deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-3743
Published: 2025-04-25
Description: The Upsell Funnel Builder for WooCommerce plugin for WordPress is vulnerable to order manipulation in all versions up to, and including, 3.0.0. This is due to the plugin allowing the additional product ID and discount field to be manipulated prior to processing via the 'add_offer_in_cart' function. This makes it possible for unauthenticated attackers to arbitrarily update the product associated with any order bump, and arbitrarily update the discount applied to any order bump item, when adding it to the cart.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-472
References: https://plugins.trac.wordpress.org/browser/upsell-order-bump-offer-for-woocommerce/tags/3.0.0/public/class-upsell-order-bump-offer-for-woocommerce-public.php#L1771; https://plugins.trac.wordpress.org/browser/upsell-order-bump-offer-for-woocommerce/tags/3.0.0/public/class-upsell-order-bump-offer-for-woocommerce-public.php#L1773; https://plugins.trac.wordpress.org/browser/upsell-order-bump-offer-for-woocommerce/tags/3.0.0/public/class-upsell-order-bump-offer-for-woocommerce-public.php#L1818
CVE: CVE-2025-3866
Published: 2025-04-25
Description: The Add Google +1 (Plus one) social share Button plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.0. This is due to missing or incorrect nonce validation on the google-plus-one-share-button page. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/add-google-plus-one-social-share-button/tags/1.0.0/gp_admin_page.php; https://wordpress.org/plugins/add-google-plus-one-social-share-button/; https://www.wordfence.com/threat-intel/vulnerabilities/id/190a3b11-c6ca-4666-8c7f-b22bb4a4961d?source=cve
CVE: CVE-2025-3867
Published: 2025-04-25
Description: The Ajax Comment Form CST plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2. This is due to missing or incorrect nonce validation via the 'acform_cst_settings' page. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/ajax-comment-form-cst/; https://www.wordfence.com/threat-intel/vulnerabilities/id/2a001b31-042d-451b-ad9e-df8d41d3c2b0?source=cve
CVE: CVE-2025-3868
Published: 2025-04-25
Description: The Custom Admin-Bar Favorites plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'menuObject' parameter in all versions up to, and including, 0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/abundatrade-plugin/tags/1.8.02/abundatrade_pugin.php; https://wordpress.org/plugins/admin-bookmarks/; https://www.wordfence.com/threat-intel/vulnerabilities/id/417fb507-a414-4bc2-ab01-d6f2fc554350?source=cve
CVE: CVE-2025-46616
Published: 2025-04-25
Description: Quantum StorNext Web GUI API before 7.2.4 allows potential Arbitrary Remote Code Execution (RCE) via upload of a file. This affects StorNext RYO before 7.2.4, StorNext Xcellis Workflow Director before 7.2.4, and ActiveScale Cold Storage.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-434
References: https://www.quantum.com/en/service-support/security-bulletins/stornext-gui-multiple-security-vulnerabilities-stornext-gui-multiple-security-vulnerabilities/
CVE: CVE-2025-46617
Published: 2025-04-25
Description: Quantum StorNext Web GUI API before 7.2.4 grants access to internal StorNext configuration and unauthorized modification of some software configuration parameters via undocumented user credentials. This affects StorNext RYO before 7.2.4, StorNext Xcellis Workflow Director before 7.2.4, and ActiveScale Cold Storage.
CVSS Score: 7.2 (HIGH)
CWE: CWE-798
References: https://www.quantum.com/en/service-support/security-bulletins/stornext-gui-multiple-security-vulnerabilities-stornext-gui-multiple-security-vulnerabilities/
CVE: CVE-2025-46482
Published: 2025-04-25
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MyThemeShop WP Quiz wp-quiz allows Stored XSS.This issue affects WP Quiz: from n/a through <= 2.0.10.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/wp-quiz/vulnerability/wordpress-wp-quiz-plugin-2-0-10-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-46535
Published: 2025-04-25
Description: Missing Authorization vulnerability in AlphaEfficiencyTeam Custom Login and Registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Custom Login and Registration: from n/a through 1.0.0.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/wordpress/plugin/ms-registration/vulnerability/wordpress-custom-login-and-registration-plugin-1-0-0-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2025-1279
Published: 2025-04-25
Description: The BM Content Builder plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the ux_cb_tools_import_item_ajax AJAX action in all versions up to, and including, 3.16.2.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: https://themeforest.net/item/art-simple-clean-wordpress-theme-for-creatives/20170299; https://www.wordfence.com/threat-intel/vulnerabilities/id/e4632899-c3bf-48f3-8a69-8fa32bfd902d?source=cve
CVE: CVE-2025-3870
Published: 2025-04-25
Description: The 1 Decembrie 1918 plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.dec.2012. This is due to missing or incorrect nonce validation on the 1-decembrie-1918/1-decembrie-1918.php page. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/1-decembrie-1918/tags/1.dec.1918/1-decembrie-1918.php; https://wordpress.org/plugins/1-decembrie-1918/; https://www.wordfence.com/threat-intel/vulnerabilities/id/73f7646f-f01f-4f57-836c-e0bd04764ba9?source=cve
CVE: CVE-2025-1565
Published: 2025-04-25
Description: The Mayosis Core plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 5.4.1 via the library/wave-audio/peaks/remote_dl.php file. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://themeforest.net/item/mayosis-digital-marketplace-theme/20210200; https://www.wordfence.com/threat-intel/vulnerabilities/id/b967eb98-69f8-41c5-a19a-9d20979accb0?source=cve
CVE: CVE-2024-11917
Published: 2025-04-25
Description: The JobSearch WP Job Board plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.9.2. This is due to improper configurations in the 'jobsearch_xing_response_data_callback', 'set_access_tokes', and 'google_callback' functions. This makes it possible for unauthenticated attackers to log in as the first connected Xing user, or any connected Xing user if the Xing id is known. It is also possible for unauthenticated attackers to log in as the first connected Google user if the user has logged in, without subsequently logging out, in thirty days. The vulnerability was partially patched in version 2.8.4.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287
References: https://codecanyon.net/item/jobsearch-wp-job-board-wordpress-plugin/21066856; https://www.wordfence.com/threat-intel/vulnerabilities/id/6de8a608-8715-4f9c-9f2f-df60dd1cc579?source=cve
CVE: CVE-2025-2470
Published: 2025-04-25
Description: The Service Finder Bookings plugin for WordPress, used by the Service Finder - Directory and Job Board WordPress Theme, is vulnerable to privilege escalation in all versions up to, and including, 5.1. This is due to a lack of restriction on user role in the 'nsl_registration_store_extra_input' function. This makes it possible for unauthenticated attackers to register an account on the site with an arbitrary role, including Administrator, when registering via a social login. The Nextend Social Login plugin must be installed and configured to exploit the vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-266
References: https://themeforest.net/item/service-finder-service-and-business-listing-wordpress-theme/15208793; https://www.wordfence.com/threat-intel/vulnerabilities/id/a1f62cda-262b-46d9-a839-0a573813cfa1?source=cve
CVE: CVE-2025-2986
Published: 2025-04-25
Description: IBM Maximo Asset Management 7.6.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://www.ibm.com/support/pages/node/7231785
CVE: CVE-2025-3912
Published: 2025-04-25
Description: The WS Form LITE – Drag & Drop Contact Form Builder for WordPress plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'get_config' function in all versions up to, and including, 1.10.35. This makes it possible for unauthenticated attackers to read the value of the plugin's settings, including API keys for integrated services.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/ws-form/trunk/api/class-ws-form-api.php; https://plugins.trac.wordpress.org/browser/ws-form/trunk/includes/class-ws-form-common.php; https://plugins.trac.wordpress.org/browser/ws-form/trunk/includes/class-ws-form-config.php
CVE: CVE-2024-6198
Published: 2025-04-25
Description: The device exposes a web interface on ports TCP/3030 and TCP/9882. This web service runs lighttpd, which implements the “SNORE” interface. This interface is affected by a stack buffer overflow vulnerability due to insecure path parsing. An attacker
with access to the LAN network interface could use a specially crafted HTTP request to exploit a buffer overflow on the modem.
CWE: CWE-120
References: https://www.onekey.com/resource/security-advisory-rce-on-viasat-modems-cve-2024-6198
CVE: CVE-2024-6199
Published: 2025-04-25
Description: An unauthenticated attacker on the WAN interface, with the ability to intercept Dynamic DNS (DDNS) traffic between DDNS services and the modem, could manipulate specific responses to include code that forces a buffer overflow on the modem.

Customers that have not enabled Dynamic DNS on their modem are not vulnerable.
CWE: CWE-120
References: https://www.onekey.com/resource/security-advisory-rce-on-viasat-modems-cve-2024-6199
CVE: CVE-2024-57375
Published: 2025-04-25
Description: Andamiro Pump It Up 20th Anniversary (aka Double X or XX/2019) 1.00.0-2.08.3 allows a physically proximate attacker to cause a denial of service (application crash) via certain deselect actions.
CVSS Score: 2.4 (LOW)
References: https://www.youtube.com/watch?v=DXrnQpTlQs0; https://xx.piugame.com/bbs/board.php?bo_table=global_notice&wr_id=368
CVE: CVE-2025-28354
Published: 2025-04-25
Description: An issue in the Printer Manager Systm of Entrust Corp Printer Manager D3.18.4-3 and below allows attackers to execute a directory traversal via a crafted POST request.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://gist.github.com/VAMorales/ef13d4edc14750f689e16c9e4922becb; https://www.entrust.com/sites/default/files/documentation/productsupport/entrust-security-bulletin-e25-002.pdf
CVE: CVE-2025-3634
Published: 2025-04-25
Description: A security vulnerability was discovered in Moodle that allows students to enroll themselves in courses without completing all the necessary safety checks. Specifically, users can sign up for courses prematurely, even if they haven't finished two-step verification processes.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-287
References: https://access.redhat.com/security/cve/CVE-2025-3634; https://bugzilla.redhat.com/show_bug.cgi?id=2359707
CVE: CVE-2025-28076
Published: 2025-04-25
Description: Multiple SQL injection vulnerabilities in EasyVirt DCScope <= 8.6.4 and CO2Scope <= 1.3.4 allows remote authenticated attackers to execute arbitrary SQL commands via the (1) timeago, (2) user, (3) filter, (4) target, (5) p1, (6) p2, (7) p3, (8) p4, (9) p5, (10) p6, (11) p7, (12) p8, (13) p9, (14) p10, (15) p11, (16) p12, (17) p13, (18) p14, (19) p15, (20) p16, (21) p17, (22) p18, (23) p19, or (24) p20 parameter to /api/management/updateihmsettings; the (25) ID, (26) NAME, (27) CPUTHREADNB, (28) RAMCAP, or (29) DISKCAP parameter to /api/capaplan/savetemplates.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/Elymaro/CVE/blob/main/EasyVirt/CVE-2025-28076.md; https://www.easyvirt.com/
CVE: CVE-2025-32044
Published: 2025-04-25
Description: A flaw has been identified in Moodle where, on certain sites, unauthenticated users could retrieve sensitive user data—including names, contact information, and hashed passwords—via stack traces returned by specific API calls. Sites with PHP configured with zend.exception_ignore_args = 1 in the php.ini file are not affected by this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://access.redhat.com/security/cve/CVE-2025-32044; https://bugzilla.redhat.com/show_bug.cgi?id=2356829
CVE: CVE-2025-32045
Published: 2025-04-25
Description: A flaw has been identified in Moodle where insufficient capability checks in certain grade reports allowed users without the necessary permissions to access hidden grades.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://access.redhat.com/security/cve/CVE-2025-32045; https://bugzilla.redhat.com/show_bug.cgi?id=2356835
CVE: CVE-2025-32432
Published: 2025-04-25
Description: Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. Starting from version 3.0.0-RC1 to before 3.9.15, 4.0.0-RC1 to before 4.14.15, and 5.0.0-RC1 to before 5.6.17, Craft is vulnerable to remote code execution. This is a high-impact, low-complexity attack vector. This issue has been patched in versions 3.9.15, 4.14.15, and 5.6.17, and is an additional fix for CVE-2023-41892.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-94
References: https://github.com/craftcms/cms/blob/3.x/CHANGELOG.md#3915---2025-04-10-critical; https://github.com/craftcms/cms/blob/4.x/CHANGELOG.md#41415---2025-04-10-critical; https://github.com/craftcms/cms/blob/5.x/CHANGELOG.md#5617---2025-04-10-critical
CVE: CVE-2025-3625
Published: 2025-04-25
Description: A security vulnerability was discovered in Moodle that can allow hackers to gain access to sensitive information about students and prevent them from logging into their accounts, even after they had completed two-factor authentication (2FA).
CVSS Score: 7.1 (HIGH)
CWE: CWE-639
References: https://access.redhat.com/security/cve/CVE-2025-3625; https://bugzilla.redhat.com/show_bug.cgi?id=2359690
CVE: CVE-2025-3627
Published: 2025-04-25
Description: A security vulnerability was discovered in Moodle that allows some users to access sensitive information about other students before they finish verifying their identities using two-factor authentication (2FA).
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-287
References: https://access.redhat.com/security/cve/CVE-2025-3627; https://bugzilla.redhat.com/show_bug.cgi?id=2359692
CVE: CVE-2025-3628
Published: 2025-04-25
Description: A flaw has was found in Moodle where anonymous assignment submissions can be de-anonymized via search, revealing student identities.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://access.redhat.com/security/cve/CVE-2025-3628; https://bugzilla.redhat.com/show_bug.cgi?id=2359706
CVE: CVE-2025-3635
Published: 2025-04-25
Description: A security vulnerability was discovered in Moodle that allows anyone to duplicate existing tours without needing to log in due to a lack of protection against cross-site request forgery (CSRF) attacks.
CVSS Score: 3.5 (LOW)
CWE: CWE-352
References: https://access.redhat.com/security/cve/CVE-2025-3635; https://bugzilla.redhat.com/show_bug.cgi?id=2359709
CVE: CVE-2025-3636
Published: 2025-04-25
Description: A flaw was found in Moodle. This vulnerability allows unauthorized users to access and view RSS feeds due to insufficient capability checks.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84499; https://access.redhat.com/security/cve/CVE-2025-3636; https://bugzilla.redhat.com/show_bug.cgi?id=2359726
CVE: CVE-2025-3637
Published: 2025-04-25
Description: A security vulnerability was found in Moodle where confidential information that prevents cross-site request forgery (CSRF) attacks was shared publicly through the site's URL. This vulnerability occurred specifically on two types of pages within the mod_data module: edit and delete pages.
CVSS Score: 3.1 (LOW)
CWE: CWE-598
References: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-65356; https://access.redhat.com/security/cve/CVE-2025-3637; https://bugzilla.redhat.com/show_bug.cgi?id=2359727
CVE: CVE-2025-3638
Published: 2025-04-25
Description: A flaw was found in Moodle. The analysis request action in the Brickfield tool did not include the necessary token to prevent a Cross-site request forgery (CSRF) risk.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://access.redhat.com/security/cve/CVE-2025-3638; https://bugzilla.redhat.com/show_bug.cgi?id=2359732; https://moodle.org/mod/forum/discuss.php?d=467600
CVE: CVE-2025-3640
Published: 2025-04-25
Description: A flaw was found in Moodle. Insufficient capability checks made it possible for a user enrolled in a course to access some details, such as the full name and profile image URL, of other users they did not have permission to access.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: https://access.redhat.com/security/cve/CVE-2025-3640; https://bugzilla.redhat.com/show_bug.cgi?id=2359734; https://moodle.org/mod/forum/discuss.php?d=467601
CVE: CVE-2025-3641
Published: 2025-04-25
Description: A flaw was found in Moodle. A remote code execution risk was identified in the Moodle LMS Dropbox repository. By default, this was only available to teachers and managers on sites with the Dropbox repository enabled.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://access.redhat.com/security/cve/CVE-2025-3641; https://bugzilla.redhat.com/show_bug.cgi?id=2359735; https://moodle.org/mod/forum/discuss.php?d=467602
CVE: CVE-2025-3642
Published: 2025-04-25
Description: A flaw was found in Moodle. A remote code execution risk was identified in the Moodle LMS EQUELLA repository. By default, this was only available to teachers and managers on sites with the EQUELLA repository enabled.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://access.redhat.com/security/cve/CVE-2025-3642; https://bugzilla.redhat.com/show_bug.cgi?id=2359738; https://moodle.org/mod/forum/discuss.php?d=467603
CVE: CVE-2025-3643
Published: 2025-04-25
Description: A flaw was found in Moodle. The return URL in the policy tool required additional sanitizing to prevent a reflected Cross-site scripting (XSS) risk.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://access.redhat.com/security/cve/CVE-2025-3643; https://bugzilla.redhat.com/show_bug.cgi?id=2359742; https://moodle.org/mod/forum/discuss.php?d=467604
CVE: CVE-2025-3644
Published: 2025-04-25
Description: A flaw was found in Moodle. Additional checks were required to prevent users from deleting course sections they did not have permission to modify.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: https://access.redhat.com/security/cve/CVE-2025-3644; https://bugzilla.redhat.com/show_bug.cgi?id=2359745; https://moodle.org/mod/forum/discuss.php?d=467605
CVE: CVE-2025-3645
Published: 2025-04-25
Description: A flaw was found in Moodle. Insufficient capability checks in a messaging web service allowed users to view other users' names and online statuses.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: https://access.redhat.com/security/cve/CVE-2025-3645; https://bugzilla.redhat.com/show_bug.cgi?id=2359761; https://moodle.org/mod/forum/discuss.php?d=467606
CVE: CVE-2025-3647
Published: 2025-04-25
Description: A flaw was discovered in Moodle. Additional checks were required to ensure that users can only access cohort data they are authorized to retrieve.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: https://access.redhat.com/security/cve/CVE-2025-3647; https://bugzilla.redhat.com/show_bug.cgi?id=2359762; https://moodle.org/mod/forum/discuss.php?d=467607
CVE: CVE-2025-43016
Published: 2025-04-25
Description: In JetBrains Rider before 2025.1.2 custom archive unpacker allowed arbitrary file overwrite during remote debug session
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-23
References: https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2025-43862
Published: 2025-04-25
Description: Dify is an open-source LLM app development platform. Prior to version 0.6.12, a normal user is able to access and modify APP orchestration, even though the web UI of APP orchestration is not presented for a normal user. This access control flaw allows non-admin users to make unauthorized access and changes on the APPSs. This issue has been patched in version 0.6.12. A workaround for this vulnerability involves updating the the access control mechanisms to enforce stricter user role permissions and implementing role-based access controls (RBAC) to ensure that only users with admin privileges can access Orchestration of the APPs.
CVSS Score: 7.6 (HIGH)
CWE: CWE-284, CWE-862
References: https://github.com/langgenius/dify/pull/5266; https://github.com/langgenius/dify/security/advisories/GHSA-6pw4-jqhv-3626
CVE: CVE-2025-46432
Published: 2025-04-25
Description: In JetBrains TeamCity before 2025.03.1 base64-encoded credentials could be exposed in build logs
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-532
References: https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2025-46433
Published: 2025-04-25
Description: In JetBrains TeamCity before 2025.03.1 improper path validation in loggingPreset parameter was possible
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-23, CWE-22
References: https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2025-46618
Published: 2025-04-25
Description: In JetBrains TeamCity before 2025.03.1 stored XSS was possible on Data Directory tab
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://www.jetbrains.com/privacy-security/issues-fixed/
CVE: CVE-2024-56156
Published: 2025-04-25
Description: Halo is an open source website building tool. Prior to version 2.20.13, a vulnerability in Halo allows attackers to bypass file type validation controls. This bypass enables the upload of malicious files including executables and HTML files, which can lead to stored cross-site scripting attacks and potential remote code execution under certain circumstances. This issue has been patched in version 2.20.13.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-79
References: https://github.com/halo-dev/halo/commit/24f8d7b57127e2607ec05adb7c912b3decddeb99; https://github.com/halo-dev/halo/pull/7149; https://github.com/halo-dev/halo/security/advisories/GHSA-99mc-ch53-pqh9