deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-1931
Published: 2023-04-06
Description: The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data loss due to a missing capability check on the deleteCssAndJsCacheToolbar function in versions up to, and including, 1.1.2. This makes it possible for authenticated attackers with subscriber-level access to perform cache deletion.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/changeset/2893158/wp-fastest-cache/trunk/wpFastestCache.php?contextall=1; https://www.wordfence.com/threat-intel/vulnerabilities/id/b4bb2d72-ff31-4220-acb3-ed17bb9229b5?source=cve; https://plugins.trac.wordpress.org/changeset/2893158/wp-fastest-cache/trunk/wpFastestCache.php?contextall=1
CVE: CVE-2023-28500
Published: 2023-04-06
Description: A Java insecure deserialization vulnerability in Adobe LiveCycle ES4 version 11.0 and earlier allows unauthenticated remote attackers to gain operating system code execution by submitting specially crafted Java serialized objects to a specific URL. Adobe LiveCycle ES4 version 11.0.1 and later may be vulnerable if the application is installed with Java environment 7u21 and earlier. Exploitation of the vulnerability depends on two factors: insecure deserialization methods used in the Adobe LiveCycle application, and the use of Java environments 7u21 and earlier. The code execution is performed in the context of the account that is running the Adobe LiveCycle application. If the account is privileged, exploitation provides privileged access to the operating system. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502, CWE-502
References: https://coastalsecurity.gitbook.io/critical-vulnerability-adobe-livecycle-es4v11.0/; https://coastalsecurity.gitbook.io/critical-vulnerability-adobe-livecycle-es4v11.0/
CVE: CVE-2023-29473
Published: 2023-04-06
Description: webservice in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the platform operating system and achieve administrative access, aka OSFOURK-23710.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-77
References: https://networks.unify.com/security/advisories/OBSO-2303-01.pdf; https://www.news.de/technik/856806612/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-betroffene-systeme-und-produkte-neue-versionen-und-updates/1/; https://networks.unify.com/security/advisories/OBSO-2303-01.pdf
CVE: CVE-2023-29474
Published: 2023-04-06
Description: inventory in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the platform operating system and achieve administrative access, aka OSFOURK-23552.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-77
References: https://networks.unify.com/security/advisories/OBSO-2303-01.pdf; https://www.news.de/technik/856806612/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-betroffene-systeme-und-produkte-neue-versionen-und-updates/1/; https://networks.unify.com/security/advisories/OBSO-2303-01.pdf
CVE: CVE-2023-29475
Published: 2023-04-06
Description: inventory in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary commands on the platform operating system and achieve administrative access, aka OSFOURK-23543.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-77
References: https://networks.unify.com/security/advisories/OBSO-2303-01.pdf; https://www.news.de/technik/856806612/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-betroffene-systeme-und-produkte-neue-versionen-und-updates/1/; https://networks.unify.com/security/advisories/OBSO-2303-01.pdf
CVE: CVE-2020-11935
Published: 2023-04-07
Description: It was discovered that aufs improperly managed inode reference counts in the vfsub_dentry_open() method. A local attacker could use this vulnerability to cause a denial of service attack.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-911
References: https://bugs.launchpad.net/bugs/1873074; https://ubuntu.com/security/CVE-2020-11935; https://bugs.launchpad.net/bugs/1873074
CVE: CVE-2023-24797
Published: 2023-04-07
Description: D-Link DIR882 DIR882A1_FW110B02 was discovered to contain a stack overflow in the sub_48AC20 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/DrizzlingSun/D-link/blob/main/Dir882/1/1.md; https://www.dlink.com/en/security-bulletin/; https://github.com/DrizzlingSun/D-link/blob/main/Dir882/1/1.md
CVE: CVE-2023-24798
Published: 2023-04-07
Description: D-Link DIR878 DIR_878_FW120B05 was discovered to contain a stack overflow in the sub_475FB0 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/DrizzlingSun/D-link/blob/main/Dir878/2/2.md; https://www.dlink.com/en/security-bulletin/; https://github.com/DrizzlingSun/D-link/blob/main/Dir878/2/2.md
CVE: CVE-2023-24799
Published: 2023-04-07
Description: D-Link DIR878 DIR_878_FW120B05 was discovered to contain a stack overflow in the sub_48AF78 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/DrizzlingSun/D-link/blob/main/Dir878/1/1.md; https://www.dlink.com/en/security-bulletin/; https://github.com/DrizzlingSun/D-link/blob/main/Dir878/1/1.md
CVE: CVE-2023-24800
Published: 2023-04-07
Description: D-Link DIR878 DIR_878_FW120B05 was discovered to contain a stack overflow in the sub_495220 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/DrizzlingSun/D-link/blob/main/Dir878/3/3.md; https://www.dlink.com/en/security-bulletin/; https://github.com/DrizzlingSun/D-link/blob/main/Dir878/3/3.md
CVE: CVE-2023-25210
Published: 2023-04-07
Description: Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the fromSetSysTime function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/DrizzlingSun/Tenda/blob/main/AC5/1/1.md; https://github.com/DrizzlingSun/Tenda/blob/main/AC5/1/1.md
CVE: CVE-2023-25211
Published: 2023-04-07
Description: Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the R7WebsSecurityHandler function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/DrizzlingSun/Tenda/blob/main/AC5/2/2.md; https://github.com/DrizzlingSun/Tenda/blob/main/AC5/2/2.md
CVE: CVE-2023-25212
Published: 2023-04-07
Description: Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the fromSetWirelessRepeat function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/DrizzlingSun/Tenda/blob/main/AC5/6/6.md; https://github.com/DrizzlingSun/Tenda/blob/main/AC5/6/6.md
CVE: CVE-2023-25213
Published: 2023-04-07
Description: Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the check_param_changed function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/DrizzlingSun/Tenda/blob/main/AC5/5/5.md; https://github.com/DrizzlingSun/Tenda/blob/main/AC5/5/5.md
CVE: CVE-2023-25214
Published: 2023-04-07
Description: Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the setSchedWifi function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/DrizzlingSun/Tenda/blob/main/AC5/4/4.md; https://github.com/DrizzlingSun/Tenda/blob/main/AC5/4/4.md
CVE: CVE-2023-25215
Published: 2023-04-07
Description: Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the saveParentControlInfo function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/DrizzlingSun/Tenda/blob/main/AC5/3/3.md; https://github.com/DrizzlingSun/Tenda/blob/main/AC5/3/3.md
CVE: CVE-2023-25216
Published: 2023-04-07
Description: Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the formSetFirewallCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/DrizzlingSun/Tenda/blob/main/AC5/9/9.md; https://github.com/DrizzlingSun/Tenda/blob/main/AC5/9/9.md
CVE: CVE-2023-25217
Published: 2023-04-07
Description: Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the formWifiBasicSet function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/DrizzlingSun/Tenda/blob/main/AC5/10/10.md; https://github.com/DrizzlingSun/Tenda/blob/main/AC5/10/10.md
CVE: CVE-2023-25218
Published: 2023-04-07
Description: Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the form_fast_setting_wifi_set function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/DrizzlingSun/Tenda/blob/main/AC5/8/8.md; https://www.dlink.com/en/security-bulletin/; https://github.com/DrizzlingSun/Tenda/blob/main/AC5/8/8.md
CVE: CVE-2023-25219
Published: 2023-04-07
Description: Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the fromDhcpListClient function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/DrizzlingSun/Tenda/blob/main/AC5/11/11.md; https://github.com/DrizzlingSun/Tenda/blob/main/AC5/11/11.md
CVE: CVE-2023-25220
Published: 2023-04-07
Description: Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the add_white_node function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/DrizzlingSun/Tenda/blob/main/AC5/7/7.md; https://www.dlink.com/en/security-bulletin/; https://github.com/DrizzlingSun/Tenda/blob/main/AC5/7/7.md
CVE: CVE-2023-27012
Published: 2023-04-07
Description: Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the setSchedWifi function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/DrizzlingSun/Tenda/blob/main/AC10/5/5.md; https://github.com/DrizzlingSun/Tenda/blob/main/AC10/5/5.md
CVE: CVE-2023-27013
Published: 2023-04-07
Description: Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the get_parentControl_list_Info function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/DrizzlingSun/Tenda/blob/main/AC10/2/2.md; https://github.com/DrizzlingSun/Tenda/blob/main/AC10/2/2.md
CVE: CVE-2023-27014
Published: 2023-04-07
Description: Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_46AC38 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/DrizzlingSun/Tenda/blob/main/AC10/10/10.md; https://github.com/DrizzlingSun/Tenda/blob/main/AC10/10/10.md
CVE: CVE-2023-27015
Published: 2023-04-07
Description: Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_4A75C0 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/DrizzlingSun/Tenda/blob/main/AC10/4/4.md; https://github.com/DrizzlingSun/Tenda/blob/main/AC10/4/4.md
CVE: CVE-2023-27016
Published: 2023-04-07
Description: Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the R7WebsSecurityHandler function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/DrizzlingSun/Tenda/blob/main/AC10/3/3.md; https://github.com/DrizzlingSun/Tenda/blob/main/AC10/3/3.md
CVE: CVE-2023-27017
Published: 2023-04-07
Description: Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_45DC58 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/DrizzlingSun/Tenda/blob/main/AC10/6/6.md; https://github.com/DrizzlingSun/Tenda/blob/main/AC10/6/6.md
CVE: CVE-2023-27018
Published: 2023-04-07
Description: Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_45EC1C function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/DrizzlingSun/Tenda/blob/main/AC10/7/7.md; https://github.com/DrizzlingSun/Tenda/blob/main/AC10/7/7.md
CVE: CVE-2023-27019
Published: 2023-04-07
Description: Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_458FBC function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/DrizzlingSun/Tenda/blob/main/AC10/8/8.md; https://github.com/DrizzlingSun/Tenda/blob/main/AC10/8/8.md
CVE: CVE-2023-27020
Published: 2023-04-07
Description: Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the saveParentControlInfo function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/DrizzlingSun/Tenda/blob/main/AC10/1/1.md; https://github.com/DrizzlingSun/Tenda/blob/main/AC10/1/1.md
CVE: CVE-2023-27021
Published: 2023-04-07
Description: Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the formSetFirewallCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/DrizzlingSun/Tenda/blob/main/AC10/9/9.md; https://github.com/DrizzlingSun/Tenda/blob/main/AC10/9/9.md
CVE: CVE-2023-26817
Published: 2023-04-07
Description: codefever before 2023.2.7-commit-b1c2e7f was discovered to contain a remote code execution (RCE) vulnerability via the component /controllers/api/user.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://github.com/PGYER/codefever/issues/140; https://github.com/PGYER/codefever/issues/140
CVE: CVE-2023-26820
Published: 2023-04-07
Description: siteproxy v1.0 was discovered to contain a path traversal vulnerability via the component index.js.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://github.com/netptop/siteproxy/issues/67; https://github.com/netptop/siteproxy/issues/67
CVE: CVE-2023-26848
Published: 2023-04-07
Description: TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the org parameter at setting/delStaticDhcpRules.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-77
References: https://github.com/Am1ngl/ttt/tree/main/23; https://github.com/Am1ngl/ttt/tree/main/23
CVE: CVE-2023-26978
Published: 2023-04-07
Description: TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the pppoeAcName parameter at /setting/setWanIeCfg.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-77
References: https://github.com/Am1ngl/ttt/tree/main/28; https://github.com/Am1ngl/ttt/tree/main/28
CVE: CVE-2023-29478
Published: 2023-04-07
Description: BiblioCraft before 2.4.6 does not sanitize path-traversal characters in filenames, allowing restricted write access to almost anywhere on the filesystem. This includes the Minecraft mods folder, which results in code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-22
References: https://github.com/Exopteron/BiblioRCE; https://github.com/Exopteron/BiblioRCE
CVE: CVE-2023-28051
Published: 2023-04-07
Description: 
Dell Power Manager, versions 3.10 and prior, contains an Improper Access Control vulnerability. A low-privileged attacker could potentially exploit this vulnerability to elevate privileges on the system.


CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: https://www.dell.com/support/kbdoc/en-us/000211891/dsa-2023-221-dell-power-manager; https://www.dell.com/support/kbdoc/en-us/000211891/dsa-2023-221-dell-power-manager
CVE: CVE-2023-1937
Published: 2023-04-07
Description: A vulnerability, which was classified as problematic, was found in zhenfeng13 My-Blog. Affected is an unknown function of the file /admin/configurations/userInfo. The manipulation of the argument yourAvatar/yourName/yourEmail leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The identifier of this vulnerability is VDB-225264.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://gitee.com/zhenfeng13/My-Blog/issues/I6PV4U; https://vuldb.com/?ctiid.225264; https://vuldb.com/?id.225264
CVE: CVE-2023-24402
Published: 2023-04-07
Description: Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Veribo, Roland Murg WP Booking System – Booking Calendar plugin <= 2.0.18 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/wp-booking-system/wordpress-wp-booking-system-booking-calendar-plugin-2-0-18-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wp-booking-system/wordpress-wp-booking-system-booking-calendar-plugin-2-0-18-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-25059
Published: 2023-04-07
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in avalex GmbH avalex – Automatically secure legal texts plugin <= 3.0.3 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/avalex/wordpress-avalex-plugin-3-0-3-cross-site-scripting-xss?_s_id=cve; https://patchstack.com/database/vulnerability/avalex/wordpress-avalex-plugin-3-0-3-cross-site-scripting-xss?_s_id=cve
CVE: CVE-2023-25061
Published: 2023-04-07
Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin <= 2.7.1.1 versions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/bft-autoresponder/wordpress-arigato-autoresponder-and-newsletter-plugin-2-7-1-1-cross-site-scripting-xss?_s_id=cve; https://patchstack.com/database/vulnerability/bft-autoresponder/wordpress-arigato-autoresponder-and-newsletter-plugin-2-7-1-1-cross-site-scripting-xss?_s_id=cve
CVE: CVE-2023-24398
Published: 2023-04-07
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Snap Creek Software EZP Coming Soon Page plugin <= 1.0.7.3 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/easy-pie-coming-soon/wordpress-ezp-coming-soon-page-plugin-1-0-7-3-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/easy-pie-coming-soon/wordpress-ezp-coming-soon-page-plugin-1-0-7-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-25046
Published: 2023-04-07
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Podlove Podlove Podcast Publisher plugin <= 3.8.2 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/podlove-podcasting-plugin-for-wordpress/wordpress-podlove-podcast-publisher-plugin-3-8-2-cross-site-scripting-xss?_s_id=cve; https://patchstack.com/database/vulnerability/podlove-podcasting-plugin-for-wordpress/wordpress-podlove-podcast-publisher-plugin-3-8-2-cross-site-scripting-xss?_s_id=cve
CVE: CVE-2023-25022
Published: 2023-04-07
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Watu Quiz plugin <= 3.3.8 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/watu/wordpress-watu-quiz-plugin-3-3-8-cross-site-scripting-xss?_s_id=cve; https://patchstack.com/database/vulnerability/watu/wordpress-watu-quiz-plugin-3-3-8-cross-site-scripting-xss?_s_id=cve
CVE: CVE-2023-25023
Published: 2023-04-07
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Saleswonder.Biz Webinar ignition plugin <= 2.14.2 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://patchstack.com/database/vulnerability/webinar-ignition/wordpress-webinarignition-plugin-2-14-2-cross-site-scripting-xss?_s_id=cve; https://patchstack.com/database/vulnerability/webinar-ignition/wordpress-webinarignition-plugin-2-14-2-cross-site-scripting-xss?_s_id=cve
CVE: CVE-2023-25024
Published: 2023-04-07
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Icegram Icegram Collect plugin <= 1.3.8 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/icegram-rainmaker/wordpress-icegram-collect-easy-form-lead-collection-and-subscription-plugin-plugin-1-3-8-cross-site-scripting-xss?_s_id=cve; https://patchstack.com/database/vulnerability/icegram-rainmaker/wordpress-icegram-collect-easy-form-lead-collection-and-subscription-plugin-plugin-1-3-8-cross-site-scripting-xss?_s_id=cve
CVE: CVE-2023-25027
Published: 2023-04-07
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Chained Quiz plugin <= 1.3.2.5 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/chained-quiz/wordpress-chained-quiz-plugin-1-3-2-5-cross-site-scripting-xss?_s_id=cve; https://patchstack.com/database/vulnerability/chained-quiz/wordpress-chained-quiz-plugin-1-3-2-5-cross-site-scripting-xss?_s_id=cve