deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-30571
Published: 2023-05-29
Description: Libarchive through 3.6.2 can cause directories to have world-writable permissions. The umask() call inside archive_write_disk_posix.c changes the umask of the whole process for a very short period of time; a race condition with another thread can lead to a permanent umask 0 setting. Such a race condition could lead to implicit directory creation with permissions 0777 (without the sticky bit), which means that any low-privileged local user can delete and rename files inside those directories.
CVSS Score: 3.9 (LOW)
CWE: CWE-362, CWE-362
References: https://github.com/libarchive/libarchive/issues/1876; https://groups.google.com/g/libarchive-announce; https://github.com/libarchive/libarchive/issues/1876
CVE: CVE-2022-24627
Published: 2023-05-29
Description: An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is an unauthenticated SQL injection in the p parameter of the process_login.php login form.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: http://seclists.org/fulldisclosure/2023/Feb/12; http://seclists.org/fulldisclosure/2023/Feb/12
CVE: CVE-2022-24628
Published: 2023-05-29
Description: An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is authenticated SQL injection in the id parameter of IPPhoneFirmwareEdit.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: http://seclists.org/fulldisclosure/2023/Feb/12; http://seclists.org/fulldisclosure/2023/Feb/12
CVE: CVE-2022-24629
Published: 2023-05-29
Description: An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. Remote code execution can be achieved via directory traversal in the dir parameter of the file upload functionality of BrowseFiles.php. An attacker can upload a .php file to WebAdmin/admin/AudioCodes_files/ajax/.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-22
References: http://seclists.org/fulldisclosure/2023/Feb/12; http://seclists.org/fulldisclosure/2023/Feb/12
CVE: CVE-2022-24630
Published: 2023-05-29
Description: An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. BrowseFiles.php allows a ?cmd=ssh POST request with an ssh_command field that is executed.
CVSS Score: 7.2 (HIGH)
CWE: CWE-77
References: http://seclists.org/fulldisclosure/2023/Feb/12; http://seclists.org/fulldisclosure/2023/Feb/12
CVE: CVE-2022-24631
Published: 2023-05-29
Description: An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is stored XSS via the ajaxTenants.php desc parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2023/Feb/12; http://seclists.org/fulldisclosure/2023/Feb/12
CVE: CVE-2022-24632
Published: 2023-05-29
Description: An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is directory traversal during file download via the BrowseFiles.php view parameter.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: http://seclists.org/fulldisclosure/2023/Feb/12; http://seclists.org/fulldisclosure/2023/Feb/12
CVE: CVE-2022-41766
Published: 2023-05-29
Description: An issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x before 1.38.3. Upon an action=rollback operation, the alreadyrolled message can leak a user name (when the user has been revision deleted/suppressed).
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-732
References: https://phabricator.wikimedia.org/T307278; https://phabricator.wikimedia.org/T307278
CVE: CVE-2023-30253
Published: 2023-05-29
Description: Dolibarr before 17.0.1 allows remote code execution by an authenticated user via an uppercase manipulation: <?PHP instead of <?php in injected data.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://github.com/Dolibarr/dolibarr; https://www.swascan.com/blog/; https://www.swascan.com/security-advisory-dolibarr-17-0-0/
CVE: CVE-2023-32072
Published: 2023-05-29
Description: Tuleap is an open source tool for end to end traceability of application and system developments. Tuleap Community Edition prior to version 14.8.99.60 and Tuleap Enterprise edition prior to 14.8-3 and 14.7-7, the logs of the triggered Jenkins job URLs are not properly escaped. A malicious Git administrator can setup a malicious Jenkins hook to make a victim, also a Git administrator, execute uncontrolled code. Tuleap Community Edition 14.8.99.60, Tuleap Enterprise Edition 14.8-3, and Tuleap Enterprise Edition 14.7-7 contain a patch for this issue.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/Enalean/tuleap/commit/6840529def97f564844e810e5a7c5bf837cf58d5; https://github.com/Enalean/tuleap/security/advisories/GHSA-6prc-j58r-fmjq; https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=6840529def97f564844e810e5a7c5bf837cf58d5
CVE: CVE-2023-32687
Published: 2023-05-29
Description: tgstation-server is a toolset to manage production BYOND servers. Starting in version 4.7.0 and prior to 5.12.1, instance users with the list chat bots permission can read chat bot connections strings without the associated permission. This issue is patched in version 5.12.1. As a workaround, remove the list chat bots permission from users that should not have the ability to view connection strings. Invalidate any credentials previously stored for safety.
CVSS Score: 7.7 (HIGH)
CWE: CWE-522, CWE-522
References: https://github.com/tgstation/tgstation-server/pull/1487; https://github.com/tgstation/tgstation-server/releases/tag/tgstation-server-v5.12.1; https://github.com/tgstation/tgstation-server/security/advisories/GHSA-rv76-495p-g7cp
CVE: CVE-2014-125102
Published: 2023-05-29
Description: A vulnerability classified as problematic was found in Bestwebsoft Relevant Plugin up to 1.0.7 on WordPress. Affected by this vulnerability is an unknown functionality of the component Thumbnail Handler. The manipulation leads to information disclosure. The attack can be launched remotely. Upgrading to version 1.0.8 is able to address this issue. The identifier of the patch is 860d[PII_REDACTED]cf0f5f97364c1f51a888f523c3. It is recommended to upgrade the affected component. The identifier VDB-230113 was assigned to this vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/wp-plugins/relevant/commit/860d[PII_REDACTED]cf0f5f97364c1f51a888f523c3; https://vuldb.com/?ctiid.230113; https://vuldb.com/?id.230113
CVE: CVE-2023-27988
Published: 2023-05-30
Description: The post-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.13)C0 could allow an authenticated attacker with administrator privileges to execute some operating system (OS) commands on an affected device remotely.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-post-authentication-command-injection-vulnerability-in-nas-products; https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-post-authentication-command-injection-vulnerability-in-nas-products
CVE: CVE-2023-32691
Published: 2023-05-30
Description: gost (GO Simple Tunnel) is a simple tunnel written in golang. Sensitive secrets such as passwords, token and API keys should be compared only using a constant-time comparison function. Untrusted input, sourced from a HTTP header, is compared directly with a secret. Since this comparison is not secure, an attacker can mount a side-channel timing attack to guess the password. As a workaround, this can be easily fixed using a constant time comparing function such as `crypto/subtle`'s `ConstantTimeCompare`. 

CVSS Score: 5.9 (MEDIUM)
CWE: CWE-203, CWE-203
References: https://github.com/ginuerzh/gost/blob/1c62376e0880e4094bd3731e06bd4f7842638f6a/auth.go#L46; https://github.com/ginuerzh/gost/security/advisories/GHSA-qjrq-hm79-49ww; https://github.com/ginuerzh/gost/blob/1c62376e0880e4094bd3731e06bd4f7842638f6a/auth.go#L46
CVE: CVE-2023-32692
Published: 2023-05-30
Description: CodeIgniter is a PHP full-stack web framework. This vulnerability allows attackers to execute arbitrary code when you use Validation Placeholders. The vulnerability exists in the Validation library, and validation methods in the controller and in-model validation are also vulnerable because they use the Validation library internally. This issue is patched in version 4.3.5.

CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94, CWE-94
References: https://github.com/codeigniter4/CodeIgniter4/blob/develop/CHANGELOG.md; https://github.com/codeigniter4/CodeIgniter4/security/advisories/GHSA-m6m8-6gq8-c9fj; https://github.com/codeigniter4/CodeIgniter4/blob/develop/CHANGELOG.md
CVE: CVE-2023-32698
Published: 2023-05-30
Description: nFPM is an alternative to fpm. The file permissions on the checked-in files were not maintained. Hence, when nfpm packaged 
the files (without extra config for enforcing it’s own permissions) files could go out with bad permissions (chmod 666 or 777). Anyone using nfpm for creating packages without checking/setting file permissions before packaging could result in bad permissions for files/folders.
CVSS Score: 7.1 (HIGH)
CWE: CWE-276, CWE-276
References: https://github.com/goreleaser/nfpm/commit/ed9abdf63d5012cc884f2a83b4ab2b42b3680d30; https://github.com/goreleaser/nfpm/releases/tag/v2.29.0; https://github.com/goreleaser/nfpm/security/advisories/GHSA-w7jw-q4fg-qc4c
CVE: CVE-2023-34204
Published: 2023-05-30
Description: imapsync through 2.229 uses predictable paths under /tmp and /var/tmp in its default mode of operation. Both of these are typically world-writable, and thus (for example) an attacker can modify imapsync's cache and overwrite files belonging to the user who runs it.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-59, CWE-59
References: https://github.com/imapsync/imapsync/issues/399; https://github.com/imapsync/imapsync/issues/399
CVE: CVE-2023-34205
Published: 2023-05-30
Description: In Moov signedxml through 1.0.0, parsing the raw XML (as received) can result in different output than parsing the canonicalized XML. Thus, signature validation can be bypassed via a Signature Wrapping attack (aka XSW).
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-347, CWE-347
References: https://github.com/moov-io/signedxml/issues/23; https://github.com/moov-io/signedxml/issues/23
CVE: CVE-2023-26130
Published: 2023-05-30
Description: Versions of the package yhirose/cpp-httplib before 0.12.4 are vulnerable to CRLF Injection when untrusted user input is used to set the content-type header in the HTTP .Patch, .Post, .Put and .Delete requests. This can lead to logical errors and other misbehaviors.**Note:** This issue is present due to an incomplete fix for [CVE-2020-11709](https://security.snyk.io/vuln/SNYK-UNMANAGED-YHIROSECPPHTTPLIB-2366507).
CVSS Score: 7.5 (HIGH)
CWE: CWE-93, CWE-74, CWE-77
References: https://gist.github.com/dellalibera/094aece17a86069a7d27f93c8aba2280; https://github.com/yhirose/cpp-httplib/commit/5b397d455d25a391ba346863830c1949627b4d08; https://github.com/yhirose/cpp-httplib/releases/tag/v0.12.4
CVE: CVE-2023-32685
Published: 2023-05-30
Description: Kanboard is project management software that focuses on the Kanban methodology. Due to improper handling of elements under the `contentEditable` element, maliciously crafted clipboard content can inject arbitrary HTML tags into the DOM. A low-privileged attacker with permission to attach a document on a vulnerable Kanboard instance can trick the victim into pasting malicious screenshot data and achieve cross-site scripting if CSP is improperly configured. This issue has been patched in version 1.2.29.

CVSS Score: 4.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/kanboard/kanboard/commit/26b6eebb78d4306e48b836a58f7c386251aa2bc7; https://github.com/kanboard/kanboard/commit/c9c[PII_REDACTED]0c43493b80fd599b4d096cb713; https://github.com/kanboard/kanboard/security/advisories/GHSA-hjmw-gm82-r4gv
CVE: CVE-2023-33175
Published: 2023-05-30
Description: ToUI is a Python package for creating user interfaces (websites and desktop apps) from HTML. ToUI is using Flask-Caching (SimpleCache) to store user variables. Websites that use `Website.user_vars` property. It affects versions 2.0.1 to 2.4.0. This issue has been patched in version 2.4.1.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-914, CWE-913
References: https://github.com/mubarakalmehairbi/ToUI/releases/tag/v2.4.1; https://github.com/mubarakalmehairbi/ToUI/security/advisories/GHSA-hh7j-pg39-q563; https://github.com/mubarakalmehairbi/ToUI/releases/tag/v2.4.1
CVE: CVE-2023-33182
Published: 2023-05-30
Description: Contacts app for Nextcloud easily syncs contacts from various devices with your Nextcloud and allows editing. The unsanitized SVG is converted to a JavaScript blob (in memory data) that the Avatar can't render. Due to this constellation the missing sanitization does not seem to be exploitable. It is recommended that the Contacts app is upgraded to 5.0.3 or 4.2.4


CVSS Score: 0.0 (NONE)
CWE: CWE-20
References: https://github.com/nextcloud/contacts/pull/3199; https://github.com/nextcloud/security-advisories/security/advisories/GHSA-hxr6-cx85-gcjx; https://hackerone.com/reports/1789602
CVE: CVE-2023-33198
Published: 2023-05-30
Description: tgstation-server is a production scale tool for BYOND server management. The DreamMaker API (DMAPI) chat channel cache can possibly be poisoned by a tgstation-server (TGS) restart and reattach. This can result in sending chat messages to one of any of the configured IRC or Discord channels for the instance on enabled chat bots. This lasts until the instance's chat channels are updated in TGS or DreamDaemon is restarted. TGS chat commands are unaffected, custom or otherwise.

CVSS Score: 6.1 (MEDIUM)
CWE: CWE-941
References: https://github.com/tgstation/tgstation-server/pull/1493; https://github.com/tgstation/tgstation-server/releases/tag/tgstation-server-v5.12.2; https://github.com/tgstation/tgstation-server/security/advisories/GHSA-p2xj-w57r-6f5m
CVE: CVE-2023-33245
Published: 2023-05-30
Description: Minecraft through 1.19 and 1.20 pre-releases before 7 (Java) allow arbitrary file overwrite, and possibly code execution, via crafted world data that contains a symlink.
CVSS Score: 8.8 (HIGH)
CWE: CWE-59, CWE-59
References: https://help.minecraft.net/hc/en-us/articles/[PII_REDACTED]181; https://vuln.ryotak.net/advisories/67; https://www.minecraft.net/ja-jp/article/minecraft-1-20-pre-release-7
CVE: CVE-2023-2970
Published: 2023-05-30
Description: A vulnerability classified as problematic was found in MindSpore 2.0.0-alpha/2.0.0-rc1. This vulnerability affects the function JsonHelper::UpdateArray of the file mindspore/ccsrc/minddata/dataset/util/json_helper.cc. The manipulation leads to memory corruption. The name of the patch is 30f4729ea2c01e1ed437ba92a81e2fc098d608a9. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-230176.
CVSS Score: 3.5 (LOW)
CWE: CWE-119
References: https://gitee.com/mindspore/mindspore/commit/30f4729ea2c01e1ed437ba92a81e2fc098d608a9; https://gitee.com/mindspore/mindspore/issues/I73DOS; https://vuldb.com/?ctiid.230176
CVE: CVE-2023-33183
Published: 2023-05-30
Description: Calendar app for Nextcloud easily sync events from various devices with your Nextcloud. Some internal paths of the website are disclosed when the SMTP server is unavailable. It is recommended that the Calendar app is updated to 3.5.5 or 4.2.3


CVSS Score: 2.6 (LOW)
CWE: CWE-285
References: https://github.com/nextcloud/calendar/pull/4938; https://github.com/nextcloud/security-advisories/security/advisories/GHSA-2792-2734-hr7j; https://github.com/nextcloud/calendar/pull/4938
CVE: CVE-2023-33186
Published: 2023-05-30
Description: Zulip is an open-source team collaboration tool with unique topic-based threading that combines the best of email and chat to make remote work productive and delightful. The main development branch of Zulip Server from May 2, 2023 and later, including beta versions 7.0-beta1 and 7.0-beta2, is vulnerable to a cross-site scripting vulnerability in tooltips on the message feed. An attacker who can send messages could maliciously craft a topic for the message, such that a victim who hovers the tooltip for that topic in their message feed triggers execution of JavaScript code controlled by the attacker.
CVSS Score: 8.2 (HIGH)
CWE: CWE-79, CWE-79
References: https://github.com/zulip/zulip/commit/03cfb3d9fe61c975d133121ec31a7357f0c9e18f; https://github.com/zulip/zulip/commit/3ca131743b00f42bad8edbac4ef92656d954c629; https://github.com/zulip/zulip/pull/25370
CVE: CVE-2023-33189
Published: 2023-05-30
Description: Pomerium is an identity and context-aware access proxy. With specially crafted requests, incorrect authorization decisions may be made by Pomerium. This issue has been patched in versions 0.17.4, 0.18.1, 0.19.2, 0.20.1, 0.21.4 and 0.22.2.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-285
References: https://github.com/pomerium/pomerium/commit/d315e683357a9b587ba9ef399a8813bcc52fdebb; https://github.com/pomerium/pomerium/releases/tag/v0.17.4; https://github.com/pomerium/pomerium/releases/tag/v0.18.1
CVE: CVE-2023-33193
Published: 2023-05-30
Description: Emby Server is a user-installable home media server which stores and organizes a user's media files of virtually any format and makes them available for viewing at home and abroad on a broad range of client devices. This vulnerability may allow administrative access to an Emby Server system, depending on certain user account settings. By spoofing certain headers which are intended for interoperation with reverse proxy servers, it may be possible to affect the local/non-local network determination to allow logging in without password or to view a list of user accounts which may have no password configured. Impacted are all Emby Server system which are publicly accessible and where the administrator hasn't tightened the account login configuration for administrative users. This issue has been patched in Emby Server Beta version 4.8.31 and Emby Server version 4.7.12.


CVSS Score: 9.1 (CRITICAL)
CWE: CWE-444, CWE-444
References: https://github.com/EmbySupport/security/security/advisories/GHSA-fffj-6fr6-3fgf; https://github.com/EmbySupport/security/security/advisories/GHSA-fffj-6fr6-3fgf
CVE: CVE-2023-33191
Published: 2023-05-30
Description: Kyverno is a policy engine designed for Kubernetes. Kyverno seccomp control can be circumvented. Users of the podSecurity `validate.podSecurity` subrule in Kyverno 1.9.2 and 1.9.3 are vulnerable. This issue was patched in version 1.9.4.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-284
References: https://github.com/kyverno/kyverno/pull/7263; https://github.com/kyverno/kyverno/releases/tag/v1.9.4; https://github.com/kyverno/kyverno/security/advisories/GHSA-33hq-f2mf-jm3c
CVE: CVE-2023-33955
Published: 2023-05-30
Description: Minio Console is the UI for MinIO Object Storage. Unicode RIGHT-TO-LEFT OVERRIDE characters can be used to mask the original filename. This issue has been patched in version 0.28.0.


CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/minio/console/commit/17e791afb90c9ad27c65f63c6be14f2f6a3a9d60; https://github.com/minio/console/releases/tag/v0.28.0; https://github.com/minio/console/security/advisories/GHSA-jv3f-7m33-qp65
CVE: CVE-2022-4676
Published: 2023-05-30
Description: The OSM WordPress plugin through 6.01 does not validate and escape some of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/1df3c17c-990d-4074-b1d5-b26da880d88e; https://wpscan.com/vulnerability/1df3c17c-990d-4074-b1d5-b26da880d88e
CVE: CVE-2023-0329
Published: 2023-05-30
Description: The Elementor Website Builder WordPress plugin before 3.12.2 does not properly sanitize and escape the Replace URL parameter in the Tools module before using it in a SQL statement, leading to a SQL injection exploitable by users with the Administrator role.
CVSS Score: 7.2 (HIGH)
References: http://packetstormsecurity.com/files/175639/Elementor-Website-Builder-SQL-Injection.html; https://wpscan.com/vulnerability/a875836d-77f4-4306-b275-2b60efff1493; http://packetstormsecurity.com/files/175639/Elementor-Website-Builder-SQL-Injection.html
CVE: CVE-2023-0443
Published: 2023-05-30
Description: The AnyWhere Elementor WordPress plugin before 1.2.8 discloses a Freemius Secret Key which could be used by an attacker to purchase the pro subscription using test credit card numbers without actually paying the amount. Such key has been revoked.
CVSS Score: 5.3 (MEDIUM)
References: https://wpscan.com/vulnerability/471f3226-8f90-43d1-b826-f11ef4bbd602; https://wpscan.com/vulnerability/471f3226-8f90-43d1-b826-f11ef4bbd602
CVE: CVE-2023-0733
Published: 2023-05-30
Description: The Newsletter Popup WordPress plugin through 1.2 does not sanitise and escape some of its settings, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks
CVSS Score: 6.1 (MEDIUM)
References: https://wpscan.com/vulnerability/fed1e184-ff56-44fe-9876-d17c0156447a; https://wpscan.com/vulnerability/fed1e184-ff56-44fe-9876-d17c0156447a
CVE: CVE-2023-0766
Published: 2023-05-30
Description: The Newsletter Popup WordPress plugin through 1.2 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks as the wp_newsletter_show_localrecord page is not protected with a nonce.
CVSS Score: 8.8 (HIGH)
References: https://wpscan.com/vulnerability/90a1976c-0348-41ea-90b4-f7a5d9306c88; https://wpscan.com/vulnerability/90a1976c-0348-41ea-90b4-f7a5d9306c88
CVE: CVE-2023-1524
Published: 2023-05-30
Description: The Download Manager WordPress plugin before 3.2.71 does not adequately validate passwords for password-protected files. Upon validation, a master key is generated and exposed to the user, which may be used to download any password-protected file on the server, allowing a user to download any file with the knowledge of any one file's password.
CVSS Score: 6.5 (MEDIUM)
References: https://wpscan.com/vulnerability/3802d15d-9bfd-4762-ab8a[PII_REDACTED]8e; https://wpscan.com/vulnerability/3802d15d-9bfd-4762-ab8a[PII_REDACTED]8e
CVE: CVE-2023-1938
Published: 2023-05-30
Description: The WP Fastest Cache WordPress plugin before 1.1.5 does not have CSRF check in an AJAX action, and does not validate user input before using it in the wp_remote_get() function, leading to a Blind SSRF issue
CVSS Score: 8.8 (HIGH)
References: https://wpscan.com/vulnerability/92b1c6d8-51db-46aa-bde6-abdfb091aab5; https://wpscan.com/vulnerability/92b1c6d8-51db-46aa-bde6-abdfb091aab5
CVE: CVE-2023-2023
Published: 2023-05-30
Description: The Custom 404 Pro WordPress plugin before 3.7.3 does not escape some URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/8859843a-a8c2-4f7a-8372-67049d6ea317; https://wpscan.com/vulnerability/8859843a-a8c2-4f7a-8372-67049d6ea317
CVE: CVE-2023-2111
Published: 2023-05-30
Description: The Fast & Effective Popups & Lead-Generation for WordPress plugin before 2.1.4 concatenates user input into an SQL query without escaping it first in the plugin's report API endpoint, which could allow administrators in multi-site configuration to leak sensitive information from the site's database.
CVSS Score: 4.9 (MEDIUM)
References: https://wpscan.com/vulnerability/7a0bdd47-c339-489d-9443-f173a83447f2; https://wpscan.com/vulnerability/7a0bdd47-c339-489d-9443-f173a83447f2
CVE: CVE-2023-2113
Published: 2023-05-30
Description: The Autoptimize WordPress plugin before 3.1.7 does not sanitise and escape the settings imported from a previous export, allowing high privileged users (such as an administrator) to inject arbitrary javascript into the admin panel, even when the unfiltered_html capability is disabled, such as in a multisite setup.
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/ddb4c95d-bbee-4095-aed6-25f6b8e63011; https://wpscan.com/vulnerability/ddb4c95d-bbee-4095-aed6-25f6b8e63011