long periods of time, delaying all other requests. This issue has been patched in version 0.11.1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: https://github.com/vllm-project/vllm/blob/2a6dc67eb520ddb9c4138d8b35ed6fe6226997fb/vllm/entrypoints/chat_utils.py#L1602-L1610; https://github.com/vllm-project/vllm/blob/2a6dc67eb520ddb9c4138d8b35ed6fe6226997fb/vllm/entrypoints/openai/serving_engine.py#L809-L814; https://github.com/vllm-project/vllm/commit/3ada34f9cb4d1af763fdfa3b481862a93eb6bd2b
CVE: CVE-2025-64751
Published: 2025-11-21
Description: OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. OpenFGA v1.4.0 to v1.11.0 ( openfga-0.1.34 <= Helm chart <= openfga-0.2.48, v.1.4.0 <= docker <= v.1.11.0) are vulnerable to improper policy enforcement when certain Check and ListObject calls are executed. This issue has been patched in version 1.11.1.
CVSS Score: 8.8 (HIGH)
CWE: CWE-285
References: https://github.com/openfga/openfga/releases/tag/v1.11.1; https://github.com/openfga/openfga/security/advisories/GHSA-2c64-vmv2-hgfc
CVE: CVE-2025-64755
Published: 2025-11-21
Description: Claude Code is an agentic coding tool. Prior to version 2.0.31, due to an error in sed command parsing, it was possible to bypass the Claude Code read-only validation and write to arbitrary files on the host system. This issue has been patched in version 2.0.31.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/anthropics/claude-code/security/advisories/GHSA-7mv8-j34q-vp7q
CVE: CVE-2025-64762
Published: 2025-11-21
Description: The AuthKit library for Next.js provides convenient helpers for authentication and session management using WorkOS & AuthKit with Next.js. In authkit-nextjs version 2.11.0 and below, authenticated responses do not defensively apply anti-caching headers. In environments where CDN caching is enabled, this can result in session tokens being included in cached responses and subsequently served to multiple users. Next.js applications deployed on Vercel are unaffected unless they manually enable CDN caching by setting cache headers on authenticated paths. Patched in authkit-nextjs 2.11.1, which applies anti-caching headers to all responses behind authentication.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-524
References: https://github.com/workos/authkit-nextjs/commit/94cf438124993abb0e7c19dac64c3cb5724a15ea; https://github.com/workos/authkit-nextjs/releases/tag/v2.11.1; https://github.com/workos/authkit-nextjs/security/advisories/GHSA-p8pf-44ff-93gf
CVE: CVE-2025-64310
Published: 2025-11-21
Description: EPSON WebConfig and Epson Web Control for SEIKO EPSON Projector Products do not restrict excessive authentication attempts. An administrative user's password may be identified through a brute force attack.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-307
References: https://jvn.jp/en/vu/JVNVU95021911/; https://www.epson.co.uk/en_GB/faq/KA-02041/contents?loc=en-us; https://www.epson.jp/support/misc_t/251120_oshirase.htm
CVE: CVE-2025-11368
Published: 2025-11-21
Description: The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Sensitive Information Disclosure in all versions up to, and including, 4.2.9.4. This is due to missing capability checks in the REST endpoint /wp-json/lp/v1/load_content_via_ajax which allows arbitrary callback execution of admin-only template methods. This makes it possible for unauthenticated attackers to retrieve admin curriculum HTML, quiz questions with correct answers, course materials, and other sensitive educational content via the REST API endpoint granted they can supply valid numeric IDs.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://plugins.trac.wordpress.org/browser/learnpress/trunk/inc/rest-api/v1/frontend/class-lp-rest-ajax-controller.php#L23; https://plugins.trac.wordpress.org/browser/learnpress/trunk/inc/rest-api/v1/frontend/class-lp-rest-ajax-controller.php#L41; https://plugins.trac.wordpress.org/changeset?old_path=/learnpress/tags/4.2.9.4&new_path=/learnpress/tags/4.3.0&sfp_email=&sfph_mail=
CVE: CVE-2025-12022
Published: 2025-11-21
Description: The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'eh_crm_settings_restore_trash' AJAX endpoint in all versions up to, and including, 3.3.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to restore all deleted tickets.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/changeset/3399391/elex-helpdesk-customer-support-ticket-system/trunk/includes/class-crm-archive-ajax-functions.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/982b23c5-2414-48f7-a2f5-96fef54f8d69?source=cve
CVE: CVE-2025-12023
Published: 2025-11-21
Description: The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the eh_crm_restore_data() function in all versions up to, and including, 3.3.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to restore tickets.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/changeset/3399391/elex-helpdesk-customer-support-ticket-system/trunk/includes/class-crm-ajax-functions.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/4599b145-cb89-48d4-8581-e1ee7a7bd323?source=cve
CVE: CVE-2025-12085
Published: 2025-11-21
Description: The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'eh_crm_settings_empty_trash' function in all versions up to, and including, 3.3.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to empty the ticket trash.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/changeset/3399391/elex-helpdesk-customer-support-ticket-system/trunk/includes/class-crm-ajax-functions-two.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/89696d1c-8e6e-402a-9d7a-03fe0f364a72?source=cve
CVE: CVE-2025-12169
Published: 2025-11-21
Description: The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wp_ajax_eh_crm_settings_empty_scheduled_actions' AJAX Action in all versions up to, and including, 3.3.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to clear the scheduled triggers option.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/changeset/3391816; https://www.wordfence.com/threat-intel/vulnerabilities/id/ae2ac493-e6df-4083-8601-65635ad342b2?source=cve
CVE: CVE-2025-13499
Published: 2025-11-21
Description: Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service
CVSS Score: 7.8 (HIGH)
CWE: CWE-824
References: https://gitlab.com/wireshark/wireshark/-/issues/20823; https://www.wireshark.org/security/wnpa-sec-2025-06.html
CVE: CVE-2025-9825
Published: 2025-11-21
Description: GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.7 to 18.2.8, 18.3 before 18.3.4, and 18.4 before 18.4.2 that could have allowed authenticated users without project membership to view sensitive manual CI/CD variables by querying the GraphQL API.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-862
References: https://about.gitlab.com/releases/2025/10/08/patch-release-gitlab-18-4-2-released/; https://gitlab.com/gitlab-org/gitlab/-/issues/567301; https://hackerone.com/reports/3319800
CVE: CVE-2025-58097
Published: 2025-11-21
Description: The installation directory of LogStare Collector is configured with incorrect access permissions. A non-administrative user may manipulate files within the installation directory and execute arbitrary code with the administrative privilege.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://jvn.jp/en/jp/JVN77560819/; https://www.logstare.com/vulnerability/2025-001/
CVE: CVE-2025-61949
Published: 2025-11-21
Description: LogStare Collector contains a stored cross-site scripting vulnerability in UserManagement. If crafted user information is stored, an arbitrary script may be executed on the web browser of the user who logs in to the product's management page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/jp/JVN77560819/; https://www.logstare.com/vulnerability/2025-001/
CVE: CVE-2025-62189
Published: 2025-11-21
Description: LogStare Collector contains an incorrect authorization vulnerability in UserRegistration. If exploited, a non-administrative user may create a new user account by sending a crafted HTTP request.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: https://jvn.jp/en/jp/JVN77560819/; https://www.logstare.com/vulnerability/2025-001/
CVE: CVE-2025-62687
Published: 2025-11-21
Description: Cross-site request forgery vulnerability exists in LogStare Collector. If a user views a crafted page while logged, unintended operations may be performed.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://jvn.jp/en/jp/JVN77560819/; https://www.logstare.com/vulnerability/2025-001/
CVE: CVE-2025-64299
Published: 2025-11-21
Description: LogStare Collector improperly handles the password hash data. An administrative user may obtain the other users' password hashes.
CVSS Score: 2.7 (LOW)
CWE: CWE-201
References: https://jvn.jp/en/jp/JVN77560819/; https://www.logstare.com/vulnerability/2025-001/
CVE: CVE-2025-64695
Published: 2025-11-21
Description: Uncontrolled search path element issue exists in the installer of LogStare Collector (for Windows). If exploited, arbitrary code may be executed with the privilege of the user invoking the installer.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://jvn.jp/en/jp/JVN77560819/; https://www.logstare.com/vulnerability/2025-001/
CVE: CVE-2025-10938
Published: 2025-11-21
Description: The UiPress lite plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.5.08. This is due to missing capability checks in the 'uip_process_block_query' AJAX function. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract sensitive user data including password hashes, emails, and other user information that could be used for account takeover attacks.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://wordpress.org/plugins/uipress-lite/; https://www.wordfence.com/threat-intel/vulnerabilities/id/d8aa06eb-774a-4cd9-bd35-2d[PII_REDACTED]?source=cve
CVE: CVE-2025-11003
Published: 2025-11-21
Description: The UiPress lite | Effortless custom dashboards, admin themes and pages plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'uip_save_ui_template' function in all versions up to, and including, 3.5.08. This makes it possible for authenticated attackers, with Subscriber-level access and above, to save templates that contain custom JavaScript.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/uipress-lite/tags/3.5.08/admin/classes/PostTypes/UiTemplates.php#L416; https://plugins.trac.wordpress.org/browser/uipress-lite/tags/3.5.08/admin/core/uiBuilder.php#L613; https://www.wordfence.com/threat-intel/vulnerabilities/id/b2a01ccc-c98e-4fcc-8eaf-721ec46584fc?source=cve
CVE: CVE-2025-11456
Published: 2025-11-21
Description: The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the eh_crm_new_ticket_post() function in all versions up to, and including, 3.3.1. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://plugins.trac.wordpress.org/browser/elex-helpdesk-customer-support-ticket-system/trunk/includes/class-crm-ajax-functions-three.php?rev=3332203; https://plugins.trac.wordpress.org/changeset/3399391/elex-helpdesk-customer-support-ticket-system/trunk/includes/class-crm-ajax-functions-three.php; https://wordpress.org/plugins/elex-helpdesk-customer-support-ticket-system/
CVE: CVE-2025-11763
Published: 2025-11-21
Description: The Display Pages Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'column_count' parameter in the [display-pages] shortcode in all versions up to, and including, 1.1. This is due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/display-pages-shortcode/trunk/display-pages-shortcode.php#L513; https://plugins.trac.wordpress.org/browser/display-pages-shortcode/trunk/display-pages-shortcode.php#L517; https://www.wordfence.com/threat-intel/vulnerabilities/id/df4ada5f-6008-40b9-ad83-c6af82e64e9f?source=cve
CVE: CVE-2025-11764
Published: 2025-11-21
Description: The Shortcodes Bootstrap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' parameter in the [notification] shortcode in all versions up to, and including, 1.1. This is due to missing input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/shortcodes-bootstrap/trunk/inc/dws_alert.php#L16; https://www.wordfence.com/threat-intel/vulnerabilities/id/d9363db7-4535-427d-a6ae-2580f215b965?source=cve
CVE: CVE-2025-11765
Published: 2025-11-21
Description: The Stock Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'image_height' and 'image_width' shortcode attributes in all versions up to, and including, 1.1. This is due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/stock-tools/tags/1.1/stock-tools.php#L67; https://www.wordfence.com/threat-intel/vulnerabilities/id/1d852dba-39ea-4cc9-9fcf-7f2ac3e1b5d0?source=cve
CVE: CVE-2025-11767
Published: 2025-11-21
Description: The Tips Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tip' shortcode in all versions up to, and including, 0.2.1. This is due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/tips-shortcode/tags/0.2.1/tips_shortcode.php#L33; https://www.wordfence.com/threat-intel/vulnerabilities/id/34c13495-23c3-4b07-9bfb-678723daa43f?source=cve
CVE: CVE-2025-11768
Published: 2025-11-21
Description: The Islamic Phrases plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'phrases' shortcode attribute in all versions up to, and including, 2.12.2015. This is due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/islamic-phrases/tags/2.12.2015/islamic-phrases.php#L89; https://www.wordfence.com/threat-intel/vulnerabilities/id/3e9bcc72-e434-4f6f-9e90-eec8cad31035?source=cve