deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-28573
Published: 2024-03-20
Description: Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the jpeg_read_exif_profile() function when reading images in JPEG format.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-121
References: https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909; https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909
CVE: CVE-2024-28574
Published: 2024-03-20
Description: Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the opj_j2k_copy_default_tcp_and_create_tcd() function when reading images in J2K format.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-121
References: https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909; https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909
CVE: CVE-2024-28575
Published: 2024-03-20
Description: Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the opj_j2k_read_mct() function when reading images in J2K format.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-121
References: https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909; https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909
CVE: CVE-2024-28576
Published: 2024-03-20
Description: Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the opj_j2k_tcp_destroy() function when reading images in J2K format.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120
References: https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909; https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909
CVE: CVE-2024-28577
Published: 2024-03-20
Description: Null Pointer Dereference vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the jpeg_read_exif_profile_raw() function when reading images in JPEG format.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909; https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909
CVE: CVE-2024-28578
Published: 2024-03-20
Description: Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the Load() function when reading images in RAS format.
CVSS Score: 8.4 (HIGH)
CWE: CWE-125
References: https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909; https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909
CVE: CVE-2024-28579
Published: 2024-03-20
Description: Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the FreeImage_Unload() function when reading images in HDR format.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-125
References: https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909; https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909
CVE: CVE-2024-28580
Published: 2024-03-20
Description: Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the ReadData() function when reading images in RAS format.
CVSS Score: 8.4 (HIGH)
CWE: CWE-121
References: https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909; https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909
CVE: CVE-2024-28581
Published: 2024-03-20
Description: Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the _assignPixel<>() function when reading images in TARGA format.
CVSS Score: 8.4 (HIGH)
CWE: CWE-121
References: https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909; https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909
CVE: CVE-2024-28582
Published: 2024-03-20
Description: Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the rgbe_RGBEToFloat() function when reading images in HDR format.
CVSS Score: 8.4 (HIGH)
CWE: CWE-121
References: https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909; https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909
CVE: CVE-2024-28583
Published: 2024-03-20
Description: Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the readLine() function when reading images in XPM format.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909; https://github.com/Ruanxingzhi/vul-report/tree/master/freeimage-r1909
CVE: CVE-2024-28584
Published: 2024-03-20
Description: Null Pointer Dereference vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the J2KImageToFIBITMAP() function when reading images in J2K format.
CVSS Score: 3.3 (LOW)
CWE: CWE-476
References: http://www.openwall.com/lists/oss-security/2024/04/11/10; http://www.openwall.com/lists/oss-security/2024/04/11/2; http://www.openwall.com/lists/oss-security/2024/04/11/3
CVE: CVE-2024-2538
Published: 2024-03-20
Description: The Permalink Manager Lite plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ajax_save_permalink' function in all versions up to, and including, 2.4.3.1. This makes it possible for authenticated attackers, with author access and above, to modify the permalinks of arbitrary posts.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-639, CWE-862
References: https://gist.github.com/Xib3rR4dAr/b1eec00e844932c6f2f30a63024b404e; https://plugins.trac.wordpress.org/changeset/3052848#file35; https://www.wordfence.com/threat-intel/vulnerabilities/id/70cd028d-122d-4e3c-ac09-150dec07a2cd?source=cve
CVE: CVE-2024-2674
Published: 2024-03-20
Description: A vulnerability classified as critical was found in Campcodes Online Job Finder System 1.0. This vulnerability affects unknown code of the file /admin/employee/index.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-257374 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/E1CHO/cve_hub/blob/main/Online%20Job%20Finder%20System/Online%20Job%20Finder%20System%20-%20vuln%207.pdf; https://vuldb.com/?ctiid.257374; https://vuldb.com/?id.257374
CVE: CVE-2024-2675
Published: 2024-03-20
Description: A vulnerability, which was classified as critical, has been found in Campcodes Online Job Finder System 1.0. This issue affects some unknown processing of the file /admin/company/index.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257375.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/E1CHO/cve_hub/blob/main/Online%20Job%20Finder%20System/Online%20Job%20Finder%20System%20-%20vuln%208.pdf; https://vuldb.com/?ctiid.257375; https://vuldb.com/?id.257375
CVE: CVE-2024-2676
Published: 2024-03-20
Description: A vulnerability, which was classified as critical, was found in Campcodes Online Job Finder System 1.0. Affected is an unknown function of the file /admin/company/controller.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-257376.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/E1CHO/cve_hub/blob/main/Online%20Job%20Finder%20System/Online%20Job%20Finder%20System%20-%20vuln%209.pdf; https://vuldb.com/?ctiid.257376; https://vuldb.com/?id.257376
CVE: CVE-2024-1119
Published: 2024-03-20
Description: The Order Tip for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the export_tips_to_csv() function in all versions up to, and including, 1.3.1. This makes it possible for unauthenticated attackers to export the plugin's order fees.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/order-tip-woo/trunk/admin/controllers/reports.class.php#L359; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3052259%40order-tip-woo&new=3052259%40order-tip-woo&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/6f837d6b-d1fa-4019-892a-dca3c0f29ca7?source=cve
CVE: CVE-2024-1181
Published: 2024-03-20
Description: The Coming Soon, Under Construction & Maintenance Mode By Dazzler plugin for WordPress is vulnerable to maintenance mode bypass in all versions up to, and including, 2.1.2. This is due to the plugin relying on the REQUEST_URI to determine if the page being accesses is an admin area.  This makes it possible for unauthenticated attackers to bypass maintenance mode and access the site which may be considered confidential when in maintenance mode.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3054042%40coming-soon-wp&new=3054042%40coming-soon-wp&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/6dc144cd-7119-477f-9fa1-b00cab215077?source=cve; https://plugins.trac.wordpress.org/browser/coming-soon-wp/trunk/coming-soon-wp.php#L45
CVE: CVE-2024-1205
Published: 2024-03-20
Description: The Management App for WooCommerce – Order notifications, Order management, Lead management, Uptime Monitoring plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the nouvello_upload_csv_file function in all versions up to, and including, 1.2.2. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434, CWE-434
References: https://plugins.trac.wordpress.org/browser/wemanage-app-worker/trunk/includes/class-nouvello-wemanage-worker-api-wc-ext-controller-functions.php#L982; https://plugins.trac.wordpress.org/browser/wemanage-app-worker/trunk/includes/class-nouvello-wemanage-worker-api-wc-ext-controller.php#L166; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3056070%40wemanage-app-worker&new=3056070%40wemanage-app-worker&sfp_email=&sfph_mail=
CVE: CVE-2024-1325
Published: 2024-03-20
Description: The Live Sales Notification for Woocommerce – Woomotiv plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.4.3. This is due to missing or incorrect nonce validation on the 'ajax_cancel_review' function. This makes it possible for unauthenticated attackers to reset the site's review count via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3052675%40woomotiv&new=3052675%40woomotiv&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/ca1c1b43-def2-4f9f-b5c7-075ca188f6e7?source=cve; https://plugins.trac.wordpress.org/browser/woomotiv/tags/3.4.1/lib/class-backend.php#L495
CVE: CVE-2024-1379
Published: 2024-03-20
Description: The Website Article Monetization By MageNet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'abp_auth_key' parameter in all versions up to, and including, 1.0.11 due to insufficient input sanitization and output escaping and a missing authorization check. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/website-article-monetization-by-magenet/trunk/admin/article-backlinks-admin.php#L110; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3058889%40website-article-monetization-by-magenet&new=3058889%40website-article-monetization-by-magenet&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/b8564dbb-6be8-4999-be65-d28609e05451?source=cve
CVE: CVE-2024-1473
Published: 2024-03-20
Description: The Coming Soon & Maintenance Mode by Colorlib plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.0.99 via the REST API. This makes it possible for unauthenticated attackers to obtain post and page contents via REST API thus bypassing maintenance mode protection provided by the plugin.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: https://plugins.trac.wordpress.org/changeset/3058925/colorlib-coming-soon-maintenance/trunk/colorlib-coming-soon-and-maintenance-mode.php; https://wordpress.org/plugins/colorlib-coming-soon-maintenance/; https://www.wordfence.com/threat-intel/vulnerabilities/id/48dc10a9-7bb9-401f-befd-1bf620858825?source=cve
CVE: CVE-2024-1477
Published: 2024-03-20
Description: The Easy Maintenance Mode plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.2 via the REST API. This makes it possible for authenticated attackers to obtain post and page content via REST API thus bypassign the protection provided by the plugin.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://wordpress.org/plugins/easy-maintenance-mode-coming-soon/; https://www.wordfence.com/threat-intel/vulnerabilities/id/1a12f472-0ae1-4c3c-b7e3-85f637fe58c5?source=cve; https://wordpress.org/plugins/easy-maintenance-mode-coming-soon/
CVE: CVE-2024-1711
Published: 2024-03-20
Description: The Create by Mediavine plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.9.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3056265%40mediavine-create%2Ftrunk&old=2847481%40mediavine-create%2Ftrunk&sfp_email=&sfph_mail=; https://wordpress.org/plugins/mediavine-create/; https://www.wordfence.com/threat-intel/vulnerabilities/id/fcc78fa6-a5f0-4f29-ae19-8e783698b19e?source=cve
CVE: CVE-2024-1844
Published: 2024-03-20
Description: The RevivePress – Keep your Old Content Evergreen plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the import_data and copy_data functions in all versions up to, and including, 1.5.6. This makes it possible for authenticated attackers, with subscriber-level access or higher, to overwrite plugin settings and view them.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3054016%40wp-auto-republish&new=3054016%40wp-auto-republish&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/63ecb518-50d6-49ad-92e4-c5a7494ced82?source=cve; https://plugins.trac.wordpress.org/browser/wp-auto-republish/trunk/includes/Tools/Database.php#L148
CVE: CVE-2024-2129
Published: 2024-03-20
Description: The WPBITS Addons For Elementor Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's heading widget in all versions up to, and including, 1.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3098221%40wpbits-addons-for-elementor&new=3098221%40wpbits-addons-for-elementor&sfp_email=&sfph_mail=#file13; https://wordpress.org/plugins/wpbits-addons-for-elementor/; https://www.wordfence.com/threat-intel/vulnerabilities/id/05cd8f96-533a-4036-a01f-6ba1ad2d2b5e?source=cve
CVE: CVE-2024-2304
Published: 2024-03-20
Description: The Animated Headline plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'animated-headline' shortcode in all versions up to, and including, 4.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/animated-headline/; https://www.wordfence.com/threat-intel/vulnerabilities/id/6f589b5d-9cdb-4521-bc60-c8f19d0ef982?source=cve; https://wordpress.org/plugins/animated-headline/
CVE: CVE-2024-2459
Published: 2024-03-20
Description: The UX Flat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'button' shortcode in all versions up to, and including, 4.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 7.4 (HIGH)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/3064741; https://wordpress.org/plugins/ux-flat/; https://www.wordfence.com/threat-intel/vulnerabilities/id/1d93db2c-7baf-42d8-9b4a-be91b27221a7?source=cve
CVE: CVE-2024-2677
Published: 2024-03-20
Description: A vulnerability has been found in Campcodes Online Job Finder System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/category/controller.php. The manipulation of the argument CATEGORYID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-257377 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/E1CHO/cve_hub/blob/main/Online%20Job%20Finder%20System/Online%20Job%20Finder%20System%20-%20vuln%2012.pdf; https://vuldb.com/?ctiid.257377; https://vuldb.com/?id.257377
CVE: CVE-2024-2678
Published: 2024-03-20
Description: A vulnerability was found in Campcodes Online Job Finder System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/applicants/controller.php. The manipulation of the argument JOBREGID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-257378 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/E1CHO/cve_hub/blob/main/Online%20Job%20Finder%20System/Online%20Job%20Finder%20System%20-%20vuln%2013.pdf; https://vuldb.com/?ctiid.257378; https://vuldb.com/?id.257378
CVE: CVE-2024-2679
Published: 2024-03-20
Description: A vulnerability was found in Campcodes Online Job Finder System 1.0. It has been classified as problematic. This affects an unknown part of the file /admin/vacancy/index.php. The manipulation of the argument view leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257379.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/E1CHO/cve_hub/blob/main/Online%20Job%20Finder%20System/Online%20Job%20Finder%20System%20-%20vuln%2014.pdf; https://vuldb.com/?ctiid.257379; https://vuldb.com/?id.257379
CVE: CVE-2024-2680
Published: 2024-03-20
Description: A vulnerability was found in Campcodes Online Job Finder System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/user/index.php. The manipulation of the argument view leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-257380.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/E1CHO/cve_hub/blob/main/Online%20Job%20Finder%20System/Online%20Job%20Finder%20System%20-%20vuln%2015.pdf; https://vuldb.com/?ctiid.257380; https://vuldb.com/?id.257380
CVE: CVE-2024-2681
Published: 2024-03-20
Description: A vulnerability was found in Campcodes Online Job Finder System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/employee/index.php. The manipulation of the argument view leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-257381 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/E1CHO/cve_hub/blob/main/Online%20Job%20Finder%20System/Online%20Job%20Finder%20System%20-%20vuln%2016.pdf; https://vuldb.com/?ctiid.257381; https://vuldb.com/?id.257381
CVE: CVE-2024-2682
Published: 2024-03-20
Description: A vulnerability classified as problematic has been found in Campcodes Online Job Finder System 1.0. Affected is an unknown function of the file /admin/employee/controller.php. The manipulation of the argument EMPLOYEEID leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-257382 is the identifier assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/E1CHO/cve_hub/blob/main/Online%20Job%20Finder%20System/Online%20Job%20Finder%20System%20-%20vuln%2017.pdf; https://vuldb.com/?ctiid.257382; https://vuldb.com/?id.257382
CVE: CVE-2024-2683
Published: 2024-03-20
Description: A vulnerability classified as problematic was found in Campcodes Online Job Finder System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/company/index.php. The manipulation of the argument view leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257383.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/E1CHO/cve_hub/blob/main/Online%20Job%20Finder%20System/Online%20Job%20Finder%20System%20-%20vuln%2018.pdf; https://vuldb.com/?ctiid.257383; https://vuldb.com/?id.257383
CVE: CVE-2024-2684
Published: 2024-03-20
Description: A vulnerability, which was classified as problematic, has been found in Campcodes Online Job Finder System 1.0. Affected by this issue is some unknown functionality of the file /admin/category/index.php. The manipulation of the argument view leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-257384.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/E1CHO/cve_hub/blob/main/Online%20Job%20Finder%20System/Online%20Job%20Finder%20System%20-%20vuln%209.pdf; https://vuldb.com/?ctiid.257384; https://vuldb.com/?id.257384