deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-24607
Published: 2021-11-08
Description: The Storefront Footer Text WordPress plugin through 1.0.1 does not sanitize and escape the "Footer Credit Text" added to pages, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered-html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/efa7d91a-447b-4fd8-aa21-5364b177fee9; https://wpscan.com/vulnerability/efa7d91a-447b-4fd8-aa21-5364b177fee9
CVE: CVE-2021-24616
Published: 2021-11-08
Description: The AddToAny Share Buttons WordPress plugin before 1.7.48 does not escape its Image URL button setting, which could lead allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2609928/; https://wpscan.com/vulnerability/04eaf380-c345-425f-8800-142e3f4745a9; https://plugins.trac.wordpress.org/changeset/2609928/
CVE: CVE-2021-24625
Published: 2021-11-08
Description: The SpiderCatalog WordPress plugin through 1.7.3 does not sanitise or escape the 'parent' and 'ordering' parameters from the admin dashboard before using them in a SQL statement, leading to a SQL injection when adding a category
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://codevigilant.com/disclosure/2021/wp-plugin-catalog/; https://wpscan.com/vulnerability/33e4d7c6-fa6f-459f-84b9-732ec40088b8; https://codevigilant.com/disclosure/2021/wp-plugin-catalog/
CVE: CVE-2021-24626
Published: 2021-11-08
Description: The Chameleon CSS WordPress plugin through 1.2 does not have any CSRF and capability checks in all its AJAX calls, allowing any authenticated user, such as subscriber to call them and perform unauthorised actions. One of AJAX call, remove_css, also does not sanitise or escape the css_id POST parameter before using it in a SQL statement, leading to a SQL Injection
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-352, CWE-89, CWE-352
References: https://codevigilant.com/disclosure/2021/wp-plugin-chameleon-css/; https://wpscan.com/vulnerability/06cb6c14-99b8-45b6-be2e-f4dcca8a4165; https://codevigilant.com/disclosure/2021/wp-plugin-chameleon-css/
CVE: CVE-2021-24627
Published: 2021-11-08
Description: The G Auto-Hyperlink WordPress plugin through 1.0.1 does not sanitise or escape an 'id' GET parameter before using it in a SQL statement, to select data to be displayed in the admin dashboard, leading to an authenticated SQL injection
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://codevigilant.com/disclosure/2021/wp-plugin-g-auto-hyperlink/; https://wpscan.com/vulnerability/c04ea768-150f-41b8-b08c-78d1ae006bbb; https://codevigilant.com/disclosure/2021/wp-plugin-g-auto-hyperlink/
CVE: CVE-2021-24628
Published: 2021-11-08
Description: The Wow Forms WordPress plugin through 3.1.3 does not sanitise or escape a 'did' GET parameter before using it in a SQL statement, when deleting a form in the admin dashboard, leading to an authenticated SQL injection
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://codevigilant.com/disclosure/2021/wp-plugin-mwp-forms/; https://wpscan.com/vulnerability/d742ab35-4e2d-42a8-bebc-b953b2e10e3c; https://codevigilant.com/disclosure/2021/wp-plugin-mwp-forms/
CVE: CVE-2021-24629
Published: 2021-11-08
Description: The Post Content XMLRPC WordPress plugin through 1.0 does not sanitise or escape multiple GET/POST parameters before using them in SQL statements in the admin dashboard, leading to an authenticated SQL Injections
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://codevigilant.com/disclosure/2021/wp-plugin-post-content-xmlrpc/; https://wpscan.com/vulnerability/fb42980c-93e5-42d5-a478-c2b348eaea67; https://codevigilant.com/disclosure/2021/wp-plugin-post-content-xmlrpc/
CVE: CVE-2021-24630
Published: 2021-11-08
Description: The Schreikasten WordPress plugin through 0.14.18 does not sanitise or escape the id GET parameter before using it in SQL statements in the comments dashboard from various actions, leading to authenticated SQL Injections which can be exploited by users as low as author
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://codevigilant.com/disclosure/2021/wp-plugin-schreikasten/; https://wpscan.com/vulnerability/a0787dae-a4b7-4248-9960-aaffabfaeb9f; https://codevigilant.com/disclosure/2021/wp-plugin-schreikasten/
CVE: CVE-2021-24631
Published: 2021-11-08
Description: The Unlimited PopUps WordPress plugin through 4.5.3 does not sanitise or escape the did GET parameter before using it in a SQL statement, available to users as low as editor, leading to an authenticated SQL Injection
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://codevigilant.com/disclosure/2021/wp-plugin-unlimited-popups/; https://wpscan.com/vulnerability/9841176d-1d37-4636-9144-0ca42b6f3605; https://codevigilant.com/disclosure/2021/wp-plugin-unlimited-popups/
CVE: CVE-2021-24645
Published: 2021-11-08
Description: The Booking.com Product Helper WordPress plugin before 1.0.2 does not sanitize and escape Product Code when creating Product Shortcode, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/b15744de-bf56-4e84-9427-b5652d123c15; https://wpscan.com/vulnerability/b15744de-bf56-4e84-9427-b5652d123c15
CVE: CVE-2021-24646
Published: 2021-11-08
Description: The Booking.com Banner Creator WordPress plugin before 1.4.3 does not properly sanitize inputs when creating banners, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/36aae14e-4bdf-4da6-a0f9-d71935105d45; https://wpscan.com/vulnerability/36aae14e-4bdf-4da6-a0f9-d71935105d45
CVE: CVE-2021-24647
Published: 2021-11-08
Description: The Registration Forms – User profile, Content Restriction, Spam Protection, Payment Gateways, Invitation Codes WordPress plugin before 3.1.7.6 has a flaw in the social login implementation, allowing unauthenticated attacker to login as any user on the site by only knowing their user ID or username
CVSS Score: 8.1 (HIGH)
CWE: CWE-287
References: https://wpscan.com/vulnerability/40d347b1-b86e-477d-b4c6-da105935ce37; https://wpscan.com/vulnerability/40d347b1-b86e-477d-b4c6-da105935ce37
CVE: CVE-2021-24664
Published: 2021-11-08
Description: The School Management System – WPSchoolPress WordPress plugin before 2.1.17 sanitise some fields using sanitize_text_field() but does not escape them before outputting in attributes, resulting in Stored Cross-Site Scripting issues.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/164974/WordPress-WPSchoolPress-2.1.16-Cross-Site-Scripting.html; https://wpscan.com/vulnerability/3f8e170c-6579-4b1a-a1ac-7d93da17b669; http://packetstormsecurity.com/files/164974/WordPress-WPSchoolPress-2.1.16-Cross-Site-Scripting.html
CVE: CVE-2021-24669
Published: 2021-11-08
Description: The MAZ Loader – Preloader Builder for WordPress plugin before 1.3.3 does not validate or escape the loader_id parameter of the mzldr shortcode, which allows users with a role as low as Contributor to perform SQL injection.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://wpscan.com/vulnerability/b97afbe8-c9ae-40a2-81e5-b1d7a6b31831; https://wpscan.com/vulnerability/b97afbe8-c9ae-40a2-81e5-b1d7a6b31831
CVE: CVE-2021-24674
Published: 2021-11-08
Description: The Genie WP Favicon WordPress plugin through 0.5.2 does not have CSRF in place when updating the favicon, which could allow attackers to make a logged in admin change it via a CSRF attack
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://wpscan.com/vulnerability/26965878-c4c9-4f43-9e9a-6e58d6b46ef2; https://wpscan.com/vulnerability/26965878-c4c9-4f43-9e9a-6e58d6b46ef2
CVE: CVE-2021-24693
Published: 2021-11-08
Description: The Simple Download Monitor WordPress plugin before 3.9.5 does not escape the "File Thumbnail" post meta before outputting it in some pages, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks. Given the that XSS is triggered even when the Download is in a review state, contributor could make JavaScript code execute in a context of a reviewer such as admin and make them create a rogue admin account, or install a malicious plugin
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-79
References: https://wpscan.com/vulnerability/4bb559b7-8dde-4c90-a9a6-d8dcfbea53a7; https://wpscan.com/vulnerability/4bb559b7-8dde-4c90-a9a6-d8dcfbea53a7
CVE: CVE-2021-24695
Published: 2021-11-08
Description: The Simple Download Monitor WordPress plugin before 3.9.6 saves logs in a predictable location, and does not have any authentication or authorisation in place to prevent unauthenticated users to download and read the logs containing Sensitive Information such as IP Addresses and Usernames
CVSS Score: 7.5 (HIGH)
CWE: CWE-425, CWE-425
References: https://wpscan.com/vulnerability/d7bdaf2b-cdd9-4aee-b1bb-01728160ff25; https://wpscan.com/vulnerability/d7bdaf2b-cdd9-4aee-b1bb-01728160ff25
CVE: CVE-2021-24697
Published: 2021-11-08
Description: The Simple Download Monitor WordPress plugin before 3.9.5 does not escape the 1) sdm_active_tab GET parameter and 2) sdm_stats_start_date/sdm_stats_end_date POST parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/ef9ae513-6c29-45c2-b5ae-4a06a217c499; https://wpscan.com/vulnerability/ef9ae513-6c29-45c2-b5ae-4a06a217c499
CVE: CVE-2021-24698
Published: 2021-11-08
Description: The Simple Download Monitor WordPress plugin before 3.9.6 allows users with a role as low as Contributor to remove thumbnails from downloads they do not own, even if they cannot normally edit the download.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: https://wpscan.com/vulnerability/1fda1356-77d8-4e77-9ee6-8f9ceeb3d380; https://wpscan.com/vulnerability/1fda1356-77d8-4e77-9ee6-8f9ceeb3d380
CVE: CVE-2021-24701
Published: 2021-11-08
Description: The Quiz Tool Lite WordPress plugin through 2.3.15 does not sanitize multiple input fields used when creating or managing quizzes and in other setting options, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/f7b95789-43f2-42a5-95e6-eb7accbd5ed3; https://wpscan.com/vulnerability/f7b95789-43f2-42a5-95e6-eb7accbd5ed3
CVE: CVE-2021-24706
Published: 2021-11-08
Description: The Qwizcards – online quizzes and flashcards WordPress plugin before 3.62 does not properly sanitize and escape some of its settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/ecddb611-de75-41d5-a470-8fc2cf0780a4; https://wpscan.com/vulnerability/ecddb611-de75-41d5-a470-8fc2cf0780a4
CVE: CVE-2021-24708
Published: 2021-11-08
Description: The Export any WordPress data to XML/CSV WordPress plugin before 1.3.1 does not escape its Export's Name before outputting it in Manage Exports settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/4560eef4-253b-49a4-8e20-9520c45c6f7f; https://wpscan.com/vulnerability/4560eef4-253b-49a4-8e20-9520c45c6f7f
CVE: CVE-2021-24710
Published: 2021-11-08
Description: The Print-O-Matic WordPress plugin before 2.0.3 does not escape some of its settings before outputting them in attribute, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2610060/; https://wpscan.com/vulnerability/84e83d52-f69a-4de2-80c8-7c1996b30a04; https://plugins.trac.wordpress.org/changeset/2610060/
CVE: CVE-2021-24721
Published: 2021-11-08
Description: The Loco Translate WordPress plugin before 2.5.4 mishandles data inputs which get saved to a file, which can be renamed to an extension ending in .php, resulting in authenticated "translator" users being able to inject PHP code into files ending with .php in web accessible locations.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-94
References: https://wpscan.com/vulnerability/bc7d4774-fce8-4b0b-8015-8ef4c5b02d38; https://wpscan.com/vulnerability/bc7d4774-fce8-4b0b-8015-8ef4c5b02d38
CVE: CVE-2021-24731
Published: 2021-11-08
Description: The Registration Forms – User profile, Content Restriction, Spam Protection, Payment Gateways, Invitation Codes WordPress plugin before 3.7.1.6 does not properly escape user data before using it in a SQL statement in the wp-json/pie/v1/login REST API endpoint, leading to an SQL injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://wpscan.com/vulnerability/6bed00e4-b363-43b8-a392-d068d342151a; https://wpscan.com/vulnerability/6bed00e4-b363-43b8-a392-d068d342151a
CVE: CVE-2021-24766
Published: 2021-11-08
Description: The 404 to 301 – Redirect, Log and Notify 404 Errors WordPress plugin before 3.0.9 does not have CSRF check in place when cleaning the logs, which could allow attacker to make a logged in admin delete all of them via a CSRF attack
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/cc13db1e-5f7f-49b2-81da-f913cfe70543; https://wpscan.com/vulnerability/cc13db1e-5f7f-49b2-81da-f913cfe70543
CVE: CVE-2021-24767
Published: 2021-11-08
Description: The Redirect 404 Error Page to Homepage or Custom Page with Logs WordPress plugin before 1.7.9 does not check for CSRF when deleting logs, which could allow attacker to make a logged in admin delete them via a CSRF attack
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/0b35ad4a-3d94-49b1-a98d-07acf8dd4962; https://wpscan.com/vulnerability/0b35ad4a-3d94-49b1-a98d-07acf8dd4962
CVE: CVE-2021-24783
Published: 2021-11-08
Description: The Post Expirator WordPress plugin before 2.6.0 does not have proper capability checks in place, which could allow users with a role as low as Contributor to schedule deletion of arbitrary posts.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://wpscan.com/vulnerability/de51b970-ab13-41a6-a479-a92cd0e70b71; https://wpscan.com/vulnerability/de51b970-ab13-41a6-a479-a92cd0e70b71
CVE: CVE-2021-24788
Published: 2021-11-08
Description: The Batch Cat WordPress plugin through 0.3 defines 3 custom AJAX actions, which both require authentication but are available for all roles. As a result, any authenticated user (including simple subscribers) can add/set/delete arbitrary categories to posts.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863
References: https://wpscan.com/vulnerability/f8fdff8a-f158-46e8-94f1-f051a6c5608b; https://wpscan.com/vulnerability/f8fdff8a-f158-46e8-94f1-f051a6c5608b
CVE: CVE-2021-24791
Published: 2021-11-08
Description: The Header Footer Code Manager WordPress plugin before 1.1.14 does not validate and escape the "orderby" and "order" request parameters before using them in a SQL statement when viewing the Snippets admin dashboard, leading to SQL injections
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://wpscan.com/vulnerability/d55caa9b-d50f-4c13-bc69-dc475641735f; https://wpscan.com/vulnerability/d55caa9b-d50f-4c13-bc69-dc475641735f
CVE: CVE-2021-24798
Published: 2021-11-08
Description: The WP Header Images WordPress plugin before 2.0.1 does not sanitise and escape the t parameter before outputting it back in the plugin's settings page, leading to a Reflected Cross-Site Scripting issue
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/58c9a007-42db-4142-b096-0b9ba8850f87; https://wpscan.com/vulnerability/58c9a007-42db-4142-b096-0b9ba8850f87
CVE: CVE-2021-24801
Published: 2021-11-08
Description: The WP Survey Plus WordPress plugin through 1.0 does not have any authorisation and CSRF checks in place in its AJAX actions, allowing any user to call them and add/edit/delete Surveys. Furthermore, due to the lack of sanitization in the Surveys' Title, this could also lead to Stored Cross-Site Scripting issues
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284, CWE-79, CWE-352
References: https://wpscan.com/vulnerability/[PII_REDACTED]-b18e-1ba5f438972d; https://wpscan.com/vulnerability/[PII_REDACTED]-b18e-1ba5f438972d
CVE: CVE-2021-24806
Published: 2021-11-08
Description: The wpDiscuz WordPress plugin before 7.3.4 does check for CSRF when adding, editing and deleting comments, which could allow attacker to make logged in users such as admin edit and delete arbitrary comment, or the user who made the comment to edit it via a CSRF attack. Attackers could also make logged in users post arbitrary comment.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://wpscan.com/vulnerability/2746101e-e993-42b9-bd6f-dfd5544fa3fe; https://wpscan.com/vulnerability/2746101e-e993-42b9-bd6f-dfd5544fa3fe
CVE: CVE-2021-24807
Published: 2021-11-08
Description: The Support Board WordPress plugin before 3.3.5 allows Authenticated (Agent+) users to perform Cross-Site Scripting attacks by placing a payload in the notes field, when an administrator or any authenticated user go to the chat the XSS will be automatically executed.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/itsjeffersonli/CVE-2021-24807; https://medium.com/%40lijohnjefferson/cve-2021-24807-6bc22af2a444; https://wpscan.com/vulnerability/19d101aa-4b60-4db4-a33b-86c826b288b0
CVE: CVE-2021-24816
Published: 2021-11-08
Description: The Phoenix Media Rename WordPress plugin before 3.4.4 does not have capability checks in its phoenix_media_rename AJAX action, which could allow users with Author roles to rename any uploaded media files, including ones they do not own.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: https://wpscan.com/vulnerability/5f63d677-20f3-4fe0-bb90-048b6898e6cd; https://wpscan.com/vulnerability/5f63d677-20f3-4fe0-bb90-048b6898e6cd
CVE: CVE-2021-24827
Published: 2021-11-08
Description: The Asgaros Forum WordPress plugin before 1.15.13 does not validate and escape user input when subscribing to a topic before using it in a SQL statement, leading to an unauthenticated SQL injection issue
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://plugins.trac.wordpress.org/changeset/2611560/asgaros-forum; https://wpscan.com/vulnerability/36cc5151-1d5e-4874-bcec-3b6326235db1; https://plugins.trac.wordpress.org/changeset/2611560/asgaros-forum
CVE: CVE-2021-24829
Published: 2021-11-08
Description: The Visitor Traffic Real Time Statistics WordPress plugin before 3.9 does not validate and escape user input passed to the today_traffic_index AJAX action (available to any authenticated users) before using it in a SQL statement, leading to an SQL injection issue
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://wpscan.com/vulnerability/cc6585c8-5798-48a1-89f7-a3337f56df3f; https://wpscan.com/vulnerability/cc6585c8-5798-48a1-89f7-a3337f56df3f
CVE: CVE-2021-24832
Published: 2021-11-08
Description: The WP SEO Redirect 301 WordPress plugin before 2.3.2 does not have CSRF in place when deleting redirects, which could allow attackers to make a logged in admin delete them via a CSRF attack
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://wpscan.com/vulnerability/cf031259-b76e-475c-8a8e-fa6a0d9e7bb4; https://wpscan.com/vulnerability/cf031259-b76e-475c-8a8e-fa6a0d9e7bb4
CVE: CVE-2021-24835
Published: 2021-11-08
Description: The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible WordPress plugin before 6.5.12, when used in combination with another WCFM - WooCommerce Multivendor plugin such as WCFM - WooCommerce Multivendor Marketplace, does not escape the withdrawal_vendor parameter before using it in a SQL statement, allowing low privilege users such as Subscribers to perform SQL injection attacks
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://wpscan.com/vulnerability/c493ac9c-67d1-48a9-be21-824b1a1d56c2; https://wpscan.com/vulnerability/c493ac9c-67d1-48a9-be21-824b1a1d56c2
CVE: CVE-2021-24840
Published: 2021-11-08
Description: The Squaretype WordPress theme before 3.0.4 allows unauthenticated users to manipulate the query_vars used to retrieve the posts to display in one of its REST endpoint, without any validation. As a result, private and scheduled posts could be retrieved via a crafted request.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-639, CWE-639
References: https://wpscan.com/vulnerability/971302fd-4e8b-4c6a-818f-3a42c7fb83ef; https://wpscan.com/vulnerability/971302fd-4e8b-4c6a-818f-3a42c7fb83ef
CVE: CVE-2021-24844
Published: 2021-11-08
Description: The Affiliates Manager WordPress plugin before 2.8.7 does not validate the orderby parameter before using it in an SQL statement in the admin dashboard, leading to an SQL Injection issue
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://plugins.trac.wordpress.org/changeset/2611862/; https://wpscan.com/vulnerability/ebd6d13c-572e-4861-b7d1-a7a87332ce0d; https://plugins.trac.wordpress.org/changeset/2611862/
CVE: CVE-2021-40577
Published: 2021-11-08
Description: A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Online Enrollment Management System in PHP and PayPal Free Source Code 1.0 in the Add-Users page via the Name parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/165106/Online-Enrollment-Management-System-In-PHP-And-PayPal-1.0-Cross-Site-Scripting.html; https://medium.com/%40J03KR/cve-2021-40577-ec96a831ba71; http://packetstormsecurity.com/files/165106/Online-Enrollment-Management-System-In-PHP-And-PayPal-1.0-Cross-Site-Scripting.html
CVE: CVE-2021-39420
Published: 2021-11-08
Description: Multiple Cross Site Scripting (XSS) vulnerabilities exist in VFront 0.99.5 via the (1) s parameter in search_all.php and the (2) msg parameter in add.attach.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://sisl.lab.uic.edu/projects/chess/vfront0-99-5/; https://sisl.lab.uic.edu/projects/chess/vfront0-99-5/
CVE: CVE-2021-41170
Published: 2021-11-08
Description: neoan3-apps/template is a neoan3 minimal template engine. Versions prior to 1.1.1 have allowed for passing in closures directly into the template engine. As a result values that are callable are executed by the template engine. The issue arises if a value has the same name as a method or function in scope and can therefore be executed either by mistake or maliciously. In theory all users of the package are affected as long as they either deal with direct user input or database values. A multi-step attack on is therefore plausible. Version 1.1.1 has addressed this vulnerability. Unfortunately only working with hardcoded values is safe in prior versions. As this likely defeats the purpose of a template engine, please upgrade.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74, CWE-277, CWE-732
References: https://github.com/sroehrl/neoan3-template/commit/4a2c9570f071d3c8f4ac790007599cba20e16934; https://github.com/sroehrl/neoan3-template/issues/8; https://github.com/sroehrl/neoan3-template/security/advisories/GHSA-3v56-q6r6-4gcw
CVE: CVE-2020-23572
Published: 2021-11-08
Description: BEESCMS v4.0 was discovered to contain an arbitrary file upload vulnerability via the component /admin/upload.php. This vulnerability allows attackers to execute arbitrary code via a crafted image file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/source-trace/beescms/issues/6; https://github.com/source-trace/beescms/issues/6