deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-0237
Published: 2023-01-13
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
CVE: CVE-2021-46872
Published: 2023-01-13
Description: An issue was discovered in Nim before 1.6.2. The RST module of the Nim language stdlib, as used in NimForum and other products, permits the javascript: URI scheme and thus can lead to XSS in some applications. (Nim versions 1.6.2 and later are fixed; there may be backports of the fix to some earlier versions. NimForum 2.2.0 is fixed.)
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://forum.nim-lang.org/t/8852; https://github.com/nim-lang/Nim/commit/46275126b89218e64844eee169e8ced05dd0e2d7; https://github.com/nim-lang/Nim/compare/v1.6.0...v1.6.2
CVE: CVE-2022-3143
Published: 2023-01-13
Description: wildfly-elytron: possible timing attacks via use of unsafe comparator. A flaw was found in Wildfly-elytron. Wildfly-elytron uses java.util.Arrays.equals in several places, which is unsafe and vulnerable to timing attacks. To compare values securely, use java.security.MessageDigest.isEqual instead. This flaw allows an attacker to access secure information or impersonate an authed user.
CVSS Score: 7.4 (HIGH)
CWE: CWE-203, CWE-203
References: https://access.redhat.com/security/cve/CVE-2022-3143; https://access.redhat.com/security/cve/CVE-2022-3143
CVE: CVE-2022-3782
Published: 2023-01-13
Description: keycloak: path traversal via double URL encoding. A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect. An attacker can use this flaw to construct a malicious request to bypass validation and access other URLs and potentially sensitive information within the domain or possibly conduct further attacks. This flaw affects any client that utilizes a wildcard in the Valid Redirect URIs field.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22, CWE-22
References: https://access.redhat.com/security/cve/CVE-2022-3782; https://access.redhat.com/security/cve/CVE-2022-3782
CVE: CVE-2022-3841
Published: 2023-01-13
Description: RHACM: unauthenticated SSRF in console API endpoint. A Server-Side Request Forgery (SSRF) vulnerability was found in the console API endpoint from Red Hat Advanced Cluster Management for Kubernetes (RHACM). An attacker could take advantage of this as the console API endpoint is missing an authentication check, allowing unauthenticated users making requests.
CVSS Score: 7.8 (HIGH)
CWE: CWE-918, CWE-918
References: https://access.redhat.com/security/cve/CVE-2022-3841; https://access.redhat.com/security/cve/CVE-2022-3841
CVE: CVE-2022-42268
Published: 2023-01-13
Description: 
Omniverse Kit contains a vulnerability in the reference applications Create, Audio2Face, Isaac Sim, View, Code, and Machinima. These applications allow executable Python code to be embedded in Universal Scene Description (USD) files to customize all aspects of a scene. If a user opens a USD file that contains embedded Python code in one of these applications, the embedded Python code automatically runs with the privileges of the user who opened the file. As a result, an unprivileged remote attacker could craft a USD file containing malicious Python code and persuade a local user to open the file, which may lead to information disclosure, data tampering, and denial of service.


CVSS Score: 7.8 (HIGH)
CWE: CWE-74, CWE-94
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5418; https://nvidia.custhelp.com/app/answers/detail/a_id/5418
CVE: CVE-2023-0091
Published: 2023-01-13
Description: A flaw was found in Keycloak, where it did not properly check client tokens for possible revocation in its client credential flow. This flaw allows an attacker to access or modify potentially sensitive information.
CVSS Score: 3.8 (LOW)
CWE: CWE-863, CWE-863
References: https://access.redhat.com/security/cve/CVE-2023-0091; https://access.redhat.com/security/cve/CVE-2023-0091
CVE: CVE-2023-0105
Published: 2023-01-13
Description: A flaw was found in Keycloak. This flaw allows impersonation and lockout due to the email trust not being handled correctly in Keycloak. An attacker can shadow other users with the same email and lockout or impersonate them.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-287, CWE-287
References: https://access.redhat.com/security/cve/CVE-2023-0105; https://access.redhat.com/security/cve/CVE-2023-0105
CVE: CVE-2022-3693
Published: 2023-01-13
Description: Path Traversal vulnerability in Deytek Informatics FileOrbis File Management System allows Path Traversal.This issue affects FileOrbis File Management System: from unspecified before 10.6.3.


CVSS Score: 7.5 (HIGH)
CWE: CWE-35, CWE-22
References: https://www.usom.gov.tr/bildirim/tr-23-0021; https://www.usom.gov.tr/bildirim/tr-23-0021
CVE: CVE-2023-0281
Published: 2023-01-13
Description: A vulnerability was found in SourceCodester Online Flight Booking Management System. It has been rated as critical. Affected by this issue is some unknown functionality of the file judge_panel.php. The manipulation of the argument subevent_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-218276.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/qyhmsys/cve-list/blob/master/Online%20Flight%20Booking%20Management%20System%20judge_panel.md; https://vuldb.com/?ctiid.218276; https://vuldb.com/?id.218276
CVE: CVE-2023-0283
Published: 2023-01-13
Description: A vulnerability classified as critical has been found in SourceCodester Online Flight Booking Management System. This affects an unknown part of the file review_search.php of the component POST Parameter Handler. The manipulation of the argument txtsearch leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-218277 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/qyhmsys/cve-list/blob/master/Online%20Flight%20Booking%20Management%20System%20review_search.md; https://vuldb.com/?ctiid.218277; https://vuldb.com/?id.218277
CVE: CVE-2023-0287
Published: 2023-01-13
Description: A vulnerability was found in ityouknow favorites-web. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Comment Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-218294 is the identifier assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://gitee.com/ityouknow/favorites-web/issues/I684L9; https://vuldb.com/?ctiid.218294; https://vuldb.com/?id.218294
CVE: CVE-2023-22493
Published: 2023-01-13
Description: RSSHub is an open source RSS feed generator. RSSHub is vulnerable to Server-Side Request Forgery (SSRF) attacks. This vulnerability allows an attacker to send arbitrary HTTP requests from the server to other servers or resources on the network. An attacker can exploit this vulnerability by sending a request to the affected routes with a malicious URL. An attacker could also use this vulnerability to send requests to internal or any other servers or resources on the network, potentially gain access to sensitive information that would not normally be accessible and amplifying the impact of the attack. The patch for this issue can be found in commit a66cbcf. 
CVSS Score: 8.8 (HIGH)
CWE: CWE-918
References: https://github.com/DIYgod/RSSHub/commit/a66cbcf6eebc700bf97ab097f404f16ab415506a; https://github.com/DIYgod/RSSHub/pull/11588; https://github.com/DIYgod/RSSHub/security/advisories/GHSA-64wp-jh9p-5cg2
CVE: CVE-2023-0221
Published: 2023-01-13
Description: Product security bypass vulnerability in ACC prior to version 8.3.4 allows a locally logged-in attacker with administrator privileges to bypass the execution controls provided by ACC using the utilman program.

CVSS Score: 4.4 (MEDIUM)
CWE: CWE-269, CWE-269
References: https://kcm.trellix.com/corporate/index?page=content&id=SB10370; https://kcm.trellix.com/corporate/index?page=content&id=SB10370
CVE: CVE-2023-0288
Published: 2023-01-13
Description: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: http://seclists.org/fulldisclosure/2023/Mar/17; https://github.com/vim/vim/commit/232bdaaca98c34a99ffadf27bf6ee08be6cc8f6a; https://huntr.dev/bounties/550a0852-9be0-4abe-906c-f803b34e41d3
CVE: CVE-2023-0289
Published: 2023-01-13
Description: Cross-site Scripting (XSS) - Stored in GitHub repository craigk5n/webcalendar prior to master.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/craigk5n/webcalendar/commit/7906b4924c2dc3727c3540682f432ebbb93f810d; https://huntr.dev/bounties/b9584c87-60e8-4a03-9e79-5f1e2d595361; https://github.com/craigk5n/webcalendar/commit/7906b4924c2dc3727c3540682f432ebbb93f810d
CVE: CVE-2023-22494
Published: 2023-01-13
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-20018. Reason: This candidate is a reservation duplicate of CVE-2016-20018. Notes: All CVE users should reference CVE-2016-20018 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2009-10001
Published: 2023-01-13
Description: A vulnerability classified as problematic was found in jianlinwei cool-php-captcha up to 0.2. This vulnerability affects unknown code of the file example-form.php. The manipulation of the argument captcha with the input %3Cscript%3Ealert(1)%3C/script%3E leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.3 is able to address this issue. The name of the patch is c84fb6b153bebaf228feee0cbf50728d27ae3f80. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-218296.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/jianlinwei/cool-php-captcha/commit/c84fb6b153bebaf228feee0cbf50728d27ae3f80; https://github.com/jianlinwei/cool-php-captcha/issues/2; https://github.com/jianlinwei/cool-php-captcha/releases/tag/0.3
CVE: CVE-2009-10002
Published: 2023-01-13
Description: A vulnerability, which was classified as problematic, has been found in dpup fittr-flickr. This issue affects some unknown processing of the file fittr-flickr/features/easy-exif.js of the component EXIF Preview Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The identifier of the patch is 08875dd8a2e5d0d16568bb0d67cb4328062fccde. It is recommended to apply a patch to fix this issue. The identifier VDB-218297 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/dpup/fittr-flickr/commit/08875dd8a2e5d0d16568bb0d67cb4328062fccde; https://vuldb.com/?ctiid.218297; https://vuldb.com/?id.218297
CVE: CVE-2021-4312
Published: 2023-01-13
Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as problematic has been found in Th3-822 Rapidleech. This affects the function zip_go of the file classes/options/zip.php. The manipulation of the argument archive leads to cross site scripting. It is possible to initiate the attack remotely. The patch is named 885a87ea4ee5e14fa95801eca255604fb2e138c6. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218295. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79
References: https://github.com/Th3-822/rapidleech/commit/885a87ea4ee5e14fa95801eca255604fb2e138c6; https://vuldb.com/?ctiid.218295; https://vuldb.com/?id.218295
CVE: CVE-2022-48090
Published: 2023-01-13
Description: Tramyardg hotel-mgmt-system version 2022.4 is vulnerable to SQL Injection via /app/dao/CustomerDAO.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://github.com/tramyardg/hotel-mgmt-system/issues/21; https://github.com/tramyardg/hotel-mgmt-system/issues/21
CVE: CVE-2022-48091
Published: 2023-01-13
Description: Tramyardg hotel-mgmt-system version 2022.4 is vulnerable to Cross Site Scripting (XSS) via process_update_profile.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/tramyardg/hotel-mgmt-system/issues/22; https://github.com/tramyardg/hotel-mgmt-system/issues/22; https://github.com/tramyardg/hotel-mgmt-system/issues/22
CVE: CVE-2023-22489
Published: 2023-01-13
Description: Flarum is a discussion platform for websites. If the first post of a discussion is permanently deleted but the discussion stays visible, any actor who can view the discussion is able to create a new reply via the REST API, no matter the reply permission or lock status. This includes users that don't have a validated email. Guests cannot successfully create a reply because the API will fail with a 500 error when the user ID 0 is inserted into the database. This happens because when the first post of a discussion is permanently deleted, the `first_post_id` attribute of the discussion becomes `null` which causes access control to be skipped for all new replies. Flarum automatically makes discussions with zero comments invisible so an additional condition for this vulnerability is that the discussion must have at least one approved reply so that `discussions.comment_count` is still above zero after the post deletion. This can open the discussion to uncontrolled spam or just unintentional replies if users still had their tab open before the vulnerable discussion was locked and then post a reply when they shouldn't be able to. In combination with the email notification settings, this could also be used as a way to send unsolicited emails. Versions between `v1.3.0` and `v1.6.3` are impacted. The vulnerability has been fixed and published as flarum/core v1.6.3. All communities running Flarum should upgrade as soon as possible. There are no known workarounds.

CVSS Score: 3.5 (LOW)
CWE: CWE-862
References: https://github.com/flarum/framework/commit/12f14112a0ecd1484d97330b82beb2a145919015; https://github.com/flarum/framework/releases/tag/v1.6.3; https://github.com/flarum/framework/security/advisories/GHSA-hph3-hv3c-7725
CVE: CVE-2023-22491
Published: 2023-01-13
Description: Gatsby is a free and open source framework based on React that helps developers build websites and apps. The gatsby-transformer-remark plugin prior to versions 5.25.1 and 6.3.2 passes input through to the `gray-matter` npm package, which is vulnerable to JavaScript injection in its default configuration, unless input is sanitized.  The vulnerability is present in gatsby-transformer-remark when passing input in data mode (querying MarkdownRemark nodes via GraphQL).  Injected JavaScript executes in the context of the build server. To exploit this vulnerability untrusted/unsanitized input would need to be sourced by or added into a file processed by gatsby-transformer-remark. A patch has been introduced in `gatsby-transformer-remark@5.25.1` and `gatsby-transformer-remark@6.3.2` which mitigates the issue by disabling the `gray-matter` JavaScript Frontmatter engine. As a workaround, if an older version of `gatsby-transformer-remark` must be used, input passed into the plugin should be sanitized ahead of processing. It is encouraged for  projects to upgrade to the latest major release branch for all Gatsby plugins to ensure the latest security updates and bug fixes are received in a timely manner.
CVSS Score: 8.1 (HIGH)
CWE: CWE-20, CWE-89, CWE-79
References: https://github.com/gatsbyjs/gatsby/security/advisories/GHSA-7ch4-rr99-cqcw; https://github.com/gatsbyjs/gatsby/security/advisories/GHSA-7ch4-rr99-cqcw; https://github.com/gatsbyjs/gatsby/security/advisories/GHSA-7ch4-rr99-cqcw
CVE: CVE-2015-10040
Published: 2023-01-13
Description: A vulnerability was found in gitlearn. It has been declared as problematic. This vulnerability affects the function getGrade/getOutOf of the file scripts/config.sh of the component Escape Sequence Handler. The manipulation leads to injection. The attack can be initiated remotely. The patch is identified as 3faa5deaa509012069afe75cd03c21bda5050a64. It is recommended to apply a patch to fix this issue. VDB-218302 is the identifier assigned to this vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-74, CWE-116
References: https://github.com/mikeizbicki/gitlearn/commit/3faa5deaa509012069afe75cd03c21bda5050a64; https://github.com/mikeizbicki/gitlearn/pull/31; https://vuldb.com/?ctiid.218302
CVE: CVE-2015-10041
Published: 2023-01-13
Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in Dovgalyuk AIBattle. Affected is the function sendComments of the file site/procedures.php. The manipulation of the argument text leads to sql injection. The name of the patch is e3aa4d[PII_REDACTED]d41cbccf53909229f00381c9. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-218304. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/Dovgalyuk/AIBattle-disabled-/commit/e3aa4d[PII_REDACTED]d41cbccf53909229f00381c9; https://vuldb.com/?ctiid.218304; https://vuldb.com/?id.218304
CVE: CVE-2022-46946
Published: 2023-01-13
Description: Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_brand.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/Venus-XATBLab-YT/bug_report/blob/main/helmet-store-showroom-site/SQLi-2.md; https://github.com/Venus-XATBLab-YT/bug_report/blob/main/helmet-store-showroom-site/SQLi-2.md
CVE: CVE-2022-46947
Published: 2023-01-13
Description: Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_category.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/Venus-XATBLab-YT/bug_report/blob/main/helmet-store-showroom-site/SQLi-1.md; https://github.com/Venus-XATBLab-YT/bug_report/blob/main/helmet-store-showroom-site/SQLi-1.md
CVE: CVE-2022-46949
Published: 2023-01-13
Description: Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_helmet.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/Venus-XATBLab-YT/bug_report/blob/main/helmet-store-showroom-site/SQLi-3.md; https://github.com/Venus-XATBLab-YT/bug_report/blob/main/helmet-store-showroom-site/SQLi-3.md
CVE: CVE-2022-46950
Published: 2023-01-13
Description: Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=delete_window.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/Venus-XATBLab-YT/bug_report/blob/main/dynamic-transaction-queuing-system/SQLi-1.md; https://github.com/Venus-XATBLab-YT/bug_report/blob/main/dynamic-transaction-queuing-system/SQLi-1.md
CVE: CVE-2022-46951
Published: 2023-01-13
Description: Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=delete_uploads.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/Venus-XATBLab-YT/bug_report/blob/main/dynamic-transaction-queuing-system/SQLi-2.md; https://github.com/Venus-XATBLab-YT/bug_report/blob/main/dynamic-transaction-queuing-system/SQLi-2.md
CVE: CVE-2022-46952
Published: 2023-01-13
Description: Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=delete_user.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/Venus-XATBLab-YT/bug_report/blob/main/dynamic-transaction-queuing-system/SQLi-3.md; https://github.com/Venus-XATBLab-YT/bug_report/blob/main/dynamic-transaction-queuing-system/SQLi-3.md
CVE: CVE-2022-46953
Published: 2023-01-13
Description: Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=save_window.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/Venus-XATBLab-YT/bug_report/blob/main/dynamic-transaction-queuing-system/SQLi-4.md; https://github.com/Venus-XATBLab-YT/bug_report/blob/main/dynamic-transaction-queuing-system/SQLi-4.md
CVE: CVE-2022-46954
Published: 2023-01-13
Description: Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=delete_transaction.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://www.github.com; https://www.github.com
CVE: CVE-2022-46955
Published: 2023-01-13
Description: Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=save_queue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://www.github.com; https://www.github.com
CVE: CVE-2022-46956
Published: 2023-01-13
Description: Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/manage_user.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/Venus-XATBLab-YT/bug_report/blob/main/dynamic-transaction-queuing-system/SQLi-5.md; https://github.com/Venus-XATBLab-YT/bug_report/blob/main/dynamic-transaction-queuing-system/SQLi-5.md
CVE: CVE-2023-0293
Published: 2023-01-13
Description: The Mediamatic – Media Library Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on its AJAX actions in versions up to, and including, 2.8.1. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to change image categories, which it uses to arrange them in folder views.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/mediamatic/trunk/inc/sidebar.php?rev=2652957#L343; https://www.wordfence.com/threat-intel/vulnerabilities/id/e5c87ae0-9a53-4292-a4d3-05b3bdb37b71?source=cve; https://plugins.trac.wordpress.org/browser/mediamatic/trunk/inc/sidebar.php?rev=2652957#L343
CVE: CVE-2023-0294
Published: 2023-01-13
Description: The Mediamatic – Media Library Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.8.1. This is due to missing or incorrect nonce validation on its AJAX actions function. This makes it possible for unauthenticated attackers to change image categories used by the plugin, via forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/browser/mediamatic/trunk/inc/sidebar.php?rev=2652957#L343; https://www.wordfence.com/threat-intel/vulnerabilities/id/d81ed8d9-4a7a-4b75-aab4-8e4dbd554f32?source=cve; https://plugins.trac.wordpress.org/browser/mediamatic/trunk/inc/sidebar.php?rev=2652957#L343
CVE: CVE-2023-0295
Published: 2023-01-13
Description: The Launchpad plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several of its settings parameters in versions up to, and including, 1.0.13 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/launchpad-by-obox/tags/1.0.13/functions/settings.php#L542; https://www.wordfence.com/threat-intel/vulnerabilities/id/b8721c4d-d89b-4e97-af01-20327013cfb6?source=cve; https://plugins.trac.wordpress.org/browser/launchpad-by-obox/tags/1.0.13/functions/settings.php#L542