deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-46854
Published: 2023-10-28
Description: Proxmox proxmox-widget-toolkit before 4.0.9, as used in multiple Proxmox products, allows XSS via the edit notes feature.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://git.proxmox.com/?p=proxmox-widget-toolkit.git%3Ba=commit%3Bh=1326f771b959e576d140da2249c8b5424da6c80d; https://git.proxmox.com/?p=proxmox-widget-toolkit.git%3Ba=commit%3Bh=89699c6466cfd9cc3a81fbc926b62f122c33c23c; https://pve.proxmox.com/wiki/Package_Repositories#sysadmin_test_repo
CVE: CVE-2023-5836
Published: 2023-10-28
Description: A vulnerability was found in SourceCodester Task Reminder System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file classes/Users.php?f=delete. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The identifier of this vulnerability is VDB-243800.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://vuldb.com/?ctiid.243800; https://vuldb.com/?id.243800; https://vuldb.com/?ctiid.243800
CVE: CVE-2023-5837
Published: 2023-10-28
Description: A vulnerability classified as problematic was found in AlexanderLivanov FotosCMS2 up to 2.4.3. This vulnerability affects unknown code of the file profile.php of the component Cookie Handler. The manipulation of the argument username leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-243802 is the identifier assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/AlexanderLivanov/FotosCMS2/issues/18; https://vuldb.com/?ctiid.243802; https://vuldb.com/?id.243802
CVE: CVE-2023-40686
Published: 2023-10-29
Description: Management Central as part of IBM i 7.2, 7.3, 7.4, and 7.5 Navigator contains a local privilege escalation vulnerability.  A malicious actor with command line access to the operating system can exploit this vulnerability to elevate privileges to gain component access to the operating system.  IBM X-Force ID:  264114.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-269, CWE-269
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/264114; https://www.ibm.com/support/pages/node/7060686; https://exchange.xforce.ibmcloud.com/vulnerabilities/264114
CVE: CVE-2023-43041
Published: 2023-10-29
Description: IBM QRadar SIEM 7.5 is vulnerable to information exposure allowing a delegated Admin tenant user with a specific domain security profile assigned to see data from other domains.  This vulnerability is due to an incomplete fix for CVE-2022-34352.  IBM X-Force ID:  266808.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/266808; https://www.ibm.com/support/pages/node/7060803; https://exchange.xforce.ibmcloud.com/vulnerabilities/266808
CVE: CVE-2023-46858
Published: 2023-10-29
Description: Moodle 4.3 allows /grade/report/grader/index.php?searchvalue= reflected XSS when logged in as a teacher. NOTE: the Moodle Security FAQ link states "Some forms of rich content [are] used by teachers to enhance their courses ... admins and teachers can post XSS-capable content, but students can not."
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://docs.moodle.org/403/en/Security_FAQ#I_have_discovered_Cross_Site_Scripting_.28XSS.29_is_possible_with_Moodle; https://gist.github.com/Abid-Ahmad/12d2b4878eb731e8871b96b7d55125cd; https://packetstormsecurity.com/files/175277/Moodle-4.3-Cross-Site-Scripting.html
CVE: CVE-2023-5838
Published: 2023-10-29
Description: Insufficient Session Expiration in GitHub repository linkstackorg/linkstack prior to v4.2.9.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-613
References: https://github.com/linkstackorg/linkstack/commit/02f620092255f07e1d0252a0190fd42ef773ba05; https://huntr.com/bounties/8f6feca3-386d-4897-801c-39b9e3e5eb03; https://github.com/linkstackorg/linkstack/commit/02f620092255f07e1d0252a0190fd42ef773ba05
CVE: CVE-2023-5839
Published: 2023-10-29
Description: Privilege Chaining in GitHub repository hestiacp/hestiacp prior to 1.8.9.
CVSS Score: 7.8 (HIGH)
CWE: CWE-268
References: https://github.com/hestiacp/hestiacp/commit/acb766e1db53de70534524b3fbc[PII_REDACTED]630; https://huntr.com/bounties/21125f12-64a0-42a3-b218-26b9945a5bc0; https://github.com/hestiacp/hestiacp/commit/acb766e1db53de70534524b3fbc[PII_REDACTED]630
CVE: CVE-2023-5840
Published: 2023-10-29
Description: Weak Password Recovery Mechanism for Forgotten Password in GitHub repository linkstackorg/linkstack prior to v4.2.9.
CVSS Score: 8.8 (HIGH)
CWE: CWE-640
References: https://github.com/linkstackorg/linkstack/commit/fe7b99eae88f9e4c4cd4b00bab372cbf4b584b16; https://huntr.com/bounties/8042d8c3-650e-4c0d-9146-d9ccf6082b30; https://github.com/linkstackorg/linkstack/commit/fe7b99eae88f9e4c4cd4b00bab372cbf4b584b16
CVE: CVE-2023-40685
Published: 2023-10-29
Description: Management Central as part of IBM i 7.2, 7.3, 7.4, and 7.5 Navigator contains a local privilege escalation vulnerability.  A malicious actor with command line access to the operating system can exploit this vulnerability to elevate privileges to gain root access to the operating system.  IBM X-Force ID:  264116.
CVSS Score: 7.4 (HIGH)
CWE: CWE-269, CWE-269
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/264116; https://www.ibm.com/support/pages/node/7060686; https://exchange.xforce.ibmcloud.com/vulnerabilities/264116
CVE: CVE-2023-46862
Published: 2023-10-29
Description: An issue was discovered in the Linux kernel through 6.5.9. During a race with SQ thread exit, an io_uring/fdinfo.c io_uring_show_fdinfo NULL pointer dereference can occur.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-476
References: https://bugzilla.kernel.org/show_bug.cgi?id=218032#c4; https://github.com/torvalds/linux/commit/7644b1a1c9a7ae8ab99175989bfc8676055edb46; https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html
CVE: CVE-2021-33634
Published: 2023-10-29
Description: iSulad uses the lcr+lxc runtime (default) to run malicious images, which can cause DOS.


CVSS Score: 6.3 (MEDIUM)
CWE: CWE-665
References: https://gitee.com/src-openeuler/lcr/pulls/251/files; https://gitee.com/src-openeuler/lcr/pulls/257/files; https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1692
CVE: CVE-2021-33635
Published: 2023-10-29
Description: When malicious images are pulled by isula pull, attackers can execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-665, CWE-94
References: https://gitee.com/src-openeuler/iSulad/pulls/600/files; https://gitee.com/src-openeuler/iSulad/pulls/627/files; https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2023-1686
CVE: CVE-2021-33636
Published: 2023-10-29
Description: 
When the isula load command is used to load malicious images, attackers can execute arbitrary code.


CVSS Score: 8.4 (HIGH)
CWE: CWE-665, CWE-94
References: https://gitee.com/src-openeuler/iSulad/pulls/600/files; https://gitee.com/src-openeuler/iSulad/pulls/627/files; https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2023-1686
CVE: CVE-2021-33637
Published: 2023-10-29
Description: 
When the isula export command is used to export a container to an image and the container is controlled by an attacker, the attacker can escape the container.


CVSS Score: 8.4 (HIGH)
CWE: CWE-665
References: https://gitee.com/src-openeuler/iSulad/pulls/600/files; https://gitee.com/src-openeuler/iSulad/pulls/627/files; https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2023-1686
CVE: CVE-2021-33638
Published: 2023-10-29
Description: 
When the isula cp command is used to copy files from a container to a host machine and the container is controlled by an attacker, the attacker can escape the container.


CVSS Score: 8.4 (HIGH)
CWE: CWE-665
References: https://gitee.com/src-openeuler/iSulad/pulls/600/files; https://gitee.com/src-openeuler/iSulad/pulls/627/files; https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2023-1686
CVE: CVE-2005-10002
Published: 2023-10-29
Description: A vulnerability, which was classified as critical, was found in almosteffortless secure-files Plugin up to 1.1 on WordPress. Affected is the function sf_downloads of the file secure-files.php. The manipulation of the argument downloadfile leads to path traversal. Upgrading to version 1.2 is able to address this issue. The name of the patch is cab025e5fc2bcdad8032d833ebc38e6bd2a13c92. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-243804.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/wp-plugins/secure-files/commit/cab025e5fc2bcdad8032d833ebc38e6bd2a13c92; https://vuldb.com/?ctiid.243804; https://vuldb.com/?id.243804
CVE: CVE-2007-10003
Published: 2023-10-29
Description: A vulnerability, which was classified as critical, has been found in The Hackers Diet Plugin up to 0.9.6b on WordPress. This issue affects some unknown processing of the file ajax_blurb.php of the component HTTP POST Request Handler. The manipulation of the argument user leads to sql injection. The attack may be initiated remotely. Upgrading to version 0.9.7b is able to address this issue. The patch is named 7dd8acf7cd[PII_REDACTED][PII_REDACTED]25d363b694. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-243803.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/wp-plugins/the-hackers-diet/commit/7dd8acf7cd[PII_REDACTED][PII_REDACTED]25d363b694; https://github.com/wp-plugins/the-hackers-diet/releases/tag/0.9.7b; https://vuldb.com/?ctiid.243803
CVE: CVE-2023-44002
Published: 2023-10-30
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2023-46863
Published: 2023-10-30
Description: Peppermint Ticket Management before 0.2.4 allows remote attackers to read arbitrary files via a /api/v1/users/file/download?filepath=./../ POST request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/Peppermint-Lab/peppermint/issues/108; https://github.com/Peppermint-Lab/peppermint/issues/108
CVE: CVE-2023-46864
Published: 2023-10-30
Description: Peppermint Ticket Management through 0.2.4 allows remote attackers to read arbitrary files via a /api/v1/ticket/1/file/download?filepath=../ POST request.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/Peppermint-Lab/peppermint/issues/171; https://github.com/Peppermint-Lab/peppermint/issues/171
CVE: CVE-2023-4393
Published: 2023-10-30
Description: HTML and SMTP injections on the registration page of LiquidFiles versions 3.7.13 and below, allow an attacker to perform more advanced phishing attacks against an organization.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-116, CWE-147, CWE-74, CWE-79
References: https://www.themissinglink.com.au/security-advisories/cve-2023-4393; https://www.themissinglink.com.au/security-advisories/cve-2023-4393
CVE: CVE-2023-46865
Published: 2023-10-30
Description: /api/v1/company/upload-logo in CompanyController.php in crater through 6.0.6 allows a superadmin to execute arbitrary PHP code by placing this code into an image/png IDAT chunk of a Company Logo image.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://github.com/asylumdx/Crater-CVE-2023-46865-RCE; https://github.com/crater-invoice/crater/issues/1267; https://github.com/crater-invoice/crater/pull/1271
CVE: CVE-2023-5842
Published: 2023-10-30
Description: Cross-site Scripting (XSS) - Stored in GitHub repository dolibarr/dolibarr prior to 16.0.5.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/dolibarr/dolibarr/commit/f569048eb2bd823525bce4ef52316e7a83e3345c; https://huntr.com/bounties/aed81114-5952-46f5-ae3a-e66518e98ba3; https://github.com/dolibarr/dolibarr/commit/f569048eb2bd823525bce4ef52316e7a83e3345c
CVE: CVE-2021-25736
Published: 2023-10-30
Description: Kube-proxy
 on Windows can unintentionally forward traffic to local processes 
listening on the same port (“spec.ports[*].port”) as a LoadBalancer 
Service when the LoadBalancer controller
 does not set the “status.loadBalancer.ingress[].ip” field. Clusters 
where the LoadBalancer controller sets the 
“status.loadBalancer.ingress[].ip” field are unaffected.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-114
References: https://github.com/kubernetes/kubernetes/pull/99958; https://groups.google.com/g/kubernetes-security-announce/c/lIoOPObO51Q/m/O15LOazPAgAJ; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2023-46866
Published: 2023-10-30
Description: In International Color Consortium DemoIccMAX 79ecb74, CIccCLUT::Interp3d in IccProfLib/IccTagLut.cpp in libSampleICC.a attempts to access array elements at out-of-bounds indexes.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://github.com/InternationalColorConsortium/DemoIccMAX/issues/54; https://github.com/InternationalColorConsortium/DemoIccMAX/pull/53; https://github.com/InternationalColorConsortium/DemoIccMAX/issues/54
CVE: CVE-2023-46867
Published: 2023-10-30
Description: In International Color Consortium DemoIccMAX 79ecb74, CIccXformMatrixTRC::GetCurve in IccCmm.cpp in libSampleICC.a has a NULL pointer dereference.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://github.com/InternationalColorConsortium/DemoIccMAX/issues/54; https://github.com/InternationalColorConsortium/DemoIccMAX/pull/53; https://github.com/InternationalColorConsortium/DemoIccMAX/issues/54
CVE: CVE-2023-44141
Published: 2023-10-30
Description: Inkdrop prior to v5.6.0 allows a local attacker to conduct a code injection attack by having a legitimate user open a specially crafted markdown file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: https://forum.inkdrop.app/t/inkdrop-desktop-v5-6-0/4211; https://jvn.jp/en/jp/JVN48057522/; https://www.inkdrop.app/
CVE: CVE-2023-45746
Published: 2023-10-30
Description: Cross-site scripting vulnerability in Movable Type series allows a remote authenticated attacker to inject an arbitrary script. Affected products/versions are as follows: Movable Type 7 r.5405 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.5405 and earlier (Movable Type 7 Series), Movable Type Premium 1.58 and earlier, Movable Type Premium Advanced 1.58 and earlier, Movable Type Cloud Edition (Version 7) r.5405 and earlier, and Movable Type Premium Cloud Edition 1.58 and earlier.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/jp/JVN39139884/; https://movabletype.org/news/2023/10/mt-79020-released.html; https://jvn.jp/en/jp/JVN39139884/
CVE: CVE-2023-45797
Published: 2023-10-30
Description: A Buffer overflow vulnerability in DreamSecurity MagicLine4NX versions 1.0.0.1 to 1.0.0.26 allows an attacker to remotely execute code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://www.boho.or.kr/kr/bbs/view.do?bbsId=B0000133&nttId=71023&menuNo=205020; https://www.boho.or.kr/kr/bbs/view.do?bbsId=B0000133&nttId=71023&menuNo=205020
CVE: CVE-2023-45798
Published: 2023-10-30
Description: In Yettiesoft VestCert versions 2.36 to 2.5.29, a vulnerability exists due to improper validation of third-party modules. This allows malicious actors to load arbitrary third-party modules, leading to remote code execution.
CVSS Score: 8.4 (HIGH)
CWE: CWE-829, CWE-829
References: https://www.boho.or.kr/kr/bbs/view.do?bbsId=B0000133&nttId=71008&menuNo=205020; https://www.boho.or.kr/kr/bbs/view.do?bbsId=B0000133&nttId=71008&menuNo=205020
CVE: CVE-2023-45799
Published: 2023-10-30
Description: In MLSoft TCO!stream versions 8.0.22.1115 and below, a vulnerability exists due to insufficient permission validation. This allows an attacker to make the victim download and execute arbitrary files.


















CVSS Score: 7.2 (HIGH)
CWE: CWE-494, CWE-494
References: https://www.boho.or.kr/kr/bbs/view.do?bbsId=B0000133&nttId=71008&menuNo=205020; https://www.boho.or.kr/kr/bbs/view.do?bbsId=B0000133&nttId=71008&menuNo=205020
CVE: CVE-2023-42431
Published: 2023-10-30
Description: Cross-site Scripting (XSS) vulnerability in BlueSpiceAvatars extension of BlueSpice allows logged in user to inject arbitrary HTML into the profile image dialog on Special:Preferences. This only applies to the genuine user context.
CVSS Score: 2.1 (LOW)
CWE: CWE-20, CWE-79
References: https://en.wiki.bluespice.com/wiki/Security:Security_Advisories/BSSA-2023-02; https://en.wiki.bluespice.com/wiki/Security:Security_Advisories/BSSA-2023-02
CVE: CVE-2023-5844
Published: 2023-10-30
Description: Unverified Password Change in GitHub repository pimcore/admin-ui-classic-bundle prior to 1.2.0.
CVSS Score: 7.2 (HIGH)
CWE: CWE-620, CWE-287
References: https://github.com/pimcore/admin-ui-classic-bundle/commit/498ac77e54541177be27b0c710e387c47b3836ea; https://huntr.com/bounties/b031199d-192a-46e5-8c02-f7284ad74021; https://github.com/pimcore/admin-ui-classic-bundle/commit/498ac77e54541177be27b0c710e387c47b3836ea
CVE: CVE-2023-5832
Published: 2023-10-30
Description: Improper Input Validation in GitHub repository mintplex-labs/anything-llm prior to 0.1.0.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-20
References: https://github.com/mintplex-labs/anything-llm/commit/18798c5b640018aaee924e0afd941705d88df92e; https://huntr.com/bounties/afee3726-571f-416e-bba5-0828c815f5df; https://github.com/mintplex-labs/anything-llm/commit/18798c5b640018aaee924e0afd941705d88df92e
CVE: CVE-2023-5833
Published: 2023-10-30
Description: Improper Access Control in GitHub repository mintplex-labs/anything-llm prior to 0.1.0.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: https://github.com/mintplex-labs/anything-llm/commit/d5b1f84a4c7991987eac3454d4f1b4067841d783; https://huntr.com/bounties/00ec6847-125b-43e9-9658-d3cace1751d6; https://github.com/mintplex-labs/anything-llm/commit/d5b1f84a4c7991987eac3454d4f1b4067841d783
CVE: CVE-2018-11103
Published: 2023-10-30
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2020-25870
Published: 2023-10-30
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2022-48190
Published: 2023-10-30
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2023-40943
Published: 2023-10-30
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2023-41605
Published: 2023-10-30
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2023-44078
Published: 2023-10-30
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2023-5049
Published: 2023-10-30
Description: The Giveaways and Contests by RafflePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'rafflepress' and 'rafflepress_gutenberg' shortcode in versions up to, and including, 1.12.0 due to insufficient input sanitization and output escaping on 'giframe' user supplied attribute. This makes it possible for authenticated attackers with contributor level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/rafflepress/tags/1.11.4/app/rafflepress.php#L796; https://plugins.trac.wordpress.org/browser/rafflepress/tags/1.11.4/app/rafflepress.php#L955; https://plugins.trac.wordpress.org/changeset/2976620/rafflepress#file0
CVE: CVE-2023-5164
Published: 2023-10-30
Description: The Bellows Accordion Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 1.4.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/bellows-accordion-menu/tags/1.4.2/includes/bellows.api.php#L5; https://plugins.trac.wordpress.org/browser/bellows-accordion-menu/tags/1.4.2/includes/functions.php#L12; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2986331%40bellows-accordion-menu%2Ftrunk&old=2860904%40bellows-accordion-menu%2Ftrunk&sfp_email=&sfph_mail=
CVE: CVE-2023-5199
Published: 2023-10-30
Description: The PHP to Page plugin for WordPress is vulnerable Local File Inclusion to Remote Code Execution in versions up to, and including, 0.3 via the 'php-to-page' shortcode. This allows authenticated attackers with subscriber-level permissions or above, to include local file and potentially execute code on the server. While subscribers may need to poison log files or otherwise get a file installed in order to achieve remote code execution, author and above users can upload files by default and achieve remote code execution easily.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-98, CWE-552
References: https://plugins.trac.wordpress.org/browser/php-to-page/trunk/php-to-page.php?rev=441028#L22; https://www.wordfence.com/threat-intel/vulnerabilities/id/83e5a0dc-fc51-4565-945f-190cf9175874?source=cve; https://plugins.trac.wordpress.org/browser/php-to-page/trunk/php-to-page.php?rev=441028#L22
CVE: CVE-2023-5250
Published: 2023-10-30
Description: The Grid Plus plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.3.3 via a shortcode attribute. This allows subscriber-level, and above, attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where PHP files with arbitrary content can be uploaded and included.
CVSS Score: 8.8 (HIGH)
CWE: CWE-98
References: https://plugins.trac.wordpress.org/browser/grid-plus/tags/1.3.2/core/grid.plus.base.class.php#L19; https://plugins.trac.wordpress.org/changeset/3000441/grid-plus/trunk/grid-plus.php#file0; https://www.wordfence.com/threat-intel/vulnerabilities/id/a6407792-2c76-4149-a9f9-d53002135bec?source=cve
CVE: CVE-2023-5251
Published: 2023-10-30
Description: The Grid Plus plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the 'grid_plus_save_layout_callback' and 'grid_plus_delete_callback' functions in versions up to, and including, 1.3.2. This makes it possible for authenticated attackers with subscriber privileges or above, to add, update or delete grid layout. CVE-2023-34014 appears to be a duplicate of this issue.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://plugins.trac.wordpress.org/browser/grid-plus/tags/1.3.2/core/ajax_be.php#L10; https://plugins.trac.wordpress.org/browser/grid-plus/tags/1.3.2/core/ajax_be.php#L69; https://plugins.trac.wordpress.org/changeset/2992756/grid-plus#file1