deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-25881
Published: 2021-10-29
Description: A vulnerability was discovered in the filename parameter in pathindex.php?r=cms-backend/attachment/delete&sub=&filename=../../../../111.txt&filetype=image/jpeg of the master version of RKCMS. This vulnerability allows for an attacker to perform a directory traversal via a crafted .txt file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22
References: http://www.ranko.cn/index.html; https://gitee.com/wuxi_ranko/cms; https://github.com/AubreyJun/cms/issues/2
CVE: CVE-2021-1118
Published: 2021-10-29
Description: NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where there is the potential to execute privileged operations by the guest OS, which may lead to information disclosure, data tampering, escalation of privileges, and denial of service
CVSS Score: 7.8 (HIGH)
CWE: CWE-250, CWE-269
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5230; https://nvidia.custhelp.com/app/answers/detail/a_id/5230
CVE: CVE-2021-1119
Published: 2021-10-29
Description: NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can double-free a pointer, which may lead to denial of service. This flaw may result in a write-what-where condition, allowing an attacker to execute arbitrary code impacting integrity and availability.
CVSS Score: 7.1 (HIGH)
CWE: CWE-415, CWE-415
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5230; https://nvidia.custhelp.com/app/answers/detail/a_id/5230
CVE: CVE-2021-1120
Published: 2021-10-29
Description: NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a string provided by the guest OS may not be properly null terminated. The guest OS or attacker has no ability to push content to the plugin through this vulnerability, which may lead to information disclosure, data tampering, unauthorized code execution, and denial of service.
CVSS Score: 7.0 (HIGH)
CWE: CWE-170
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5230; https://nvidia.custhelp.com/app/answers/detail/a_id/5230
CVE: CVE-2021-1121
Published: 2021-10-29
Description: NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager kernel driver, where a vGPU can cause resource starvation among other vGPUs hosted on the same GPU, which may lead to denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-770, CWE-770
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5230; https://nvidia.custhelp.com/app/answers/detail/a_id/5230
CVE: CVE-2021-1122
Published: 2021-10-29
Description: NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can dereference a NULL pointer, which may lead to denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5230; https://nvidia.custhelp.com/app/answers/detail/a_id/5230
CVE: CVE-2021-1123
Published: 2021-10-29
Description: NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can deadlock, which may lead to denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-667
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5230; https://nvidia.custhelp.com/app/answers/detail/a_id/5230
CVE: CVE-2021-36808
Published: 2021-10-30
Description: A local attacker could bypass the app password using a race condition in Sophos Secure Workspace for Android before version 9.7.3115.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-362
References: https://www.sophos.com/en-us/security-advisories/sophos-sa-20211029-ssw-pw-bypass; https://www.sophos.com/en-us/security-advisories/sophos-sa-20211029-ssw-pw-bypass
CVE: CVE-2020-25911
Published: 2021-10-31
Description: A XML External Entity (XXE) vulnerability was discovered in the modRestServiceRequest component in MODX CMS 2.7.3 which can lead to an information disclosure or denial of service (DOS).
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-611
References: https://github.com/dahua966/Vul_disclose/blob/main/XXE_modxcms.md; https://github.com/modxcms/revolution/issues/15237; https://github.com/dahua966/Vul_disclose/blob/main/XXE_modxcms.md
CVE: CVE-2020-25912
Published: 2021-10-31
Description: A XML External Entity (XXE) vulnerability was discovered in symphony\lib\toolkit\class.xmlelement.php in Symphony 2.7.10 which can lead to an information disclosure or denial of service (DOS).
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-611
References: http://symphony.com; https://github.com/symphonycms/symphonycms/issues/2924; http://symphony.com
CVE: CVE-2021-33259
Published: 2021-10-31
Description: Several web interfaces in D-Link DIR-868LW 1.12b have no authentication requirements for access, allowing for attackers to obtain users' DNS query history.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-306
References: http://d-link.com; http://dir-868lw.com; https://github.com/jayus0821/uai-poc/blob/main/D-Link/DIR-868L/webaccess_UAI.md
CVE: CVE-2020-26705
Published: 2021-10-31
Description: The parseXML function in Easy-XML 0.5.0 was discovered to have a XML External Entity (XXE) vulnerability which allows for an attacker to expose sensitive data or perform a denial of service (DOS) via a crafted external entity entered into the XML content as input.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-611
References: https://github.com/darkfoxprime/python-easy_xml/issues/1; https://github.com/darkfoxprime/python-easy_xml/issues/1
CVE: CVE-2020-26707
Published: 2021-10-31
Description: An issue was discovered in the add function in Shenzhim AAPTJS 1.3.1 which allows attackers to execute arbitrary code via the filePath parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/shenzhim/aaptjs/issues/2; https://github.com/shenzhim/aaptjs/issues/2
CVE: CVE-2020-36376
Published: 2021-10-31
Description: An issue was discovered in the list function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath parameters.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/shenzhim/aaptjs/issues/2; https://github.com/shenzhim/aaptjs/issues/2
CVE: CVE-2020-36377
Published: 2021-10-31
Description: An issue was discovered in the dump function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath parameters.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/shenzhim/aaptjs/issues/2; https://github.com/shenzhim/aaptjs/issues/2
CVE: CVE-2020-36378
Published: 2021-10-31
Description: An issue was discovered in the packageCmd function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath parameters.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/shenzhim/aaptjs/issues/2; https://github.com/shenzhim/aaptjs/issues/2
CVE: CVE-2020-36379
Published: 2021-10-31
Description: An issue was discovered in the remove function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath parameters.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/shenzhim/aaptjs/issues/2; https://github.com/shenzhim/aaptjs/issues/2
CVE: CVE-2020-36380
Published: 2021-10-31
Description: An issue was discovered in the crunch function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath parameters.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/shenzhim/aaptjs/issues/2; https://github.com/shenzhim/aaptjs/issues/2
CVE: CVE-2020-36381
Published: 2021-10-31
Description: An issue was discovered in the singleCrunch function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath parameters.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/shenzhim/aaptjs/issues/2; https://github.com/shenzhim/aaptjs/issues/2
CVE: CVE-2021-20838
Published: 2021-11-01
Description: Office Server Document Converter V7.2MR4 and earlier and V7.1MR7 and earlier allows a remote unauthenticated attacker to conduct an XML External Entity (XXE) attack to cause a denial of service (DoS) condition by processing a specially crafted XML document.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: https://jvn.jp/en/jp/JVN33453839/index.html; https://www.antenna.co.jp/news/2021/osdc72-20211027.html; https://jvn.jp/en/jp/JVN33453839/index.html
CVE: CVE-2021-20839
Published: 2021-11-01
Description: Office Server Document Converter V7.2MR4 and earlier and V7.1MR7 and earlier allows a remote unauthenticated attacker to conduct an XML External Entity (XXE) attack to cause a denial of service (DoS) condition to the other servers by processing a specially crafted XML document.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-611
References: https://jvn.jp/en/jp/JVN33453839/index.html; https://www.antenna.co.jp/news/2021/osdc72-20211027.html; https://jvn.jp/en/jp/JVN33453839/index.html
CVE: CVE-2021-41313
Published: 2021-11-01
Description: Affected versions of Atlassian Jira Server and Data Center allow authenticated but non-admin remote attackers to edit email batch configurations via an Improper Authorization vulnerability in the /secure/admin/ConfigureBatching!default.jspa endpoint. The affected versions are before version 8.20.7.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-285
References: https://jira.atlassian.com/browse/JRASERVER-72898; https://jira.atlassian.com/browse/JRASERVER-72898
CVE: CVE-2021-42574
Published: 2021-11-01
Description: An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control sequences, which can be used to craft source code that renders different logic than the logical ordering of tokens ingested by compilers and interpreters. Adversaries can leverage this to encode source code for compilers accepting Unicode such that targeted vulnerabilities are introduced invisibly to human reviewers. NOTE: the Unicode Consortium offers the following alternative approach to presenting this concern. An issue is noted in the nature of international text that can affect applications that implement support for The Unicode Standard and the Unicode Bidirectional Algorithm (all versions). Due to text display behavior when text includes left-to-right and right-to-left characters, the visual order of tokens may be different from their logical order. Additionally, control characters needed to fully support the requirements of bidirectional text can further obfuscate the logical order of tokens. Unless mitigated, an adversary could craft source code such that the ordering of tokens perceived by human reviewers does not match what will be processed by a compiler/interpreter/etc. The Unicode Consortium has documented this class of vulnerability in its document, Unicode Technical Report #36, Unicode Security Considerations. The Unicode Consortium also provides guidance on mitigations for this class of issues in Unicode Technical Standard #39, Unicode Security Mechanisms, and in Unicode Standard Annex #31, Unicode Identifier and Pattern Syntax. Also, the BIDI specification allows applications to tailor the implementation in ways that can mitigate misleading visual reordering in program text; see HL4 in Unicode Standard Annex #9, Unicode Bidirectional Algorithm.
CVSS Score: 8.3 (HIGH)
CWE: CWE-94
References: http://www.openwall.com/lists/oss-security/2021/11/01/1; http://www.openwall.com/lists/oss-security/2021/11/01/4; http://www.openwall.com/lists/oss-security/2021/11/01/5
CVE: CVE-2021-42694
Published: 2021-11-01
Description: An issue was discovered in the character definitions of the Unicode Specification through 14.0. The specification allows an adversary to produce source code identifiers such as function names using homoglyphs that render visually identical to a target identifier. Adversaries can leverage this to inject code via adversarial identifier definitions in upstream software dependencies invoked deceptively in downstream software. NOTE: the Unicode Consortium offers the following alternative approach to presenting this concern. An issue is noted in the nature of international text that can affect applications that implement support for The Unicode Standard (all versions). Unless mitigated, an adversary could produce source code identifiers using homoglyph characters that render visually identical to but are distinct from a target identifier. In this way, an adversary could inject adversarial identifier definitions in upstream software that are not detected by human reviewers and are invoked deceptively in downstream software. The Unicode Consortium has documented this class of security vulnerability in its document, Unicode Technical Report #36, Unicode Security Considerations. The Unicode Consortium also provides guidance on mitigations for this class of issues in Unicode Technical Standard #39, Unicode Security Mechanisms.
CVSS Score: 8.3 (HIGH)
CWE: CWE-94
References: http://www.openwall.com/lists/oss-security/2021/11/01/1; http://www.openwall.com/lists/oss-security/2021/11/01/6; http://www.unicode.org/versions/Unicode14.0.0/
CVE: CVE-2021-40348
Published: 2021-11-01
Description: Spacewalk 2.10, and derivatives such as Uyuni 2021.08, allows code injection. rhn-config-satellite.pl doesn't sanitize the configuration filename used to append Spacewalk-specific key-value pair. The script is intended to be run by the tomcat user account with Sudo, according to the installation setup. This can lead to the ability of an attacker to use --option to append arbitrary code to a root-owned file that eventually will be executed by the system. This is fixed in Uyuni spacewalk-admin 4.3.2-1.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: http://www.openwall.com/lists/oss-security/2021/10/28/4; https://github.com/uyuni-project/uyuni/commit/790c7388efac6923c5475e01c1ff718dffa9f052; http://www.openwall.com/lists/oss-security/2021/10/28/4
CVE: CVE-2015-10001
Published: 2021-11-01
Description: The WP-Stats WordPress plugin before 2.52 does not have CSRF check when saving its settings, and did not escape some of them when outputting them, allowing attacker to make logged in high privilege users change them and set Cross-Site Scripting payloads
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/f5c3dfea-7203-4a98-88ff-aa6a24d03734; https://www.openwall.com/lists/oss-security/2015/06/17/6; https://wpscan.com/vulnerability/f5c3dfea-7203-4a98-88ff-aa6a24d03734
CVE: CVE-2015-20019
Published: 2021-11-01
Description: The Content text slider on post WordPress plugin before 6.9 does not sanitise and escape the Title and Message/Content settings, which could lead to Cross-Site Scripting issues
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/1393044/content-text-slider-on-post; https://seclists.org/bugtraq/2015/Dec/124; https://wpscan.com/vulnerability/4f92b211-e09c-4ed0-bc98-27e0b51b1f86
CVE: CVE-2015-20067
Published: 2021-11-01
Description: The WP Attachment Export WordPress plugin before 0.2.4 does not have proper access controls, allowing unauthenticated users to download the XML data that holds all the details of attachments/posts on a Wordpress
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://github.com/espreto/wpsploit/blob/master/modules/auxiliary/scanner/http/wp_attachment_export_file_download.rb; https://seclists.org/fulldisclosure/2015/Jul/73; https://wpscan.com/vulnerability/d1a9ed65-baf3-4c85-b077-1f37d8c7793a
CVE: CVE-2018-25019
Published: 2021-11-01
Description: The LearnDash LMS WordPress plugin before 2.5.4 does not have any authorisation and validation of the file to be uploaded in the learndash_assignment_process_init() function, which could allow unauthenticated users to upload arbitrary files to the web server
CVSS Score: 7.5 (HIGH)
CWE: CWE-434, CWE-862, CWE-434, CWE-862
References: https://lists.openwall.net/full-disclosure/2018/01/10/17; https://wpscan.com/vulnerability/9444f67b-8e3d-4cf0-b319-ed25e7db383a; https://lists.openwall.net/full-disclosure/2018/01/10/17
CVE: CVE-2020-36503
Published: 2021-11-01
Description: The Connections Business Directory WordPress plugin before 9.7 does not validate or sanitise some connections' fields, which could lead to a CSV injection issue
CVSS Score: 8.0 (HIGH)
CWE: CWE-1236
References: https://github.com/Connections-Business-Directory/Connections/issues/474; https://wpscan.com/vulnerability/dd394b55-c86f-4fa2-aae8-5903ca0b95ec; https://github.com/Connections-Business-Directory/Connections/issues/474
CVE: CVE-2020-36504
Published: 2021-11-01
Description: The WP-Pro-Quiz WordPress plugin through 0.37 does not have CSRF check in place when deleting a quiz, which could allow an attacker to make a logged in admin delete arbitrary quiz on the blog
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://medium.com/%40hoanhp/0-days-story-1-wp-pro-quiz-2115dd77a6d4; https://wpscan.com/vulnerability/83679b90-faa5-454e-924c-89f388eccbd1; https://medium.com/%40hoanhp/0-days-story-1-wp-pro-quiz-2115dd77a6d4
CVE: CVE-2020-36505
Published: 2021-11-01
Description: The Delete All Comments Easily WordPress plugin through 1.3 is lacking Cross-Site Request Forgery (CSRF) checks, which could result in an unauthenticated attacker making a logged in admin delete all comments from the blog.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://medium.com/%40hoanhp/0-day-story-2-delete-all-comments-easily-a854e52a7d50; https://wpscan.com/vulnerability/239f8efa-8fa4-4274-904f-708e65083821; https://medium.com/%40hoanhp/0-day-story-2-delete-all-comments-easily-a854e52a7d50
CVE: CVE-2021-24539
Published: 2021-11-01
Description: The Coming Soon, Under Construction & Maintenance Mode By Dazzler WordPress plugin before 1.6.7 does not sanitise or escape its description setting when outputting it in the frontend when the Coming Soon mode is enabled, even when the unfiltered_html capability is disallowed, leading to an authenticated Stored Cross-Site Scripting issue
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/4bda5dff-f577-4cd8-a225-c6b4c32f22b4; https://wpscan.com/vulnerability/4bda5dff-f577-4cd8-a225-c6b4c32f22b4
CVE: CVE-2021-24570
Published: 2021-11-01
Description: The Accept Donations with PayPal WordPress plugin before 1.3.1 offers a function to create donation buttons, which internally are posts. The process to create a new button is lacking a CSRF check. An attacker could use this to make an authenticated admin create a new button. Furthermore, one of the Button field is not escaped before being output in an attribute when editing a Button, leading to a Stored Cross-Site Scripting issue as well.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79, CWE-352, CWE-79, CWE-352
References: https://plugins.trac.wordpress.org/changeset/2608073/; https://wpscan.com/vulnerability/5c73754c-eebe-424a-9d3b-ca83eb53bf87; https://plugins.trac.wordpress.org/changeset/2608073/
CVE: CVE-2021-24572
Published: 2021-11-01
Description: The Accept Donations with PayPal WordPress plugin before 1.3.1 provides a function to create donation buttons which are internally stored as posts. The deletion of a button is not CSRF protected and there is no control to check if the deleted post was a button post. As a result, an attacker could make logged in admins delete arbitrary posts
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/7b1ebd26-ea8b-448c-a775-66a04102e44f; https://wpscan.com/vulnerability/7b1ebd26-ea8b-448c-a775-66a04102e44f
CVE: CVE-2021-24624
Published: 2021-11-01
Description: The MP3 Audio Player for Music, Radio & Podcast by Sonaar WordPress plugin before 2.4.2 does not properly sanitize or escape data in some of its Playlist settings, allowing high privilege users to perform Cross-Site Scripting attacks
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/d79d2f6a-257a-4c9e-b971-9837abd4211c; https://wpscan.com/vulnerability/d79d2f6a-257a-4c9e-b971-9837abd4211c
CVE: CVE-2021-24682
Published: 2021-11-01
Description: The Cool Tag Cloud WordPress plugin before 2.26 does not escape the style attribute of the cool_tag_cloud shortcode, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/7dfdd50d-77f9-4f0a-8673-8f033c0b0e05; https://wpscan.com/vulnerability/7dfdd50d-77f9-4f0a-8673-8f033c0b0e05
CVE: CVE-2021-24685
Published: 2021-11-01
Description: The Flat Preloader WordPress plugin before 1.5.4 does not enforce nonce checks when saving its settings, as well as does not sanitise and escape them, which could allow attackers to a make logged in admin change them with a Cross-Site Scripting payload (triggered either in the frontend or backend depending on the payload)
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-352, CWE-79, CWE-352
References: https://wpscan.com/vulnerability/972ecde8-3d44-4dd9-81e3-643d8737434f; https://wpscan.com/vulnerability/972ecde8-3d44-4dd9-81e3-643d8737434f
CVE: CVE-2021-24715
Published: 2021-11-01
Description: The WP Sitemap Page WordPress plugin before 1.7.0 does not properly sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/da66d54e-dda8-4aa8-8d27-b8b87100bb21; https://wpscan.com/vulnerability/da66d54e-dda8-4aa8-8d27-b8b87100bb21
CVE: CVE-2021-24716
Published: 2021-11-01
Description: The Modern Events Calendar Lite WordPress plugin before 5.22.3 does not properly sanitize or escape values set by users with access to adjust settings withing wp-admin.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/576cc93d-1499-452b-97dd-80f69002e2a0; https://wpscan.com/vulnerability/576cc93d-1499-452b-97dd-80f69002e2a0
CVE: CVE-2021-24717
Published: 2021-11-01
Description: The AutomatorWP WordPress plugin before 1.7.6 does not perform capability checks which allows users with Subscriber roles to enumerate automations, disclose title of private posts or user emails, call functions, or perform privilege escalation via Ajax actions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-863, CWE-863
References: https://wpscan.com/vulnerability/5916ea42-eb33-463d-8528-2a142805c91f; https://wpscan.com/vulnerability/5916ea42-eb33-463d-8528-2a142805c91f
CVE: CVE-2021-24722
Published: 2021-11-01
Description: The Restaurant Menu by MotoPress WordPress plugin before 2.4.2 does not properly sanitize or escape inputs when creating new menu items, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/14b29450-2450-4b5f-8630-bb2cbfbd0a83; https://wpscan.com/vulnerability/14b29450-2450-4b5f-8630-bb2cbfbd0a83
CVE: CVE-2021-24723
Published: 2021-11-01
Description: The WP Reactions Lite WordPress plugin before 1.3.6 does not properly sanitize inputs within wp-admin pages, allowing users with sufficient access to inject XSS payloads within /wp-admin/ pages.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/0a46ae96-41e5-4b52-91c3-409f7387aecc; https://wpscan.com/vulnerability/0a46ae96-41e5-4b52-91c3-409f7387aecc
CVE: CVE-2021-24742
Published: 2021-11-01
Description: The Logo Slider and Showcase WordPress plugin before 1.3.37 allows Editor users to update the plugin's settings via the rtWLSSettings AJAX action because it uses a nonce for authorisation instead of a capability check.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://wpscan.com/vulnerability/8dfc86e4-56a0-4e30-9050-cf3f328ff993; https://wpscan.com/vulnerability/8dfc86e4-56a0-4e30-9050-cf3f328ff993