deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-23018
Published: 2021-06-01
Description: Intra-cluster communication does not use TLS. The services within the NGINX Controller 3.x before 3.4.0 namespace are using cleartext protocols inside the cluster.
CVSS Score: 7.4 (HIGH)
CWE: CWE-319, CWE-319
References: https://support.f5.com/csp/article/K97002210; https://support.f5.com/csp/article/K97002210
CVE: CVE-2021-25932
Published: 2021-06-01
Description: In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.6-1 are vulnerable to Stored Cross-Site Scripting, since the function `validateFormInput()` performs improper validation checks on the input sent to the `userID` parameter. Due to this flaw an attacker could inject an arbitrary script which will be stored in the database.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/OpenNMS/opennms/commit/8a97e6869d6e49da18b208c837438ace80049c01; https://github.com/OpenNMS/opennms/commit/eb08b5ed4c5548f3e941a1f0d0363ae4439fa98c; https://github.com/OpenNMS/opennms/commit/f3ebfa3da5352b4d57f238b54c6db315ad99f10e
CVE: CVE-2021-27828
Published: 2021-06-01
Description: SQL injection in In4Suite ERP 3.2.74.1370 allows attackers to modify or delete data, causing persistent changes to the application's content or behavior by using malicious SQL queries.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/exploits/49884; https://www.in4velocity.com/in4suite-erp.html; https://www.exploit-db.com/exploits/49884
CVE: CVE-2021-23017
Published: 2021-06-01
Description: A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.
CVSS Score: 7.7 (HIGH)
CWE: CWE-193, CWE-193
References: http://mailman.nginx.org/pipermail/nginx-announce/2021/000300.html; http://packetstormsecurity.com/files/167720/Nginx-1.20.0-Denial-Of-Service.html; https://lists.apache.org/thread.html/r37e6b2165f7c910d8e15fd54f[PII_REDACTED]ad2625f[PII_REDACTED]4009%40%3Cnotifications.apisix.apache.org%3E
CVE: CVE-2021-23019
Published: 2021-06-01
Description: The NGINX Controller 2.0.0 thru 2.9.0 and 3.x before 3.15.0 Administrator password may be exposed in the systemd.txt file that is included in the NGINX support package.
CVSS Score: 7.8 (HIGH)
CWE: CWE-201, CWE-522
References: https://support.f5.com/csp/article/K04884013; https://support.f5.com/csp/article/K04884013
CVE: CVE-2021-23020
Published: 2021-06-01
Description: The NAAS 3.x before 3.10.0 API keys were generated using an insecure pseudo-random string and hashing algorithm which could lead to predictable keys.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-330, CWE-330
References: https://support.f5.com/csp/article/K45263486; https://support.f5.com/csp/article/K45263486
CVE: CVE-2021-23021
Published: 2021-06-01
Description: The Nginx Controller 3.x before 3.7.0 agent configuration file /etc/controller-agent/agent.conf is world readable with current permission bits set to 644.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-732, CWE-732
References: https://support.f5.com/csp/article/K36926027; https://support.f5.com/csp/article/K36926027
CVE: CVE-2019-4471
Published: 2021-06-01
Description: IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information, caused by the failure to set the secure flag for a sensitive cookie in an HTTPS session. A remote attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 163780.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-311
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/163780; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.ibm.com/support/pages/node/6451705
CVE: CVE-2019-4653
Published: 2021-06-01
Description: IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 170964.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/170964; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.ibm.com/support/pages/node/6451705
CVE: CVE-2019-4722
Published: 2021-06-01
Description: IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information via a stack trace due to mishandling of certain error conditions. IBM X-Force ID: 172128.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-755
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/172128; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.ibm.com/support/pages/node/6451705
CVE: CVE-2019-4723
Published: 2021-06-01
Description: IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain credentials from a user's browser via incorrect autocomplete settings in New Data Server Connection page. IBM X-Force ID: 172129.
CVSS Score: 7.5 (HIGH)
CWE: CWE-522
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/172129; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.ibm.com/support/pages/node/6451705
CVE: CVE-2019-4724
Published: 2021-06-01
Description: IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain credentials from a user's browser via incorrect autocomplete settings in New Content Backup page. IBM X-Force ID: 172130.
CVSS Score: 7.5 (HIGH)
CWE: CWE-522
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/172130; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.ibm.com/support/pages/node/6451705
CVE: CVE-2019-4730
Published: 2021-06-01
Description: IBM Cognos Analytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 172533.
CVSS Score: 7.1 (HIGH)
CWE: CWE-611
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/172533; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.ibm.com/support/pages/node/6451705
CVE: CVE-2020-1920
Published: 2021-06-01
Description: A regular expression denial of service (ReDoS) vulnerability in the validateBaseUrl function can cause the application to use excessive resources, become unresponsive, or crash. This was introduced in react-native version 0.59.0 and fixed in version 0.64.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333, CWE-697
References: https://github.com/facebook/react-native/commit/ca09ae82715e33c9ac77b3fa55495cf84ba891c7; https://github.com/facebook/react-native/releases/tag/v0.64.1; https://github.com/facebook/react-native/commit/ca09ae82715e33c9ac77b3fa55495cf84ba891c7
CVE: CVE-2020-27748
Published: 2021-06-01
Description: A flaw was found in the xdg-email component of xdg-utils-1.1.0-rc1 and newer. When handling mailto: URIs, xdg-email allows attachments to be discreetly added via the URI when being passed to Thunderbird. An attacker could potentially send a victim a URI that automatically attaches a sensitive file to a new email. If a victim user does not notice that an attachment was added and sends the email, this could result in sensitive information disclosure. It has been confirmed that the code behind this issue is in xdg-email and not in Thunderbird.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-201
References: https://bugzilla.redhat.com/show_bug.cgi?id=1899769; https://gitlab.freedesktop.org/xdg/xdg-utils/-/issues/177; https://bugzilla.redhat.com/show_bug.cgi?id=1899769
CVE: CVE-2020-4300
Published: 2021-06-01
Description: IBM Cognos Analytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 176607.
CVSS Score: 8.2 (HIGH)
CWE: CWE-611
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/176607; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.ibm.com/support/pages/node/6451705
CVE: CVE-2020-4354
Published: 2021-06-01
Description: IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 178506.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/178506; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.ibm.com/support/pages/node/6451705
CVE: CVE-2020-4520
Published: 2021-06-01
Description: IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to inject malicious HTML code that when viewed by the authenticated victim would execute the code. IBM X-Force ID: 182395.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/182395; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.ibm.com/support/pages/node/6451705
CVE: CVE-2020-4561
Published: 2021-06-01
Description: IBM Cognos Analytics 11.0 and 11.1 DQM API allows submitting of all control requests in unauthenticated sessions. This allows a remote attacker who can access a valid CA endpoint to read and write files to the Cognos Analytics system. IBM X-Force ID: 183903.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-829
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/183903; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.ibm.com/support/pages/node/6451705
CVE: CVE-2021-20306
Published: 2021-06-01
Description: A flaw was found in the BPMN editor in version jBPM 7.51.0.Final. Any authenticated user from any project can see the name of Ruleflow Groups from other projects, despite the user not having access to those projects. The highest threat from this vulnerability is to confidentiality.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: https://bugzilla.redhat.com/show_bug.cgi?id=1946213; https://bugzilla.redhat.com/show_bug.cgi?id=1946213
CVE: CVE-2021-20575
Published: 2021-06-01
Description: IBM Security Verify Access 20.07 allows web pages to be stored locally which can be read by another user on the system. X-Force ID: 199278.
CVSS Score: 3.3 (LOW)
CWE: CWE-922
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/199278; https://www.ibm.com/support/pages/node/6457315; https://exchange.xforce.ibmcloud.com/vulnerabilities/199278
CVE: CVE-2021-20576
Published: 2021-06-01
Description: IBM Security Verify Access 20.07 could allow a remote attacker to send a specially crafted HTTP GET request that could cause the application to crash.
CVSS Score: 7.5 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/199280; https://www.ibm.com/support/pages/node/6457315; https://exchange.xforce.ibmcloud.com/vulnerabilities/199280
CVE: CVE-2021-20585
Published: 2021-06-01
Description: IBM Security Verify Access 20.07 could disclose sensitive information in HTTP server headers that could be used in further attacks against the system. IBM X-Force ID: 199398.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/199398; https://www.ibm.com/support/pages/node/6457315; https://exchange.xforce.ibmcloud.com/vulnerabilities/199398
CVE: CVE-2021-23388
Published: 2021-06-01
Description: The package forms before 1.2.1, from 1.3.0 and before 1.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via email validation.
CVSS Score: 5.3 (MEDIUM)
References: https://github.com/caolan/forms/pull/214; https://github.com/caolan/forms/pull/214/commits/d4bd5b5febfe49c1f585f162e04ec810f8dc47a0; https://snyk.io/vuln/SNYK-JS-FORMS-1296389
CVE: CVE-2021-24309
Published: 2021-06-01
Description: The "Schedule Name" input in the Weekly Schedule WordPress plugin before 3.4.3 general options did not properly sanitize input, allowing a user to inject javascript code using the <script> HTML tags and cause a stored XSS issue
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/ba1d01dc-16e4-464f-94be-ed311ff6ccf9; https://wpscan.com/vulnerability/ba1d01dc-16e4-464f-94be-ed311ff6ccf9
CVE: CVE-2021-24310
Published: 2021-06-01
Description: The Photo Gallery by 10Web - Mobile-Friendly Image Gallery WordPress plugin before 1.5.67 did not properly sanitise the gallery title, allowing high privilege users to create one with XSS payload in it, which will be triggered when another user will view the gallery list or the affected gallery in the admin dashboard. This is due to an incomplete fix of CVE-2019-16117
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/f34096ec-b1b0-471d-88a4-4699178a3165; https://wpscan.com/vulnerability/f34096ec-b1b0-471d-88a4-4699178a3165
CVE: CVE-2021-24311
Published: 2021-06-01
Description: The wp_ajax_upload-remote-file AJAX action of the External Media WordPress plugin before 1.0.34 was vulnerable to arbitrary file uploads via any authenticated users.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434, CWE-434
References: https://wpscan.com/vulnerability/4fb90999-6f91-4200-a0cc-bfe9b34a5de9; https://www.wordfence.com/blog/2021/05/critical-vulnerability-patched-in-external-media-plugin/; https://wpscan.com/vulnerability/4fb90999-6f91-4200-a0cc-bfe9b34a5de9
CVE: CVE-2021-24312
Published: 2021-06-01
Description: The parameters $cache_path, $wp_cache_debug_ip, $wp_super_cache_front_page_text, $cache_scheduled_time, $cached_direct_pages used in the settings of WP Super Cache WordPress plugin before 1.7.3 result in RCE because they allow input of '$' and '\n'. This is due to an incomplete fix of CVE-2021-24209.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94, CWE-78
References: https://wpscan.com/vulnerability/2142c3d3-9a7f-4e3c-8776-d469a355d62f; https://wpscan.com/vulnerability/2142c3d3-9a7f-4e3c-8776-d469a355d62f
CVE: CVE-2021-24313
Published: 2021-06-01
Description: The WP Prayer WordPress plugin before 1.6.2 provides the functionality to store requested prayers/praises and list them on a WordPress website. These stored prayer/praise requests can be listed by using the WP Prayer engine. An authenticated WordPress user with any role can fill in the form to request a prayer. The form to request prayers or praises have several fields. The 'prayer request' and 'praise request' fields do not use proper input validation and can be used to store XSS payloads.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://bastijnouwendijk.com/cve-2021-24313/; https://wpscan.com/vulnerability/c7ab736d-27c4-4ec5-9681-a3f0dda86586; https://bastijnouwendijk.com/cve-2021-24313/
CVE: CVE-2021-24316
Published: 2021-06-01
Description: The search feature of the Mediumish WordPress theme through 1.0.47 does not properly sanitise it's 's' GET parameter before output it back the page, leading to the Cross-SIte Scripting issue.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://m0ze.ru/vulnerability/%5B2021-03-14%5D-%5BWordPress%5D-%5BCWE-79%5D-Mediumish-WordPress-Theme-v1.0.47.txt; https://wpscan.com/vulnerability/57e27de4-58f5-46aa-9b59-809705733b2e; https://www.wowthemes.net/themes/mediumish-wordpress/
CVE: CVE-2021-24317
Published: 2021-06-01
Description: The Listeo WordPress theme before 1.6.11 did not properly sanitise some parameters in its Search, Booking Confirmation and Personal Message pages, leading to Cross-Site Scripting issues
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://m0ze.ru/vulnerability/%5B2021-02-10%5D-%5BWordPress%5D-%5BCWE-79%5D-Listeo-WordPress-Theme-v1.6.10.txt; https://wpscan.com/vulnerability/704d8886-df9e-4217-88d1-a72a71924174; https://m0ze.ru/vulnerability/%5B2021-02-10%5D-%5BWordPress%5D-%5BCWE-79%5D-Listeo-WordPress-Theme-v1.6.10.txt
CVE: CVE-2021-24318
Published: 2021-06-01
Description: The Listeo WordPress theme before 1.6.11 did not ensure that the Post/Page and Booking to delete belong to the user making the request, allowing any authenticated users to delete arbitrary page/post and booking via an IDOR vector.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284, CWE-639
References: https://m0ze.ru/vulnerability/%5B2021-02-10%5D-%5BWordPress%5D-%5BCWE-639%5D-Listeo-WordPress-Theme-v1.6.10.txt; https://wpscan.com/vulnerability/9afa7e11-68b3-4196-975e-8b3f8e68ce56; https://m0ze.ru/vulnerability/%5B2021-02-10%5D-%5BWordPress%5D-%5BCWE-639%5D-Listeo-WordPress-Theme-v1.6.10.txt
CVE: CVE-2021-24319
Published: 2021-06-01
Description: The Bello - Directory & Listing WordPress theme before 1.6.0 did not properly sanitise its post_excerpt parameter before outputting it back in the shop/my-account/bello-listing-endpoint/ page, leading to a Cross-Site Scripting issue
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://m0ze.ru/vulnerability/%5B2021-03-21%5D-%5BWordPress%5D-%5BCWE-1021%5D-Bello-WordPress-Theme-v1.5.9.txt; https://wpscan.com/vulnerability/2c274eb7-25f1-49d4-a2c8-8ce8cecebe68; https://m0ze.ru/vulnerability/%5B2021-03-21%5D-%5BWordPress%5D-%5BCWE-1021%5D-Bello-WordPress-Theme-v1.5.9.txt
CVE: CVE-2021-24320
Published: 2021-06-01
Description: The Bello - Directory & Listing WordPress theme before 1.6.0 did not properly sanitise and escape its listing_list_view, bt_bb_listing_field_my_lat, bt_bb_listing_field_my_lng, bt_bb_listing_field_distance_value, bt_bb_listing_field_my_lat_default, bt_bb_listing_field_keyword, bt_bb_listing_field_location_autocomplete, bt_bb_listing_field_price_range_from and bt_bb_listing_field_price_range_to parameter in ints listing page, leading to reflected Cross-Site Scripting issues.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://m0ze.ru/vulnerability/%5B2021-03-21%5D-%5BWordPress%5D-%5BCWE-79%5D-Bello-WordPress-Theme-v1.5.9.txt; https://wpscan.com/vulnerability/6b5b42fd-028a-4405-b[PII_REDACTED]029bb; https://m0ze.ru/vulnerability/%5B2021-03-21%5D-%5BWordPress%5D-%5BCWE-79%5D-Bello-WordPress-Theme-v1.5.9.txt
CVE: CVE-2021-24321
Published: 2021-06-01
Description: The Bello - Directory & Listing WordPress theme before 1.6.0 did not sanitise the bt_bb_listing_field_price_range_to, bt_bb_listing_field_now_open, bt_bb_listing_field_my_lng, listing_list_view and bt_bb_listing_field_my_lat parameters before using them in a SQL statement, leading to SQL Injection issues
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://m0ze.ru/vulnerability/%5B2021-03-21%5D-%5BWordPress%5D-%5BCWE-89%5D-Bello-WordPress-Theme-v1.5.9.txt; https://wpscan.com/vulnerability/7314f9fa-c047-4e0c-b145-940240a50c02; https://m0ze.ru/vulnerability/%5B2021-03-21%5D-%5BWordPress%5D-%5BCWE-89%5D-Bello-WordPress-Theme-v1.5.9.txt
CVE: CVE-2021-24322
Published: 2021-06-01
Description: The Database Backup for WordPress plugin before 2.4 did not escape the backup_recipient POST parameter in before output it back in the attribute of an HTML tag, leading to a Stored Cross-Site Scripting issue.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://m0ze.ru/vulnerability/%5B2021-04-04%5D-%5BWordPress%5D-%5BCWE-79%5D-WP-DB-Backup-WordPress-Plugin-v2.3.3.txt; https://wpscan.com/vulnerability/6bea6301-0762-45c3-a4eb-15d6ac4f9f37; https://m0ze.ru/vulnerability/%5B2021-04-04%5D-%5BWordPress%5D-%5BCWE-79%5D-WP-DB-Backup-WordPress-Plugin-v2.3.3.txt
CVE: CVE-2021-24328
Published: 2021-06-01
Description: The WP Login Security and History WordPress plugin through 1.0 did not have CSRF check when saving its settings, not any sanitisation or validation on them. This could allow attackers to make logged in administrators change the plugin's settings to arbitrary values, and set XSS payloads on them as well
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-352, CWE-79, CWE-352
References: https://m0ze.ru/exploit/csrf-wp-login-security-and-history-v1.0.html; https://m0ze.ru/vulnerability/%5B2021-03-29%5D-%5BWordPress%5D-%5BCWE-352%5D-WP-Login-Security-and-History-WordPress-Plugin-v1.0.txt; https://m0ze.ru/vulnerability/%5B2021-03-29%5D-%5BWordPress%5D-%5BCWE-79%5D-WP-Login-Security-and-History-WordPress-Plugin-v1.0.txt
CVE: CVE-2021-24329
Published: 2021-06-01
Description: The WP Super Cache WordPress plugin before 1.7.3 did not properly sanitise its wp_cache_location parameter in its settings, which could lead to a Stored Cross-Site Scripting issue.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://m0ze.ru/vulnerability/%5B2021-03-23%5D-%5BWordPress%5D-%5BCWE-79%5D-WP-Super-Cache-WordPress-Plugin-v1.7.2.txt; https://wpscan.com/vulnerability/9df86d05-1408-4c22-af55-5e3d44249fd0; https://m0ze.ru/vulnerability/%5B2021-03-23%5D-%5BWordPress%5D-%5BCWE-79%5D-WP-Super-Cache-WordPress-Plugin-v1.7.2.txt
CVE: CVE-2021-24330
Published: 2021-06-01
Description: The Funnel Builder by CartFlows – Create High Converting Sales Funnels For WordPress plugin before 1.6.13 did not sanitise its facebook_pixel_id and google_analytics_id settings, allowing high privilege users to set XSS payload in them, which will either be executed on pages generated by the plugin, or the whole website depending on the settings used.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://m0ze.ru/vulnerability/%5B2021-04-26%5D-%5BWordPress%5D-%5BCWE-79%5D-Funnel-Builder-by-CartFlows-WordPress-Plugin-v1.6.12.txt; https://wpscan.com/vulnerability/b9748066-83b7-4762-9124-de021f687477; https://m0ze.ru/vulnerability/%5B2021-04-26%5D-%5BWordPress%5D-%5BCWE-79%5D-Funnel-Builder-by-CartFlows-WordPress-Plugin-v1.6.12.txt
CVE: CVE-2021-24331
Published: 2021-06-01
Description: The Smooth Scroll Page Up/Down Buttons WordPress plugin before 1.4 did not properly sanitise and validate its settings, such as psb_distance, psb_buttonsize, psb_speed, only validating them client side. This could allow high privilege users (such as admin) to set XSS payloads in them
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://m0ze.ru/vulnerability/%5B2021-04-24%5D-%5BWordPress%5D-%5BCWE-79%5D-Smooth-Scroll-Page-UpDown-Buttons-WordPress-Plugin-v1.3.txt; https://wpscan.com/vulnerability/2c7ca586-def8-4723-b779-09d7f37fa1ab; https://m0ze.ru/vulnerability/%5B2021-04-24%5D-%5BWordPress%5D-%5BCWE-79%5D-Smooth-Scroll-Page-UpDown-Buttons-WordPress-Plugin-v1.3.txt
CVE: CVE-2021-24333
Published: 2021-06-01
Description: The Content Copy Protection & Prevent Image Save WordPress plugin through 1.3 does not check for CSRF when saving its settings, not perform any validation and sanitisation on them, allowing attackers to make a logged in administrator set arbitrary XSS payloads in them.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352, CWE-79, CWE-352
References: https://m0ze.ru/exploit/csrf-prevent-content-copy-image-save-v1.3.html; https://m0ze.ru/vulnerability/%5B2021-03-29%5D-%5BWordPress%5D-%5BCWE-352%5D-Content-Copy-Protection-Prevent-Image-Save-WordPress-Plugin-v1.3.txt; https://m0ze.ru/vulnerability/%5B2021-03-29%5D-%5BWordPress%5D-%5BCWE-79%5D-Content-Copy-Protection-Prevent-Image-Save-WordPress-Plugin-v1.3.txt
CVE: CVE-2021-24334
Published: 2021-06-01
Description: The Instant Images – One Click Unsplash Uploads WordPress plugin before 4.4.0.1 did not properly validate and sanitise its unsplash_download_w and unsplash_download_h parameter settings (/wp-admin/upload.php?page=instant-images), only validating them client side before saving them, leading to a Stored Cross-Site Scripting issue.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://m0ze.ru/vulnerability/%5B2021-04-22%5D-%5BWordPress%5D-%5BCWE-79%5D-Instant-Images-WordPress-Plugin-v4.4.0.txt; https://wpscan.com/vulnerability/ae79189a-6b63-4110-9567-cd7c97d71e4f; https://m0ze.ru/vulnerability/%5B2021-04-22%5D-%5BWordPress%5D-%5BCWE-79%5D-Instant-Images-WordPress-Plugin-v4.4.0.txt