deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-4771
Published: 2023-11-16
Description: A Cross-Site scripting vulnerability has been found in CKSource CKEditor affecting versions 4.15.1 and earlier. An attacker could send malicious javascript code through the /ckeditor/samples/old/ajax.html file and retrieve an authorized user's information.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-vulnerability-cksource-ckeditor; https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-vulnerability-cksource-ckeditor
CVE: CVE-2023-44327
Published: 2023-11-16
Description: Adobe Bridge versions 13.0.4 (and earlier) and 14.0.0 (and earlier) are affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-824
References: https://helpx.adobe.com/security/products/bridge/apsb23-57.html; https://helpx.adobe.com/security/products/bridge/apsb23-57.html
CVE: CVE-2023-44328
Published: 2023-11-16
Description: Adobe Bridge versions 13.0.4 (and earlier) and 14.0.0 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/bridge/apsb23-57.html; https://helpx.adobe.com/security/products/bridge/apsb23-57.html
CVE: CVE-2023-44329
Published: 2023-11-16
Description: Adobe Bridge versions 13.0.4 (and earlier) and 14.0.0 (and earlier) are affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-824
References: https://helpx.adobe.com/security/products/bridge/apsb23-57.html; https://helpx.adobe.com/security/products/bridge/apsb23-57.html
CVE: CVE-2023-44330
Published: 2023-11-16
Description: Adobe Photoshop versions 24.7.1 (and earlier) and 25.0 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://helpx.adobe.com/security/products/photoshop/apsb23-56.html; https://helpx.adobe.com/security/products/photoshop/apsb23-56.html
CVE: CVE-2023-44331
Published: 2023-11-16
Description: Adobe Photoshop versions 24.7.1 (and earlier) and 25.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/photoshop/apsb23-56.html; https://helpx.adobe.com/security/products/photoshop/apsb23-56.html
CVE: CVE-2023-44332
Published: 2023-11-16
Description: Adobe Photoshop versions 24.7.1 (and earlier) and 25.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/photoshop/apsb23-56.html; https://helpx.adobe.com/security/products/photoshop/apsb23-56.html
CVE: CVE-2023-44333
Published: 2023-11-16
Description: Adobe Photoshop versions 24.7.1 (and earlier) and 25.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/photoshop/apsb23-56.html; https://helpx.adobe.com/security/products/photoshop/apsb23-56.html
CVE: CVE-2023-44334
Published: 2023-11-16
Description: Adobe Photoshop versions 24.7.1 (and earlier) and 25.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/photoshop/apsb23-56.html; https://helpx.adobe.com/security/products/photoshop/apsb23-56.html
CVE: CVE-2023-44335
Published: 2023-11-16
Description: Adobe Photoshop versions 24.7.1 (and earlier) and 25.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://helpx.adobe.com/security/products/photoshop/apsb23-56.html; https://helpx.adobe.com/security/products/photoshop/apsb23-56.html
CVE: CVE-2023-47040
Published: 2023-11-16
Description: Adobe Media Encoder version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/media-encoder/apsb23-63.html; https://helpx.adobe.com/security/products/media-encoder/apsb23-63.html
CVE: CVE-2023-47041
Published: 2023-11-16
Description: Adobe Media Encoder version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/media-encoder/apsb23-63.html; https://helpx.adobe.com/security/products/media-encoder/apsb23-63.html
CVE: CVE-2023-47042
Published: 2023-11-16
Description: Adobe Media Encoder version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://helpx.adobe.com/security/products/media-encoder/apsb23-63.html; https://helpx.adobe.com/security/products/media-encoder/apsb23-63.html
CVE: CVE-2023-47043
Published: 2023-11-16
Description: Adobe Media Encoder version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/media-encoder/apsb23-63.html; https://helpx.adobe.com/security/products/media-encoder/apsb23-63.html
CVE: CVE-2023-47044
Published: 2023-11-16
Description: Adobe Media Encoder version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-824
References: https://helpx.adobe.com/security/products/media-encoder/apsb23-63.html; https://helpx.adobe.com/security/products/media-encoder/apsb23-63.html
CVE: CVE-2023-6121
Published: 2023-11-16
Description: An out-of-bounds read vulnerability was found in the NVMe-oF/TCP subsystem in the Linux kernel. This issue may allow a remote attacker to send a crafted TCP packet, triggering a heap-based buffer overflow that results in kmalloc data being printed and potentially leaked to the kernel ring buffer (dmesg).
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://access.redhat.com/errata/RHSA-2024:2394; https://access.redhat.com/errata/RHSA-2024:2950; https://access.redhat.com/errata/RHSA-2024:3138
CVE: CVE-2023-26368
Published: 2023-11-16
Description: Adobe InCopy versions 18.5 (and earlier) and 17.4.2 (and earlier) are affected by are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/incopy/apsb23-60.html; https://helpx.adobe.com/security/products/incopy/apsb23-60.html
CVE: CVE-2023-47046
Published: 2023-11-16
Description: Adobe Audition version 24.0 (and earlier) and 23.6.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/audition/apsb23-64.html; https://helpx.adobe.com/security/products/audition/apsb23-64.html
CVE: CVE-2023-47047
Published: 2023-11-16
Description: Adobe Audition version 24.0 (and earlier) and 23.6.1 (and earlier) are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-824
References: https://helpx.adobe.com/security/products/audition/apsb23-64.html; https://helpx.adobe.com/security/products/audition/apsb23-64.html
CVE: CVE-2023-47048
Published: 2023-11-16
Description: Adobe Audition version 24.0 (and earlier) and 23.6.1 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/audition/apsb23-64.html; https://helpx.adobe.com/security/products/audition/apsb23-64.html
CVE: CVE-2023-47049
Published: 2023-11-16
Description: Adobe Audition version 24.0 (and earlier) and 23.6.1 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://helpx.adobe.com/security/products/audition/apsb23-64.html; https://helpx.adobe.com/security/products/audition/apsb23-64.html
CVE: CVE-2023-47050
Published: 2023-11-16
Description: Adobe Audition version 24.0 (and earlier) and 23.6.1 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/audition/apsb23-64.html; https://helpx.adobe.com/security/products/audition/apsb23-64.html
CVE: CVE-2023-47051
Published: 2023-11-16
Description: Adobe Audition version 24.0 (and earlier) and 23.6.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-122, CWE-787
References: https://helpx.adobe.com/security/products/audition/apsb23-64.html; https://helpx.adobe.com/security/products/audition/apsb23-64.html
CVE: CVE-2023-47052
Published: 2023-11-16
Description: Adobe Audition version 24.0 (and earlier) and 23.6.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/audition/apsb23-64.html; https://helpx.adobe.com/security/products/audition/apsb23-64.html
CVE: CVE-2023-47053
Published: 2023-11-16
Description: Adobe Audition version 24.0 (and earlier) and 23.6.1 (and earlier) are affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-824
References: https://helpx.adobe.com/security/products/audition/apsb23-64.html; https://helpx.adobe.com/security/products/audition/apsb23-64.html
CVE: CVE-2023-47054
Published: 2023-11-16
Description: Adobe Audition version 24.0 (and earlier) and 23.6.1 (and earlier) are affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-824
References: https://helpx.adobe.com/security/products/audition/apsb23-64.html; https://helpx.adobe.com/security/products/audition/apsb23-64.html
CVE: CVE-2023-6015
Published: 2023-11-16
Description: MLflow allowed arbitrary files to be PUT onto the server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://huntr.com/bounties/43e6fb72-676e-4670-a225-15d6836f65d3; https://huntr.com/bounties/43e6fb72-676e-4670-a225-15d6836f65d3
CVE: CVE-2023-6016
Published: 2023-11-16
Description: An attacker is able to gain remote code execution on a server hosting the H2O dashboard through it's POJO model import feature.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://huntr.com/bounties/83dd17ec-053e-453c-befb-7d6736bf1836; https://huntr.com/bounties/83dd17ec-053e-453c-befb-7d6736bf1836
CVE: CVE-2023-6018
Published: 2023-11-16
Description: An attacker can overwrite any file on the server hosting MLflow without any authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://huntr.com/bounties/7cf918b5-43f4-48c0-a371-4d963ce69b30; https://huntr.com/bounties/7cf918b5-43f4-48c0-a371-4d963ce69b30
CVE: CVE-2023-6023
Published: 2023-11-16
Description: An attacker can read any file on the filesystem on the server hosting ModelDB through an LFI in the artifact_path URL parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-29, CWE-22
References: https://huntr.com/bounties/644ab868-db6d-4685-ab35-1a897632d2ca; https://huntr.com/bounties/644ab868-db6d-4685-ab35-1a897632d2ca
CVE: CVE-2023-47055
Published: 2023-11-16
Description: Adobe Premiere Pro version 24.0 (and earlier) and 23.6 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/premiere_pro/apsb23-65.html; https://helpx.adobe.com/security/products/premiere_pro/apsb23-65.html
CVE: CVE-2023-47056
Published: 2023-11-16
Description: Adobe Premiere Pro version 24.0 (and earlier) and 23.6 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://helpx.adobe.com/security/products/premiere_pro/apsb23-65.html; https://helpx.adobe.com/security/products/premiere_pro/apsb23-65.html
CVE: CVE-2023-47057
Published: 2023-11-16
Description: Adobe Premiere Pro version 24.0 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://helpx.adobe.com/security/products/premiere_pro/apsb23-65.html; https://helpx.adobe.com/security/products/premiere_pro/apsb23-65.html
CVE: CVE-2023-47058
Published: 2023-11-16
Description: Adobe Premiere Pro version 24.0 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/premiere_pro/apsb23-65.html; https://helpx.adobe.com/security/products/premiere_pro/apsb23-65.html
CVE: CVE-2023-47059
Published: 2023-11-16
Description: Adobe Premiere Pro version 24.0 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/premiere_pro/apsb23-65.html; https://helpx.adobe.com/security/products/premiere_pro/apsb23-65.html
CVE: CVE-2023-47060
Published: 2023-11-16
Description: Adobe Premiere Pro version 24.0 (and earlier) and 23.6 (and earlier) are affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 3.3 (LOW)
CWE: CWE-824
References: https://helpx.adobe.com/security/products/premiere_pro/apsb23-65.html; https://helpx.adobe.com/security/products/premiere_pro/apsb23-65.html
CVE: CVE-2023-6013
Published: 2023-11-16
Description: H2O is vulnerable to stored XSS vulnerability which can lead to a Local File Include attack.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://huntr.com/bounties/9881569f-dc2a-437e-86b0-20d4b70ae7af; https://huntr.com/bounties/9881569f-dc2a-437e-86b0-20d4b70ae7af
CVE: CVE-2023-6017
Published: 2023-11-16
Description: H2O included a reference to an S3 bucket that no longer existed allowing an attacker to take over the S3 bucket URL.
CVSS Score: 7.1 (HIGH)
CWE: CWE-840
References: https://huntr.com/bounties/6a69952f-a1ba-4dee-9d8c-e87f52508b58; https://huntr.com/bounties/6a69952f-a1ba-4dee-9d8c-e87f52508b58
CVE: CVE-2023-6019
Published: 2023-11-16
Description: A command injection existed in Ray's cpu_profile URL parameter allowing attackers to execute os commands on the system running the ray dashboard remotely without authentication. The issue is fixed in version 2.8.1+. Ray maintainers' response can be found here: https://www.anyscale.com/blog/update-on-ray-cves-cve-2023-6019-cve-2023-6020-cve-2023-6021-cve-2023-48022-cve-2023-48023
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://huntr.com/bounties/d0290f3c-b302-4161-89f2-c13bb28b4cfe; https://huntr.com/bounties/d0290f3c-b302-4161-89f2-c13bb28b4cfe
CVE: CVE-2023-6021
Published: 2023-11-16
Description: LFI in Ray's log API endpoint allows attackers to read any file on the server without authentication. The issue is fixed in version 2.8.1+. Ray maintainers' response can be found here: https://www.anyscale.com/blog/update-on-ray-cves-cve-2023-6019-cve-2023-6020-cve-2023-6021-cve-2023-48022-cve-2023-48023
CVSS Score: 7.5 (HIGH)
CWE: CWE-29, CWE-22
References: https://huntr.com/bounties/5039c045-f986-4cbc-81ac-370fe4b0d3f8; https://huntr.com/bounties/5039c045-f986-4cbc-81ac-370fe4b0d3f8
CVE: CVE-2023-6022
Published: 2023-11-16
Description: Cross-Site Request Forgery (CSRF) in GitHub repository prefecthq/prefect prior to 2.16.5.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/prefecthq/prefect/commit/227dfcc7e3374c212a4bcd68b14e090b1c02d9d3; https://huntr.com/bounties/dab47d99-551c-4355-9ab1-c99cb90235af; https://github.com/prefecthq/prefect/commit/227dfcc7e3374c212a4bcd68b14e090b1c02d9d3
CVE: CVE-2023-6038
Published: 2023-11-16
Description: A Local File Inclusion (LFI) vulnerability exists in the h2o-3 REST API, allowing unauthenticated remote attackers to read arbitrary files on the server with the permissions of the user running the h2o-3 instance. This issue affects the default installation and does not require user interaction. The vulnerability can be exploited by making specific GET or POST requests to the ImportFiles and ParseSetup endpoints, respectively. This issue was identified in version 3.40.0.4 of h2o-3.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862, CWE-862
References: https://huntr.com/bounties/380fce33-fec5-49d9-a101-12c972125d8c; https://huntr.com/bounties/380fce33-fec5-49d9-a101-12c972125d8c
CVE: CVE-2023-47514
Published: 2023-11-16
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in lawrenceowen, gcubero, acunnningham, fmahmood Star CloudPRNT for WooCommerce plugin <= 2.0.3 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79, CWE-79
References: https://patchstack.com/database/vulnerability/star-cloudprnt-for-woocommerce/wordpress-star-cloudprnt-for-woocommerce-plugin-2-0-3-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/star-cloudprnt-for-woocommerce/wordpress-star-cloudprnt-for-woocommerce-plugin-2-0-3-cross-site-scripting-xss-vulnerability?_s_id=cve