deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-26248
Published: 2024-10-25
Description: The Kademlia DHT (go-libp2p-kad-dht 0.20.0 and earlier) used in IPFS (0.18.1 and earlier) assigns routing information for content (i.e., information about who holds the content) to be stored by peers whose peer IDs have a small DHT distance from the content ID. This allows an attacker to censor content by generating many Sybil peers whose peer IDs have a small distance from the content ID, thus hijacking the content resolution process.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-352
References: https://arxiv.org/abs/2307.12212; https://github.com/libp2p/go-libp2p-kad-dht
CVE: CVE-2024-48204
Published: 2024-10-25
Description: SQL injection vulnerability in Hanzhou Haobo network management system 1.0 allows a remote attacker to execute arbitrary code via a crafted script.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://gist.github.com/NasYangh/161618e4552ca40ad1ac25b4d673bfcf
CVE: CVE-2024-48579
Published: 2024-10-25
Description: SQL Injection vulnerability in Best House rental management system project in php v.1.0 allows a remote attacker to execute arbitrary code via the username parameter of the login request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/baineoli/CVE/blob/main/2024/house%20rental%20management%20system%20-%20SQL%20Injection%20%28Admin%20Login%29.md
CVE: CVE-2024-48580
Published: 2024-10-25
Description: SQL Injection vulnerability in Best courier management system in php v.1.0 allows a remote attacker to execute arbitrary code via the email parameter of the login request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/baineoli/CVE/blob/main/2024/courier%20management%20system%20-%20SQL%20Injection%20%28Admin%20Login%29.md
CVE: CVE-2024-48581
Published: 2024-10-25
Description: File Upload vulnerability in Best courier management system in php v.1.0 allows a remote attacker to execute arbitrary code via the admin_class.php component.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/baineoli/CVE/blob/main/2024/courier%20management%20system%20-%20Unrestricted%20File%20Upload%20to%20RCE%20%28Sign%20Up%29.md
CVE: CVE-2022-30356
Published: 2024-10-25
Description: OvalEdge 5.2.8.0 and earlier is affected by a Privilege Escalation vulnerability via a POST request to /user/assignuserrole via the userid and role parameters . Authentication is required with OE_ADMIN role privilege.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://cve.offsecguy.com/ovaledge/vulnerabilities/privilege-escalation#cve-2022-30356
CVE: CVE-2022-30357
Published: 2024-10-25
Description: OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/updateProfile via the userId and email parameters. Authentication is required.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://cve.offsecguy.com/ovaledge/vulnerabilities/account-takeover#cve-2022-30357
CVE: CVE-2022-30358
Published: 2024-10-25
Description: OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /user/updatePassword via the userId and newPsw parameters. Authentication is required.
CVSS Score: 8.8 (HIGH)
CWE: CWE-863, CWE-863
References: https://cve.offsecguy.com/ovaledge/vulnerabilities/account-takeover#cve-2022-30358
CVE: CVE-2022-30359
Published: 2024-10-25
Description: OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserList. Authentication is required. The information disclosed is associated with the all registered users, including user ID, status, email address, role(s), user type, license type, and personal details such as first name, last name, gender, and user preferences.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-922, CWE-79
References: https://cve.offsecguy.com/ovaledge/vulnerabilities/sensitive-data-exposure#cve-2022-30359
CVE: CVE-2022-30360
Published: 2024-10-25
Description: OvalEdge 5.2.8.0 and earlier is affected by multiple Stored XSS (AKA Persistent or Type II) vulnerabilities via a POST request to /profile/updateProfile via the slackid or phone parameters. Authentication is required.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://cve.offsecguy.com/ovaledge/vulnerabilities/stored-xss#cve-2022-30360
CVE: CVE-2022-30361
Published: 2024-10-25
Description: OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserType. No authentication is required. The information disclosed is associated with the registered user ID, status, email address, role(s), user type, license type, and personal details such as first name, last name, gender, and user preferences.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-922, CWE-922
References: https://cve.offsecguy.com/ovaledge/vulnerabilities/sensitive-data-exposure#cve-2022-30361
CVE: CVE-2024-10386
Published: 2024-10-25
Description: CVE-2024-10386 IMPACT



An authentication
vulnerability exists in the affected product. The vulnerability could allow a
threat actor with network access to send crafted messages to the device, potentially
resulting in database manipulation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1708.html
CVE: CVE-2024-10387
Published: 2024-10-25
Description: CVE-2024-10387 IMPACT



A Denial-of-Service
vulnerability exists in the affected product. The vulnerability could allow a
threat actor with network access to send crafted messages to the device,
potentially resulting in Denial-of-Service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1708.html
CVE: CVE-2024-48459
Published: 2024-10-25
Description: A command execution vulnerability exists in the AX2 Pro home router produced by Shenzhen Tenda Technology Co., Ltd. (Jixiang Tenda) v.DI_7003G-19.12.24A1V16.03.29.50;V16.03.29.50;V16.03.29.50. An attacker can exploit this vulnerability by constructing a malicious payload to execute commands and further obtain shell access to the router's file system with the highest privileges.
CVSS Score: 7.3 (HIGH)
CWE: CWE-78
References: https://gist.github.com/Swind1er/da24125da98f6616a50a35a3e60141f4
CVE: CVE-2024-48654
Published: 2024-10-25
Description: Cross Site Scripting vulnerability in Blood Bank v.1 allows a remote attacker to execute arbitrary code via a crafted script to the login.php component.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Prabhatsk7/CVE/blob/main/CVE-2024-48654; https://github.com/Prabhatsk7/CVE/commit/d735e4f0bab[PII_REDACTED]284f51b602ead429b27
CVE: CVE-2024-48655
Published: 2024-10-25
Description: An issue in Total.js CMS v.1.0 allows a remote attacker to execute arbitrary code via the func.js file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://github.com/totaljs/cms/issues/49; https://medium.com/%400x0d0x0a/cve-2024-48655-server-side-javascript-code-injection-in-total-js-cms-c5fc18359bdc
CVE: CVE-2024-48743
Published: 2024-10-25
Description: Cross Site Scripting vulnerability in Sentry v.6.0.9 allows a remote attacker to execute arbitrary code via the z parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/rvismit/538232c3f258e468195febb69f3f2d3b
CVE: CVE-2024-8036
Published: 2024-10-25
Description: ABB is aware of privately reported vulnerabilities in the product versions referenced in this CVE. An attacker could exploit these vulnerabilities by sending a specially crafted firmware or configuration to the system node, causing the node to stop, become inaccessible, or allowing the attacker to take control of the node.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-347
References: https://search.abb.com/library/Download.aspx?DocumentID=2NGA001911&LanguageCode=en&DocumentPartId=&Action=Launch
CVE: CVE-2024-48343
Published: 2024-10-25
Description: A SQL Injection vulnerability in ESAFENET CDG 5 and earlier allows an attacker to execute arbitrary code via the id parameter of the dataSearch.jsp page.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://flowus.cn/share/d038084d-6370-4bcb-a268-6cca9e0f6615?code=G8A6P3
CVE: CVE-2024-48448
Published: 2024-10-25
Description: An arbitrary file upload vulnerability in Huly Platform v0.6.295 allows attackers to execute arbitrary code via uploading a crafted HTML file into the tracker comments page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/b-hermes/vulnerability-research/tree/main/CVE-2024-48448
CVE: CVE-2024-48700
Published: 2024-10-25
Description: Kliqqi-CMS has a background arbitrary code execution vulnerability that attackers can exploit to implant backdoors or getShell via the edit_page.php component.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://github.com/ChangeYourWay/post/blob/main/CVE-2024-48700
CVE: CVE-2024-9584
Published: 2024-10-25
Description: The Image Map Pro plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the AJAX functions in versions up to, and including, 6.0.20. This makes it possible for authenticated attackers with contributor-level privileges or above, to add, update or delete map projects.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862
References: https://imagemappro.com/change-log/; https://www.wordfence.com/threat-intel/vulnerabilities/id/7c632452-8b13-4f78-aa8a-3c92bef5907f?source=cve
CVE: CVE-2024-9585
Published: 2024-10-25
Description: The Image Map Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'save_project' function with an arbitrary shortcode in versions up to, and including, 6.0.20 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://imagemappro.com/change-log/; https://www.wordfence.com/threat-intel/vulnerabilities/id/22245bb5-a310-4cd2-98e3-6611e71ff7fa?source=cve
CVE: CVE-2024-37844
Published: 2024-10-25
Description: A stored cross-site scripting (XSS) vulnerability in MangoOS before 5.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/herombey/Disclosures/blob/main/CVE-2024-37844%20XSS.pdf; https://github.com/herombey/Disclosures/tree/main
CVE: CVE-2024-37845
Published: 2024-10-25
Description: MangoOS before 5.2.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the Active Process Command feature.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-94
References: https://github.com/herombey/Disclosures/blob/main/CVE-2024-37845%20RCE.pdf; https://github.com/herombey/Disclosures/tree/main
CVE: CVE-2024-37846
Published: 2024-10-25
Description: MangoOS before 5.2.0 was discovered to contain a Client-Side Template Injection (CSTI) vulnerability via the Platform Management Edit page.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-94, CWE-94
References: https://github.com/herombey/Disclosures/blob/main/CVE-2024-37846-CSTI.pdf; https://github.com/herombey/Disclosures/tree/main
CVE: CVE-2024-37847
Published: 2024-10-25
Description: An arbitrary file upload vulnerability in MangoOS before 5.1.4 and Mango API before 4.5.5 allows attackers to execute arbitrary code via a crafted file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22, CWE-22, CWE-434
References: https://github.com/herombey/Disclosures/blob/main/CVE-2024-37847%20File%20Upload%20Path%20Traversal.pdf; https://github.com/herombey/Disclosures/tree/main
CVE: CVE-2024-48450
Published: 2024-10-25
Description: An arbitrary file upload vulnerability in Huly Platform v0.6.295 allows attackers to execute arbitrary code via uploading a crafted HTML file into chat group.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918
References: https://github.com/b-hermes/vulnerability-research/tree/main/CVE-2024-48450
CVE: CVE-2024-49766
Published: 2024-10-25
Description: Werkzeug is a Web Server Gateway Interface web application library. On Python < 3.11 on Windows, os.path.isabs() does not catch UNC paths like //server/share. Werkzeug's safe_join() relies on this check, and so can produce a path that is not safe, potentially allowing unintended access to data. Applications using Python >= 3.11, or not using Windows, are not vulnerable. Werkzeug version 3.0.6 contains a patch.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/pallets/werkzeug/commit/2767bcb10a7dd1c297d812cc5e6d11a474c1f092; https://github.com/pallets/werkzeug/releases/tag/3.0.6; https://github.com/pallets/werkzeug/security/advisories/GHSA-f9vj-2wh5-fj8j
CVE: CVE-2024-49767
Published: 2024-10-25
Description: Werkzeug is a Web Server Gateway Interface web application library. Applications using `werkzeug.formparser.MultiPartParser` corresponding to a version of Werkzeug prior to 3.0.6 to parse `multipart/form-data` requests (e.g. all flask applications) are vulnerable to a relatively simple but effective resource exhaustion (denial of service) attack. A specifically crafted form submission request can cause the parser to allocate and block 3 to 8 times the upload size in main memory. There is no upper limit; a single upload at 1 Gbit/s can exhaust 32 GB of RAM in less than 60 seconds. Werkzeug version 3.0.6 fixes this issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-770
References: https://github.com/pallets/quart/commit/5e78c4169b8eb66b91ead3e62d44721b9e1644ee; https://github.com/pallets/quart/commit/abb04a512496206de279225340ed022852fbf51f; https://github.com/pallets/werkzeug/commit/50cfeebcb0727e18cc52ffbeb125f4a66551179b
CVE: CVE-2024-48218
Published: 2024-10-25
Description: Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/list.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/funadmin/funadmin/issues/21
CVE: CVE-2024-48222
Published: 2024-10-25
Description: Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/edit.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/funadmin/funadmin/issues/22
CVE: CVE-2024-48223
Published: 2024-10-25
Description: Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/fieldlist.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/funadmin/funadmin/issues/23
CVE: CVE-2024-48224
Published: 2024-10-25
Description: Funadmin v5.0.2 has an arbitrary file read vulnerability in /curd/index/editfile.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://github.com/funadmin/funadmin/issues/24
CVE: CVE-2024-48225
Published: 2024-10-25
Description: Funadmin v5.0.2 has an arbitrary file deletion vulnerability in /curd/index/delfile.
CVSS Score: 6.5 (MEDIUM)
References: https://github.com/funadmin/funadmin/issues/25
CVE: CVE-2024-48226
Published: 2024-10-25
Description: Funadmin 5.0.2 is vulnerable to SQL Injection in curd/table/savefield.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/funadmin/funadmin/issues/26
CVE: CVE-2024-48227
Published: 2024-10-25
Description: Funadmin 5.0.2 has a logical flaw in the Curd one click command deletion function, which can result in a Denial of Service (DOS).
CVSS Score: 4.9 (MEDIUM)
References: https://github.com/funadmin/funadmin/issues/27
CVE: CVE-2024-48229
Published: 2024-10-25
Description: funadmin 5.0.2 has a SQL injection vulnerability in the Curd one click command mode plugin.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/funadmin/funadmin/issues/28
CVE: CVE-2024-48230
Published: 2024-10-25
Description: funadmin 5.0.2 is vulnerable to SQL Injection via the parentField parameter in the index method of \backend\controller\auth\Auth.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/funadmin/funadmin/issues/30
CVE: CVE-2024-48232
Published: 2024-10-25
Description: An issue was found in mipjz 5.0.5. In the mipPost method of \app\setting\controller\ApiAdminTool.php, the value of the postAddress parameter is not processed and is directly passed into curl_exec execution and output, resulting in a Server-side request forgery (SSRF) vulnerability that can read server files.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-918
References: https://github.com/sansanyun/mipjz/issues/17
CVE: CVE-2024-48233
Published: 2024-10-25
Description: mipjz 5.0.5 is vulnerable to Cross Site Scripting (XSS) in \app\setting\controller\ApiAdminSetting.php via the ICP parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/sansanyun/mipjz/issues/16
CVE: CVE-2024-48396
Published: 2024-10-25
Description: AIML Chatbot 1.0 (fixed in 2.0) is vulnerable to Cross Site Scripting (XSS). The vulnerability is exploited through the message input field, where attackers can inject malicious HTML or JavaScript code. The chatbot fails to sanitize these inputs, leading to the execution of malicious scripts.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/sohelamin/chatbot; https://jacobmasse.medium.com/reflected-xss-in-popular-ai-chatbot-application-79de74ea0cc8
CVE: CVE-2024-48228
Published: 2024-10-25
Description: An issue was found in funadmin 5.0.2. The selectfiles method in \backend\controller\sys\Attachh.php directly stores the passed parameters and values into the param parameter without filtering, resulting in Cross Site Scripting (XSS).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/funadmin/funadmin/issues/31
CVE: CVE-2024-48234
Published: 2024-10-25
Description: An issue was discovered in mipjz 5.0.5. In the push method of app\tag\controller\ApiAdminTag.php the value of the postAddress parameter is not processed and is directly passed into curl_exec execution and output, resulting in Server-side request forgery (SSRF) vulnerability that can read server files.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-918
References: https://github.com/sansanyun/mipjz/issues/18
CVE: CVE-2024-48235
Published: 2024-10-25
Description: An issue in ofcms 1.1.2 allows a remote attacker to execute arbitrary code via the save method of the TemplateController.java file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-94
References: https://gitee.com/oufu/ofcms/issues/IASIES
CVE: CVE-2024-48236
Published: 2024-10-25
Description: An issue in ofcms 1.1.2 allows a remote attacker to execute arbitrary code via the FileOutputStream function in the write String method of the ofcms-admin\src\main\java\com\ofsoft\cms\core\uitle\FileUtils.java file
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-94
References: https://gitee.com/oufu/ofcms/issues/IASIBT
CVE: CVE-2024-48237
Published: 2024-10-25
Description: WTCMS 1.0 is vulnerable to Incorrect Access Control in \Common\Controller\HomebaseController.class.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-863
References: https://github.com/taosir/wtcms/issues/15
CVE: CVE-2024-48238
Published: 2024-10-25
Description: WTCMS 1.0 is vulnerable to SQL Injection in the edit_post method of /Admin\Controller\NavControl.class.php via the parentid parameter.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-89
References: https://github.com/taosir/wtcms/issues/14
CVE: CVE-2024-48239
Published: 2024-10-25
Description: An issue was discovered in WTCMS 1.0. In the plupload method in \AssetController.class.php, the app parameters aren't processed, resulting in Cross Site Scripting (XSS).
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/taosir/wtcms/issues/16
CVE: CVE-2024-47821
Published: 2024-10-25
Description: pyLoad is a free and open-source Download Manager. The folder `/.pyload/scripts` has scripts which are run when certain actions are completed, for e.g. a download is finished. By downloading a executable file to a folder in /scripts and performing the respective action, remote code execution can be achieved in versions prior to 0.5.0b3.dev87. A file can be downloaded to such a folder by changing the download folder to a folder in `/scripts` path and using the `/flashgot` API to download the file. This vulnerability allows an attacker with access to change the settings on a pyload server to execute arbitrary code and completely compromise the system. Version 0.5.0b3.dev87 fixes this issue.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-78
References: https://github.com/pyload/pyload/security/advisories/GHSA-w7hq-f2pj-c53g
CVE: CVE-2024-10091
Published: 2024-10-26
Description: The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Comparison Widget in all versions up to, and including, 3.2.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/elementskit-lite/tags/3.2.9/widgets/image-comparison/image-comparison.php#L657; https://www.wordfence.com/threat-intel/vulnerabilities/id/00b278af-6ce6-4e70-a83a-a1b035542cd4?source=cve
CVE: CVE-2024-9454
Published: 2024-10-26
Description: The PriPre plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 0.4.11 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/pripre/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/6662fee4-7e04-492f-bf79-2c915da92c92?source=cve
CVE: CVE-2024-9462
Published: 2024-10-26
Description: The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to Stored Cross-Site Scripting via poll settings in all versions up to, and including, 5.4.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/poll-maker/tags/5.4.6/includes/lists/class-poll-maker-polls-list-table.php#L244; https://plugins.trac.wordpress.org/browser/poll-maker/tags/5.4.6/includes/lists/class-poll-maker-polls-list-table.php#L255; https://plugins.trac.wordpress.org/browser/poll-maker/tags/5.4.6/includes/lists/class-poll-maker-polls-list-table.php#L362
CVE: CVE-2024-9475
Published: 2024-10-26
Description: The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to generic SQL Injection via the order_by parameter in all versions up to, and including, 5.4.6  due to insufficient escaping on the user-supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with administrator-level permissions and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/browser/poll-maker/tags/5.4.5/includes/lists/class-poll-maker-each-results-poll-list-table.php#L56; https://www.wordfence.com/threat-intel/vulnerabilities/id/8798e16d-84dd-40bb-b4ff-db800e850b0e?source=cve