deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-28017
Published: 2025-04-23
Description: TOTOLINK A800R V4.1.2cu.5032_B20200408 is vulnerable to Command Injection in downloadFile.cgi via the QUERY_STRING parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-77
References: https://locrian-lightning-dc7.notion.site/CVE-2025-28017-TOTOLINK-A800R-RCE-1938e5e2b1a280d696bbd25699fb5e97; https://locrian-lightning-dc7.notion.site/TOTOLINK-A800R-RCE-1938e5e2b1a280d696bbd25699fb5e97
CVE: CVE-2025-28018
Published: 2025-04-23
Description: TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v14 parameter.
CVSS Score: 7.3 (HIGH)
CWE: CWE-120
References: https://locrian-lightning-dc7.notion.site/BufferOverflow2-1948e5e2b1a28070a8d1d1ba725febff
CVE: CVE-2025-28019
Published: 2025-04-23
Description: TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in the downloadFile.cgi component
CVSS Score: 7.3 (HIGH)
CWE: CWE-120
References: https://locrian-lightning-dc7.notion.site/BufferOverflow1-1948e5e2b1a280ad96efca529ecae658; https://locrian-lightning-dc7.notion.site/CVE-2025-28019-BufferOverflow1-1948e5e2b1a280ad96efca529ecae658
CVE: CVE-2025-28020
Published: 2025-04-23
Description: TOTOLINK A800R V4.1.2cu.5137_B20200730 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v25 parameter.
CVSS Score: 7.3 (HIGH)
CWE: CWE-120
References: https://locrian-lightning-dc7.notion.site/BufferOverflow3-1948e5e2b1a280c28ef5c6e54b49324d?pvs=73; https://locrian-lightning-dc7.notion.site/CVE-2025-28020-BufferOverflow3-1948e5e2b1a280c28ef5c6e54b49324d
CVE: CVE-2025-28021
Published: 2025-04-23
Description: TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in the downloadFile.cgi through the v14 and v3 parameters
CVSS Score: 7.3 (HIGH)
CWE: CWE-120
References: https://locrian-lightning-dc7.notion.site/BufferOverflow1-1948e5e2b1a280e8aa5ad87964c5cd3d?pvs=73; https://locrian-lightning-dc7.notion.site/CVE-2025-28021-BufferOverflow1-1948e5e2b1a280e8aa5ad87964c5cd3d
CVE: CVE-2025-28022
Published: 2025-04-23
Description: TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v25 parameter.
CVSS Score: 7.3 (HIGH)
CWE: CWE-120
References: https://locrian-lightning-dc7.notion.site/BufferOverflow3-1948e5e2b1a280ec8061ed308b33b5bc?pvs=73; https://locrian-lightning-dc7.notion.site/CVE-2025-28022-BufferOverflow3-1948e5e2b1a280ec8061ed308b33b5bc
CVE: CVE-2025-28025
Published: 2025-04-23
Description: TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulnerability in downloadFile.cgi through the v14 parameter.
CVSS Score: 7.3 (HIGH)
CWE: CWE-120
References: https://locrian-lightning-dc7.notion.site/BufferOverflow1-19e8e5e2b1a280bfbe52ec9975287f77; https://locrian-lightning-dc7.notion.site/BufferOverflow1-19e8e5e2b1a280bfbe52ec9975287f77?pvs=73
CVE: CVE-2025-28028
Published: 2025-04-23
Description: TOTOLINK A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a buffer overflow vulnerability in downloadFile.cgi through the v5 parameter.
CVSS Score: 7.3 (HIGH)
CWE: CWE-120
References: https://locrian-lightning-dc7.notion.site/BufferOverflow4-1948e5e2b1a280b9809af4db6f9e65d1; https://locrian-lightning-dc7.notion.site/CVE-2025-28028-BufferOverflow4-1948e5e2b1a280b9809af4db6f9e65d1
CVE: CVE-2025-29526
Published: 2025-04-23
Description: A Cross-Site Scripting (XSS) vulnerability in the search function of Q4 Inc Investor Relations Platform v5.147.1.2 allows attackers to execute arbitrary Javascript via injecting a crafted payload into the SearchTerm parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://docs.google.com/document/d/15vZXyzddcOv61sFSb3Lf9Dg1rnZ9n3Q6ANoa82jzcNA/edit?usp=sharing; https://gist.github.com/k4nt0r/6ee5bfe9215cb10a436a03c67cf908fd; https://docs.google.com/document/d/15vZXyzddcOv61sFSb3Lf9Dg1rnZ9n3Q6ANoa82jzcNA/edit?usp=sharing
CVE: CVE-2025-2760
Published: 2025-04-23
Description: GIMP XWD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of XWD files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25082.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://www.zerodayinitiative.com/advisories/ZDI-25-203/; https://lists.debian.org/debian-lts-announce/2025/10/msg00022.html
CVE: CVE-2025-2761
Published: 2025-04-23
Description: GIMP FLI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of FLI files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25100.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.zerodayinitiative.com/advisories/ZDI-25-204/; https://lists.debian.org/debian-lts-announce/2025/10/msg00022.html
CVE: CVE-2025-2762
Published: 2025-04-23
Description: CarlinKit CPC200-CCPA Missing Root of Trust Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of CarlinKit CPC200-CCPA devices. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

The specific flaw exists within the configuration of the application system-on-chip (SoC). The issue results from the lack of a properly configured hardware root of trust. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the boot process. Was ZDI-CAN-25948.
CVSS Score: 7.8 (HIGH)
CWE: CWE-1326
References: https://www.zerodayinitiative.com/advisories/ZDI-25-176/
CVE: CVE-2025-2763
Published: 2025-04-23
Description: CarlinKit CPC200-CCPA Improper Verification of Cryptographic Signature Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of CarlinKit CPC200-CCPA devices. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the handling of update packages on USB drives. The issue results from the lack of proper verification of a cryptographic signature. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-24356.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-347
References: https://www.zerodayinitiative.com/advisories/ZDI-25-179/
CVE: CVE-2025-2764
Published: 2025-04-23
Description: CarlinKit CPC200-CCPA update.cgi Improper Verification of Cryptographic Signature Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of CarlinKit CPC200-CCPA devices. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.

The specific flaw exists within the handling of update packages provided to update.cgi. The issue results from the lack of proper verification of a cryptographic signature. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-24355.
CVSS Score: 8.0 (HIGH)
CWE: CWE-347
References: https://www.zerodayinitiative.com/advisories/ZDI-25-178/
CVE: CVE-2025-2765
Published: 2025-04-23
Description: CarlinKit CPC200-CCPA Wireless Hotspot Hard-Coded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of CarlinKit CPC200-CCPA devices. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the configuration of the wireless hotspot. The issue results from the use of hard-coded credentials. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-24349.
CVSS Score: 8.8 (HIGH)
CWE: CWE-798
References: https://www.zerodayinitiative.com/advisories/ZDI-25-177/
CVE: CVE-2025-2767
Published: 2025-04-23
Description: Arista NG Firewall User-Agent Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Arista NG Firewall. Minimal user interaction is required to exploit this vulnerability.

The specific flaw exists within the processing of the User-Agent HTTP header. The issue results from the lack of proper validation of user-supplied data, which can lead to the injection of an arbitrary script. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-24407.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79
References: https://www.zerodayinitiative.com/advisories/ZDI-25-181/
CVE: CVE-2025-2768
Published: 2025-04-23
Description: Bdrive NetDrive Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Bdrive NetDrive. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

The specific flaw exists within the configuration of OpenSSL. The product loads an OpenSSL configuration file from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-25041.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://www.zerodayinitiative.com/advisories/ZDI-25-182/
CVE: CVE-2025-2769
Published: 2025-04-23
Description: Bdrive NetDrive Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Bdrive NetDrive. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

The specific flaw exists within the configuration of OpenSSL. The product loads an OpenSSL configuration file from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-25295.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://www.zerodayinitiative.com/advisories/ZDI-25-183/
CVE: CVE-2025-2770
Published: 2025-04-23
Description: BEC Technologies Multiple Routers Cleartext Password Storage Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of BEC Technologies routers. Authentication is required to exploit this vulnerability.

The specific flaw exists within the web-based user interface. The issue results from storing credentials in a recoverable format. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-25986.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-256, CWE-312
References: https://www.zerodayinitiative.com/advisories/ZDI-25-186/
CVE: CVE-2025-2771
Published: 2025-04-23
Description: BEC Technologies Multiple Routers Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of BEC Technologies routers. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the web-based user interface. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-25894.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-287
References: https://www.zerodayinitiative.com/advisories/ZDI-25-184/
CVE: CVE-2025-2772
Published: 2025-04-23
Description: BEC Technologies Multiple Routers Insufficiently Protected Credentials Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of BEC Technologies routers. Authentication is not required to exploit this vulnerability.

The specific flaw exists within /cgi-bin/tools_usermanage.asp. The issue results from transmitting a list of users and their credentials to be handled on the client side. An attacker can leverage this vulnerability to disclose transported credentials, leading to further compromise. Was ZDI-CAN-25895.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-522
References: https://www.zerodayinitiative.com/advisories/ZDI-25-185/
CVE: CVE-2025-2773
Published: 2025-04-23
Description: BEC Technologies Multiple Routers sys ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of BEC Technologies Multiple Routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.

The specific flaw exists within the management interface, which listens on TCP port 22 by default. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-25903.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://www.zerodayinitiative.com/advisories/ZDI-25-187/
CVE: CVE-2025-3900
Published: 2025-04-23
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Colorbox allows Cross-Site Scripting (XSS).This issue affects Colorbox: from 0.0.0 before 2.1.3.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.drupal.org/sa-contrib-2025-041; https://backdropcms.org/security/backdrop-sa-contrib-2025-012
CVE: CVE-2025-3901
Published: 2025-04-23
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Bootstrap Site Alert allows Cross-Site Scripting (XSS).This issue affects Bootstrap Site Alert: from 0.0.0 before 1.13.0, from 3.0.0 before 3.0.4.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.drupal.org/sa-contrib-2025-042
CVE: CVE-2025-3902
Published: 2025-04-23
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Block Class allows Cross-Site Scripting (XSS).This issue affects Block Class: from 4.0.0 before 4.0.1.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.drupal.org/sa-contrib-2025-043
CVE: CVE-2025-3903
Published: 2025-04-23
Description: Vulnerability in Drupal UEditor - 百度编辑器.This issue affects UEditor - 百度编辑器: *.*.
CVSS Score: 7.3 (HIGH)
References: https://www.drupal.org/sa-contrib-2025-044
CVE: CVE-2025-3904
Published: 2025-04-23
Description: Vulnerability in Drupal Sportsleague.This issue affects Sportsleague: *.*.
CVSS Score: 7.3 (HIGH)
References: https://www.drupal.org/sa-contrib-2025-045
CVE: CVE-2025-3907
Published: 2025-04-23
Description: Cross-Site Request Forgery (CSRF) vulnerability in Drupal Search API Solr allows Cross Site Request Forgery.This issue affects Search API Solr: from 0.0.0 before 4.3.9.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://www.drupal.org/sa-contrib-2025-046
CVE: CVE-2024-58251
Published: 2025-04-23
Description: In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.
CVSS Score: 2.5 (LOW)
CWE: CWE-150
References: https://bugs.busybox.net/show_bug.cgi?id=15922; https://www.busybox.net; https://www.busybox.net/downloads/
CVE: CVE-2025-3673
Published: 2025-04-23
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs:  CVE-2023-3092.. Reason: This candidate is a reservation duplicate of CVE-2023-3092. Notes: All CVE users should reference  CVE-2023-3092. instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2025-28169
Published: 2025-04-23
Description: BYD QIN PLUS DM-i Dilink OS v3.0_13.1.7.2204050.1 to v3.0_13.1.7.2312290.1_0 was discovered to cend broadcasts to the manufacturer's cloud server unencrypted, allowing attackers to execute a man-in-the-middle attack.
CVSS Score: 8.1 (HIGH)
CWE: CWE-295
References: https://gist.github.com/rainymode/bfd976ecbe0d0b776fd930375156c19c; https://www.byd.com
CVE: CVE-2025-32818
Published: 2025-04-23
Description: A Null Pointer Dereference vulnerability in the SonicOS SSLVPN Virtual office interface allows a remote, unauthenticated attacker to crash the firewall, potentially leading to a Denial-of-Service (DoS) condition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0009
CVE: CVE-2025-46397
Published: 2025-04-23
Description: A flaw was found in xfig. This vulnerability allows possible code execution via local input manipulation via bezier_spline function.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://access.redhat.com/errata/RHSA-2026:0700; https://access.redhat.com/errata/RHSA-2026:0704; https://access.redhat.com/errata/RHSA-2026:0705
CVE: CVE-2025-46398
Published: 2025-04-23
Description: In xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption via local input manipulation via read_objects function.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-121
References: https://access.redhat.com/security/cve/CVE-2025-46398; https://bugzilla.redhat.com/show_bug.cgi?id=2362055; https://sourceforge.net/p/mcj/tickets/191/
CVE: CVE-2025-46399
Published: 2025-04-23
Description: A flaw was found in fig2dev. This vulnerability allows availability via local input manipulation via genge_itp_spline function.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://access.redhat.com/security/cve/CVE-2025-46399; https://bugzilla.redhat.com/show_bug.cgi?id=2362053; https://sourceforge.net/p/mcj/tickets/190/
CVE: CVE-2025-46400
Published: 2025-04-23
Description: In xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input manipulation via read_arcobject function.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://access.redhat.com/security/cve/CVE-2025-46400; https://bugzilla.redhat.com/show_bug.cgi?id=2362054; https://sourceforge.net/p/mcj/tickets/187/
CVE: CVE-2024-22351
Published: 2025-04-23
Description: IBM InfoSphere Information 11.7 Server does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-613
References: https://www.ibm.com/support/pages/node/7229921
CVE: CVE-2025-25045
Published: 2025-04-23
Description: IBM InfoSphere Information 11.7 Server authenticated user to obtain sensitive information when a detailed technical error message is returned in a request.  This information could be used in further attacks against the system.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-209
References: https://www.ibm.com/support/pages/node/7231332
CVE: CVE-2025-25046
Published: 2025-04-23
Description: IBM InfoSphere Information Server 11.7 DataStage Flow Designer 

transmits sensitive information via URL or query parameters that could be exposed to an unauthorized actor using man in the middle techniques.
CVSS Score: 3.7 (LOW)
CWE: CWE-319
References: https://www.ibm.com/support/pages/node/7231333
CVE: CVE-2025-27580
Published: 2025-04-24
Description: NIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67 generates predictable tokens (that depend on username, time, and the fixed 7Dl9#dj- string) and thus allows unauthenticated users with a Common Access Card (CAC) to escalate privileges and compromise any account, including administrators.
CVSS Score: 7.5 (HIGH)
CWE: CWE-335
References: https://brics.cit.nih.gov; https://bugculture.io/CVE-2025-27580/; https://github.com/RoseHacks/Vulnerability.Research/blob/main/CVE-2025-27580/README.md
CVE: CVE-2025-27581
Published: 2025-04-24
Description: NIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67 allows users who lack the InET role to access the InET module via direct requests to known endpoints.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-425
References: https://brics.cit.nih.gov; https://github.com/RoseHacks/Vulnerability.Research/blob/main/CVE-2025-27581/README.md; https://github.com/brics-dev/brics
CVE: CVE-2025-46417
Published: 2025-04-24
Description: The unsafe globals in Picklescan before 0.0.25 do not include ssl. Consequently, ssl.get_server_certificate can exfiltrate data via DNS after deserialization.
CVSS Score: 7.5 (HIGH)
CWE: CWE-184
References: https://github.com/advisories/GHSA-93mv-x874-956g; https://github.com/mmaitre314/picklescan/pull/40; https://github.com/advisories/GHSA-93mv-x874-956g
CVE: CVE-2025-46419
Published: 2025-04-24
Description: Westermo WeOS 5 through 5.23.0 allows a reboot via a malformed ESP packet.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-1286
References: https://www.westermo.com/-/media/Files/Cyber-security/westermo_sa_25-02_malformed_esp_packet_could_cause_denial_vulnerability_in_weos.pdf?rev=9af5c93194f343a0b4fad2d24d032df2&hash=87F4AD7F74C2BE69CA1B4C24F29B82EA
CVE: CVE-2025-1976
Published: 2025-04-24
Description: Brocade Fabric OS versions starting with 9.1.0 have root access removed, however, a local user with admin privilege can potentially execute arbitrary code with full root privileges on Fabric OS versions 9.1.0 through 9.1.1d6.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-94, CWE-78
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25602; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-1976
CVE: CVE-2025-3435
Published: 2025-04-24
Description: The Mang Board WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the board_header and board_footer parameters in all versions up to, and including, 1.8.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/3272163/mangboard/trunk; https://www.wordfence.com/threat-intel/vulnerabilities/id/5b97a2f7-b730-4fb7-a41e-dd37f5f87f27?source=cve
CVE: CVE-2025-1453
Published: 2025-04-24
Description: The Category Posts Widget WordPress plugin before 4.9.20 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/6bf93a34-a19f-4266-a95d-033551db43e6/; https://wpscan.com/vulnerability/6bf93a34-a19f-4266-a95d-033551db43e6/