deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-43412
Published: 2021-11-07
Description: An issue was discovered in GNU Hurd before 0.9 20210404-9. libports accepts fake notification messages from any client on any port, which can lead to port use-after-free. This can be exploited for local privilege escalation to get full root access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://lists.gnu.org/archive/html/bug-hurd/2021-05/msg00079.html; https://www.mail-archive.com/bug-hurd%40gnu.org/msg32116.html; https://lists.gnu.org/archive/html/bug-hurd/2021-05/msg00079.html
CVE: CVE-2021-43413
Published: 2021-11-07
Description: An issue was discovered in GNU Hurd before 0.9 20210404-9. A single pager port is shared among everyone who mmaps a file, allowing anyone to modify any files that they can read. This can be trivially exploited to get full root access.
CVSS Score: 8.8 (HIGH)
References: https://lists.gnu.org/archive/html/bug-hurd/2002-11/msg00263.html; https://lists.gnu.org/archive/html/bug-hurd/2005-06/msg00191.html; https://lists.gnu.org/archive/html/bug-hurd/2021-05/msg00079.html
CVE: CVE-2021-43414
Published: 2021-11-07
Description: An issue was discovered in GNU Hurd before 0.9 20210404-9. The use of an authentication protocol in the proc server is vulnerable to man-in-the-middle attacks, which can be exploited for local privilege escalation to get full root access.
CVSS Score: 7.0 (HIGH)
CWE: CWE-287
References: https://lists.gnu.org/archive/html/bug-hurd/2021-05/msg00079.html; https://www.mail-archive.com/bug-hurd%40gnu.org/msg32114.html; https://lists.gnu.org/archive/html/bug-hurd/2021-05/msg00079.html
CVE: CVE-2021-31599
Published: 2021-11-08
Description: An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. A reports (.prpt) file allows the inclusion of BeanShell scripts to ease the production of complex reports. An authenticated user can run arbitrary code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://packetstormsecurity.com/files/164772/Pentaho-Business-Analytics-Pentaho-Business-Server-9.1-Remote-Code-Execution.html; https://www.hitachi.com/hirt/security/index.html; http://packetstormsecurity.com/files/164772/Pentaho-Business-Analytics-Pentaho-Business-Server-9.1-Remote-Code-Execution.html
CVE: CVE-2021-31600
Published: 2021-11-08
Description: An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. They implement a series of web services using the SOAP protocol to allow scripting interaction with the backend server. An authenticated user (regardless of privileges) can list all valid usernames.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-552
References: http://packetstormsecurity.com/files/164787/Pentaho-Business-Analytics-Pentaho-Business-Server-9.1-User-Enumeration.html; https://www.hitachi.com/hirt/security/index.html; http://packetstormsecurity.com/files/164787/Pentaho-Business-Analytics-Pentaho-Business-Server-9.1-User-Enumeration.html
CVE: CVE-2021-31601
Published: 2021-11-08
Description: An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. They implement a series of web services using the SOAP protocol to allow scripting interaction with the backend server. An authenticated user (regardless of privileges) can list all databases connection details and credentials.
CVSS Score: 7.1 (HIGH)
References: http://packetstormsecurity.com/files/164779/Pentaho-Business-Analytics-Pentaho-Business-Server-9.1-Insufficient-Access-Control.html; https://www.hitachi.com/hirt/security/index.html; http://packetstormsecurity.com/files/164779/Pentaho-Business-Analytics-Pentaho-Business-Server-9.1-Insufficient-Access-Control.html
CVE: CVE-2021-31602
Published: 2021-11-08
Description: An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. The Security Model has different layers of Access Control. One of these layers is the applicationContext security, which is defined in the applicationContext-spring-security.xml file. The default configuration allows an unauthenticated user with no previous knowledge of the platform settings to extract pieces of information without possessing valid credentials.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-287
References: http://packetstormsecurity.com/files/164784/Pentaho-Business-Analytics-Pentaho-Business-Server-9.1-Authentication-Bypass.html; https://www.hitachi.com/hirt/security/index.html; http://packetstormsecurity.com/files/164784/Pentaho-Business-Analytics-Pentaho-Business-Server-9.1-Authentication-Bypass.html
CVE: CVE-2021-34684
Published: 2021-11-08
Description: Hitachi Vantara Pentaho Business Analytics through 9.1 allows an unauthenticated user to execute arbitrary SQL queries on any Pentaho data source and thus retrieve data from the related databases, as demonstrated by an api/repos/dashboards/editor URI.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/164791/Pentaho-Business-Analytics-Pentaho-Business-Server-9.1-SQL-Injection.html; https://www.hitachi.com/hirt/security/index.html; http://packetstormsecurity.com/files/164791/Pentaho-Business-Analytics-Pentaho-Business-Server-9.1-SQL-Injection.html
CVE: CVE-2021-34685
Published: 2021-11-08
Description: UploadService in Hitachi Vantara Pentaho Business Analytics through 9.1 does not properly verify uploaded user files, which allows an authenticated user to upload various files of different file types. Specifically, a .jsp file is not allowed, but a .jsp. file is allowed (and leads to remote code execution).
CVSS Score: 2.7 (LOW)
CWE: CWE-434
References: http://packetstormsecurity.com/files/164775/Pentaho-Business-Analytics-Pentaho-Business-Server-9.1-Filename-Bypass.html; https://www.hitachi.com/hirt/security/index.html; http://packetstormsecurity.com/files/164775/Pentaho-Business-Analytics-Pentaho-Business-Server-9.1-Filename-Bypass.html
CVE: CVE-2021-42072
Published: 2021-11-08
Description: An issue was discovered in Barrier before 2.4.0. The barriers component (aka the server-side implementation of Barrier) does not sufficiently verify the identify of connecting clients. Clients can thus exploit weaknesses in the provided protocol to cause denial-of-service or stage further attacks that could lead to information leaks or integrity corruption.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: http://www.openwall.com/lists/oss-security/2021/11/02/4; https://github.com/debauchee/barrier/releases/tag/v2.4.0; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CIEVNCFEFO7L3NTM4VUZB3WKYYCBTFCI/
CVE: CVE-2021-42073
Published: 2021-11-08
Description: An issue was discovered in Barrier before 2.4.0. An attacker can enter an active session state with the barriers component (aka the server-side implementation of Barrier) simply by supplying a client label that identifies a valid client configuration. This label is "Unnamed" by default but could instead be guessed from hostnames or other publicly available information. In the active session state, an attacker can capture input device events from the server, and also modify the clipboard content on the server.
CVSS Score: 8.2 (HIGH)
CWE: CWE-384
References: http://www.openwall.com/lists/oss-security/2021/11/02/4; https://github.com/debauchee/barrier/commit/229abab99f39f11624e5651f819e7f1f8eddedcc; https://github.com/debauchee/barrier/commit/b5adc93e2bd74cb094f91ff595c07f321a489f3e
CVE: CVE-2021-42074
Published: 2021-11-08
Description: An issue was discovered in Barrier before 2.3.4. An unauthenticated attacker can cause a segmentation fault in the barriers component (aka the server-side implementation of Barrier) by quickly opening and closing TCP connections while sending a Hello message for each TCP session.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: http://www.openwall.com/lists/oss-security/2021/11/02/4; https://github.com/debauchee/barrier/releases/tag/v2.3.4; http://www.openwall.com/lists/oss-security/2021/11/02/4
CVE: CVE-2021-42075
Published: 2021-11-08
Description: An issue was discovered in Barrier before 2.3.4. The barriers component (aka the server-side implementation of Barrier) does not correctly close file descriptors for established TCP connections. An unauthenticated remote attacker can thus cause file descriptor exhaustion in the server process, leading to denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-772
References: http://www.openwall.com/lists/oss-security/2021/11/02/4; https://github.com/debauchee/barrier/releases/tag/v2.3.4; http://www.openwall.com/lists/oss-security/2021/11/02/4
CVE: CVE-2021-42076
Published: 2021-11-08
Description: An issue was discovered in Barrier before 2.3.4. An attacker can cause memory exhaustion in the barriers component (aka the server-side implementation of Barrier) and barrierc by sending long TCP messages.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.openwall.com/lists/oss-security/2021/11/02/4; https://github.com/debauchee/barrier/releases/tag/v2.3.4; http://www.openwall.com/lists/oss-security/2021/11/02/4
CVE: CVE-2021-42077
Published: 2021-11-08
Description: PHP Event Calendar before 2021-09-03 allows SQL injection, as demonstrated by the /server/ajax/user_manager.php username parameter. This can be used to execute SQL statements directly on the database, allowing an adversary in some cases to completely compromise the database system. It can also be used to bypass the login form.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/164777/PHP-Event-Calendar-Lite-Edition-SQL-Injection.html; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-048.txt; http://packetstormsecurity.com/files/164777/PHP-Event-Calendar-Lite-Edition-SQL-Injection.html
CVE: CVE-2021-42078
Published: 2021-11-08
Description: PHP Event Calendar through 2021-11-04 allows persistent cross-site scripting (XSS), as demonstrated by the /server/ajax/events_manager.php title parameter. This can be exploited by an adversary in multiple ways, e.g., to perform actions on the page in the context of other users, or to deface the site.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2021/Nov/24; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-049.txt; http://seclists.org/fulldisclosure/2021/Nov/24
CVE: CVE-2021-42370
Published: 2021-11-08
Description: A password mismanagement situation exists in XoruX LPAR2RRD and STOR2RRD before 7.30 because cleartext information is present in HTML password input fields in the device properties. (Viewing the passwords requires configuring a web browser to display HTML password input fields.)
CVSS Score: 7.5 (HIGH)
CWE: CWE-312
References: https://github.com/orangecertcc/security-research/security/advisories/GHSA-f3qp-4xqq-2wjx; https://lpar2rrd.com/note730.php; https://stor2rrd.com/note730.php
CVE: CVE-2021-42371
Published: 2021-11-08
Description: lpar2rrd is a hardcoded system account in XoruX LPAR2RRD and STOR2RRD before 7.30.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-922
References: https://github.com/orangecertcc/security-research/security/advisories/GHSA-p2fq-9h5j-x6w5; https://lpar2rrd.com/note730.php; https://stor2rrd.com/note730.php
CVE: CVE-2021-42372
Published: 2021-11-08
Description: A shell command injection in the HW Events SNMP community in XoruX LPAR2RRD and STOR2RRD before 7.30 allows authenticated remote attackers to execute arbitrary shell commands as the user running the service.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://github.com/orangecertcc/security-research/security/advisories/GHSA-xfw3-pgp3-5j2p; https://lpar2rrd.com/note730.php; https://stor2rrd.com/note730.php
CVE: CVE-2021-41771
Published: 2021-11-08
Description: ImportedSymbols in debug/macho (for Open or OpenFat) in Go before 1.16.10 and 1.17.x before 1.17.3 Accesses a Memory Location After the End of a Buffer, aka an out-of-bounds slice situation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://cert-portal.siemens.com/productcert/pdf/ssa-744259.pdf; https://groups.google.com/g/golang-announce/c/0fM21h43arc; https://lists.debian.org/debian-lts-announce/2022/01/msg00016.html
CVE: CVE-2021-41772
Published: 2021-11-08
Description: Go before 1.16.10 and 1.17.x before 1.17.3 allows an archive/zip Reader.Open panic via a crafted ZIP archive containing an invalid name or an empty filename field.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://cert-portal.siemens.com/productcert/pdf/ssa-744259.pdf; https://groups.google.com/g/golang-announce/c/0fM21h43arc; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4OFS3M3OFB24SWPTIAPARKGPUMQVUY6Z/
CVE: CVE-2021-29243
Published: 2021-11-08
Description: Cloudera Manager 5.x, 6.x, 7.1.x, 7.2.x, and 7.3.x allows XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html; https://my.cloudera.com/knowledge/TSB-2021-488-Cloudera-Manager-is-vulnerable-to-Cross-Site?id=322833; https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html
CVE: CVE-2021-29994
Published: 2021-11-08
Description: Cloudera Hue 4.6.0 allows XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html; https://github.com/cloudera/hue; https://my.cloudera.com/knowledge/TSB-2021-487-Cloudera-Hue-is-vulnerable-to-Cross-Site?id=324634
CVE: CVE-2021-32481
Published: 2021-11-08
Description: Cloudera Hue 4.6.0 allows XSS via the type parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#hue; https://my.cloudera.com/knowledge/TSB-2021-487-Cloudera-Hue-is-vulnerable-to-Cross-Site?id=324634; https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#hue
CVE: CVE-2021-32482
Published: 2021-11-08
Description: Cloudera Manager 5.x, 6.x, 7.1.x, 7.2.x, and 7.3.x allows XSS via the path parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#cloudera_manager; https://my.cloudera.com/knowledge/TSB-2021-488-Cloudera-Manager-is-vulnerable-to-Cross-Site?id=322833; https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#cloudera_manager
CVE: CVE-2021-22051
Published: 2021-11-08
Description: Applications using Spring Cloud Gateway are vulnerable to specifically crafted requests that could make an extra request on downstream services. Users of affected versions should apply the following mitigation: 3.0.x users should upgrade to 3.0.5+, 2.2.x users should upgrade to 2.2.10.RELEASE or newer.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863
References: https://tanzu.vmware.com/security/cve-2021-22051; https://tanzu.vmware.com/security/cve-2021-22051
CVE: CVE-2021-30132
Published: 2021-11-08
Description: Cloudera Manager 7.2.4 has Incorrect Access Control, allowing Escalation of Privileges.
CVSS Score: 9.8 (CRITICAL)
References: https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html; https://my.cloudera.com/knowledge/TSB-2021-491-Authorization-Bypass-in-Cloudera-Manager?id=314482; https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html
CVE: CVE-2021-32483
Published: 2021-11-08
Description: Cloudera Manager 7.2.4 has Incorrect Access Control, allowing Escalation of Privileges to view the restricted Dashboard.
CVSS Score: 5.3 (MEDIUM)
References: https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#cloudera_manager; https://my.cloudera.com/knowledge/TSB-2021-491-Authorization-Bypass-in-Cloudera-Manager?id=314482; https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#cloudera_manager
CVE: CVE-2021-37850
Published: 2021-11-08
Description: ESET was made aware of a vulnerability in its consumer and business products for macOS that enables a user logged on to the system to stop the ESET daemon, effectively disabling the protection of the ESET security product until a system reboot.
CVSS Score: 5.5 (MEDIUM)
References: https://support.eset.com/en/ca8151; https://support.eset.com/en/ca8151
CVE: CVE-2021-25979
Published: 2021-11-08
Description: Apostrophe CMS versions prior to 3.3.1 did not invalidate existing login sessions when disabling a user account or changing the password, creating a situation in which a device compromised by a third party could not be locked out by those means. As a mitigation for older releases the user account in question can be archived (3.x) or moved to the trash (2.x and earlier) which does disable the existing session.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-613, CWE-613
References: https://github.com/apostrophecms/apostrophe/commit/c211b211f9f4303a77a307cf41aac9b4ef8d2c7c; https://github.com/apostrophecms/apostrophe/commit/c211b211f9f4303a77a307cf41aac9b4ef8d2c7c
CVE: CVE-2021-28022
Published: 2021-11-08
Description: Blind SQL injection in the login form in ServiceTonic Helpdesk software < 9.0.35937 allows attacker to exfiltrate information via specially crafted HQL-compatible time-based SQL queries.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://www.servicetonic.com/; https://www.srlabs.de/bites/chaining-three-zero-day-exploits-in-itsm-software-servicetonic-for-remote-code-execution; https://www.servicetonic.com/
CVE: CVE-2021-28023
Published: 2021-11-08
Description: Arbitrary file upload in Service import feature in ServiceTonic Helpdesk software version < 9.0.35937 allows a malicious user to execute JSP code by uploading a zip that extracts files in relative paths.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://www.servicetonic.com/; https://www.srlabs.de/bites/chaining-three-zero-day-exploits-in-itsm-software-servicetonic-for-remote-code-execution; https://www.servicetonic.com/
CVE: CVE-2021-28024
Published: 2021-11-08
Description: Unauthorized system access in the login form in ServiceTonic Helpdesk software version < 9.0.35937 allows attacker to login without using a password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-330
References: https://www.servicetonic.com/; https://www.srlabs.de/bites/chaining-three-zero-day-exploits-in-itsm-software-servicetonic-for-remote-code-execution; https://www.servicetonic.com/
CVE: CVE-2021-39182
Published: 2021-11-08
Description: EnroCrypt is a Python module for encryption and hashing. Prior to version 1.1.4, EnroCrypt used the MD5 hashing algorithm in the hashing file. Beginners who are unfamiliar with hashes can face problems as MD5 is considered an insecure hashing algorithm. The vulnerability is patched in v1.1.4 of the product. As a workaround, users can remove the `MD5` hashing function from the file `hashing.py`.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327, CWE-328, CWE-916, CWE-326
References: https://github.com/Morgan-Phoenix/EnroCrypt/commit/e652d56ac60eadfc26489ab83927af13a9b9d8ce; https://github.com/Morgan-Phoenix/EnroCrypt/security/advisories/GHSA-35m5-8cvj-8783; https://github.com/Morgan-Phoenix/EnroCrypt/commit/e652d56ac60eadfc26489ab83927af13a9b9d8ce
CVE: CVE-2021-41733
Published: 2021-11-08
Description: Oppia 3.1.4 does not verify that certain URLs are valid before navigating to them.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://github.com/oppia/oppia/pull/13892; https://github.com/oppia/oppia/pull/13892
CVE: CVE-2021-42770
Published: 2021-11-08
Description: A Cross-site scripting (XSS) vulnerability was discovered in OPNsense before 21.7.4 via the LDAP attribute return in the authentication tester.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://cert.orange.com; https://github.com/orangecertcc/security-research/security/advisories/GHSA-r32j-xgg3-w2rw; https://opnsense.org/opnsense-21-7-4-released/
CVE: CVE-2020-4152
Published: 2021-11-08
Description: IBM QRadar Network Security 5.4.0 and 5.5.0 transmits sensitive or security-critical data in cleartext in a communication channel that can be obtained using man in the middle techniques. IBM X-Force ID: 17467.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-319
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/174267; https://www.ibm.com/support/pages/node/6514403; https://exchange.xforce.ibmcloud.com/vulnerabilities/174267
CVE: CVE-2020-4153
Published: 2021-11-08
Description: IBM QRadar Network Security 5.4.0 and 5.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 174269.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/174269; https://www.ibm.com/support/pages/node/6514403; https://exchange.xforce.ibmcloud.com/vulnerabilities/174269
CVE: CVE-2020-4160
Published: 2021-11-08
Description: IBM QRadar Network Security 5.4.0 and 5.5.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 174340.
CVSS Score: 5.9 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/174340; https://www.ibm.com/support/pages/node/6514403; https://exchange.xforce.ibmcloud.com/vulnerabilities/174340
CVE: CVE-2021-29735
Published: 2021-11-08
Description: IBM Security Guardium 10.5, 10.6, 11.0, 11.1, 11.2, and 11.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/201239; https://www.ibm.com/support/pages/node/6514007; https://exchange.xforce.ibmcloud.com/vulnerabilities/201239
CVE: CVE-2021-29843
Published: 2021-11-08
Description: IBM MQ 9.1 LTS, 9.1 CD, 9.2 LTS, and 9.2CD is vulnerable to a denial of service attack caused by an issue processing message properties. IBM X-Force ID: 205203.
CVSS Score: 6.5 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/205203; https://www.ibm.com/support/pages/node/6513681; https://exchange.xforce.ibmcloud.com/vulnerabilities/205203
CVE: CVE-2021-24537
Published: 2021-11-08
Description: The Similar Posts WordPress plugin through 3.1.5 allow high privilege users to execute arbitrary PHP code in an hardened environment (ie with DISALLOW_FILE_EDIT, DISALLOW_FILE_MODS and DISALLOW_UNFILTERED_HTML set to true) via the 'widget_rrm_similar_posts_condition' widget setting of the plugin.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://wpscan.com/vulnerability/0d6b46cb-5244-486f-ad70-4023907ac9eb; https://wpscan.com/vulnerability/0d6b46cb-5244-486f-ad70-4023907ac9eb
CVE: CVE-2021-24575
Published: 2021-11-08
Description: The School Management System – WPSchoolPress WordPress plugin before 2.1.10 does not properly sanitize or use prepared statements before using POST variable in SQL queries, leading to SQL injection in multiple actions available to various authenticated users, from simple subscribers/students to teachers and above.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://wpscan.com/vulnerability/83c9c3af-9eca-45e0-90d7-edc69e616e6a; https://wpscan.com/vulnerability/83c9c3af-9eca-45e0-90d7-edc69e616e6a
CVE: CVE-2021-24594
Published: 2021-11-08
Description: The Translate WordPress – Google Language Translator WordPress plugin before 6.0.12 does not sanitise and escape some of its settings before outputting it in various pages, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2607480/; https://wpscan.com/vulnerability/cf7b0f07-8b9b-40a1-ba7b-e8d34f515a6b; https://plugins.trac.wordpress.org/changeset/2607480/