deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-32232
Published: 2023-07-25
Description: An issue was discovered in Vasion PrinterLogic Client for Windows before 25.0.0.836. During client installation and repair, a PrinterLogic binary is called by the installer to configure the device. This window is not hidden, and is running with elevated privileges. A standard user can break out of this window, obtaining a full SYSTEM command prompt window. This results in complete compromise via arbitrary SYSTEM code execution (elevation of privileges).
CVSS Score: 9.9 (CRITICAL)
References: https://docs.printercloud.com/1-Printerlogic/Release_Notes/Client_Release_Notes.htm; https://docs.printercloud.com/1-Printerlogic/Release_Notes/Security_Bulletin_CVE.htm; https://www.vasion.com/press-releases/printerlogic-rebrands
CVE: CVE-2023-33777
Published: 2023-07-25
Description: An issue in /functions/fbaorder.php of Prestashop amazon before v5.2.24 allows attackers to execute a directory traversal attack.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://addons.prestashop.com/fr/marketplace/2501-amazon-market-place.html; https://security.friendsofpresta.org/modules/2023/07/13/amazon.html?_sm_pdc=1&_sm_rid=8j3vvHn3kPrR9r7QVvHpFPR9WHVDpvvHP9PLPMj; https://addons.prestashop.com/fr/marketplace/2501-amazon-market-place.html
CVE: CVE-2023-37361
Published: 2023-07-25
Description: REDCap 12.0.26 LTS and 12.3.2 Standard allows SQL Injection via scheduling, repeatforms, purpose, app_title, or randomization.
CVSS Score: 2.7 (LOW)
CWE: CWE-89
References: https://trustwave.com; https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=32305; https://trustwave.com
CVE: CVE-2023-3874
Published: 2023-07-25
Description: A vulnerability, which was classified as critical, was found in Campcodes Beauty Salon Management System 1.0. Affected is an unknown function of the file /admin/admin-profile.php. The manipulation of the argument adminname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-235236.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/E1CHO/cve_hub/blob/main/Beauty%20Salon%20Management%20System/Beauty%20Salon%20Management%20System%20-%20vuln%206.pdf; https://vuldb.com/?ctiid.235236; https://vuldb.com/?id.235236
CVE: CVE-2023-23568
Published: 2023-07-25
Description: 
Improper privilege validation in Command Centre Server allows authenticated unprivileged operators to modify and view Personal Data Fields.

This issue affects Command Centre: vEL

8.90 prior to vEL8.90.1318 (MR1), vEL8.80 prior to vEL8.80.1192 (MR2), 

vEL8.70 prior to 

vEL8.70.2185 (MR4), 

vEL8.60 prior to 

vEL8.60.2347 (MR6), 

vEL8.50 prior to 

vEL8.50.2831 (MR8), all versions 

vEL8.40 and prior




CVSS Score: 4.3 (MEDIUM)
CWE: CWE-285
References: https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2023-23568; https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2023-23568
CVE: CVE-2023-3875
Published: 2023-07-25
Description: A vulnerability has been found in Campcodes Beauty Salon Management System 0.1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/del_feedback.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-235237 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/E1CHO/cve_hub/blob/main/Beauty%20Salon%20Management%20System/Beauty%20Salon%20Management%20System%20-%20vuln%207.pdf; https://vuldb.com/?ctiid.235237; https://vuldb.com/?id.235237
CVE: CVE-2023-3876
Published: 2023-07-25
Description: A vulnerability was found in Campcodes Beauty Salon Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/search-appointment.php. The manipulation of the argument searchdata leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-235238 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/E1CHO/cve_hub/blob/main/Beauty%20Salon%20Management%20System/Beauty%20Salon%20Management%20System%20-%20vuln%208.pdf; https://vuldb.com/?ctiid.235238; https://vuldb.com/?id.235238
CVE: CVE-2023-3877
Published: 2023-07-25
Description: A vulnerability was found in Campcodes Beauty Salon Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/add-services.php. The manipulation of the argument cost leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-235239.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://github.com/E1CHO/cve_hub/blob/main/Beauty%20Salon%20Management%20System/Beauty%20Salon%20Management%20System%20-%20vuln%209.pdf; https://vuldb.com/?ctiid.235239; https://vuldb.com/?id.235239
CVE: CVE-2023-3878
Published: 2023-07-25
Description: A vulnerability was found in Campcodes Beauty Salon Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/about-us.php. The manipulation of the argument pagedes leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-235240.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/E1CHO/cve_hub/blob/main/Beauty%20Salon%20Management%20System/Beauty%20Salon%20Management%20System%20-%20vuln%2010.pdf; https://vuldb.com/?ctiid.235240; https://vuldb.com/?id.235240
CVE: CVE-2023-32639
Published: 2023-07-25
Description: Applicant Programme Ver.7.06 and earlier improperly restricts XML external entity references (XXE). By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-611
References: https://jvn.jp/en/jp/JVN37857022/; https://www.moj.go.jp/MINJI/minji06_00002.html; https://jvn.jp/en/jp/JVN37857022/
CVE: CVE-2023-38745
Published: 2023-07-25
Description: Pandoc before 3.1.6 allows arbitrary file write: this can be triggered by providing a crafted image element in the input when generating files via the --extract-media option or outputting to PDF format. This allows an attacker to create or overwrite arbitrary files, depending on the privileges of the process running Pandoc. It only affects systems that pass untrusted user input to Pandoc and allow Pandoc to be used to produce a PDF or with the --extract-media option. NOTE: this issue exists because of an incomplete fix for CVE-2023-35936 (failure to properly account for double encoded path names).
CVSS Score: 6.3 (MEDIUM)
References: https://github.com/jgm/pandoc/commit/eddedbfc14916aa06fc01ff04b38aeb30ae2e625; https://github.com/jgm/pandoc/compare/3.1.5...3.1.6; https://lists.debian.org/debian-lts-announce/2023/07/msg00029.html
CVE: CVE-2023-3879
Published: 2023-07-25
Description: A vulnerability was found in Campcodes Beauty Salon Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/del_category.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-235241 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/E1CHO/cve_hub/blob/main/Beauty%20Salon%20Management%20System/Beauty%20Salon%20Management%20System%20-%20vuln%2011.pdf; https://vuldb.com/?ctiid.235241; https://vuldb.com/?id.235241
CVE: CVE-2023-3880
Published: 2023-07-25
Description: A vulnerability classified as critical has been found in Campcodes Beauty Salon Management System 1.0. Affected is an unknown function of the file /admin/del_service.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-235242 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/E1CHO/cve_hub/blob/main/Beauty%20Salon%20Management%20System/Beauty%20Salon%20Management%20System%20-%20vuln%2012.pdf; https://vuldb.com/?ctiid.235242; https://vuldb.com/?id.235242
CVE: CVE-2023-3881
Published: 2023-07-25
Description: A vulnerability classified as critical was found in Campcodes Beauty Salon Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/forgot-password.php. The manipulation of the argument contactno leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-235243.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/E1CHO/cve_hub/blob/main/Beauty%20Salon%20Management%20System/Beauty%20Salon%20Management%20System%20-%20vuln%2013.pdf; https://vuldb.com/?ctiid.235243; https://vuldb.com/?id.235243
CVE: CVE-2023-3882
Published: 2023-07-25
Description: A vulnerability, which was classified as critical, has been found in Campcodes Beauty Salon Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/edit-accepted-appointment.php. The manipulation of the argument contactno leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-235244.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/E1CHO/cve_hub/blob/main/Beauty%20Salon%20Management%20System/Beauty%20Salon%20Management%20System%20-%20vuln%2014.pdf; https://vuldb.com/?ctiid.235244; https://vuldb.com/?id.235244
CVE: CVE-2023-32637
Published: 2023-07-25
Description: GBrowse accepts files with any formats uploaded and places them in the area accessible through unauthenticated web requests. Therefore, anyone who can upload files through the product may execute arbitrary code on the server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://gmod.org/wiki/GBrowse; https://jbrowse.org/jb2/; https://jvn.jp/en/jp/JVN35897618/
CVE: CVE-2023-3046
Published: 2023-07-25
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Biltay Technology Scienta allows SQL Injection.This issue affects Scienta: before 20[PII_REDACTED].


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.usom.gov.tr/bildirim/tr-23-0418; https://www.usom.gov.tr/bildirim/tr-23-0418
CVE: CVE-2023-3883
Published: 2023-07-25
Description: A vulnerability, which was classified as problematic, was found in Campcodes Beauty Salon Management System 1.0. This affects an unknown part of the file /admin/add-category.php. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-235245 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/E1CHO/cve_hub/blob/main/Beauty%20Salon%20Management%20System/Beauty%20Salon%20Management%20System%20-%20vuln%2015.pdf; https://vuldb.com/?ctiid.235245; https://vuldb.com/?id.235245
CVE: CVE-2023-3884
Published: 2023-07-25
Description: A vulnerability has been found in Campcodes Beauty Salon Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/edit_product.php. The manipulation of the argument id leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-235246 is the identifier assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79
References: https://github.com/E1CHO/cve_hub/blob/main/Beauty%20Salon%20Management%20System/Beauty%20Salon%20Management%20System%20-%20vuln%2016.pdf; https://vuldb.com/?ctiid.235246; https://vuldb.com/?id.235246
CVE: CVE-2023-35066
Published: 2023-07-25
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Infodrom Software E-Invoice Approval System allows SQL Injection.This issue affects E-Invoice Approval System: before v.20230701.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.usom.gov.tr/bildirim/tr-23-0419; https://www.usom.gov.tr/bildirim/tr-23-0419
CVE: CVE-2023-35067
Published: 2023-07-25
Description: Plaintext Storage of a Password vulnerability in Infodrom Software E-Invoice Approval System allows Read Sensitive Strings Within an Executable.This issue affects E-Invoice Approval System: before v.20230701.


CVSS Score: 7.5 (HIGH)
CWE: CWE-256, CWE-522
References: https://www.usom.gov.tr/bildirim/tr-23-0419; https://www.usom.gov.tr/bildirim/tr-23-0419
CVE: CVE-2023-35078
Published: 2023-07-25
Description: An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or resources of the application without proper authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-287
References: https://forums.ivanti.com/s/article/CVE-2023-35078-Remote-unauthenticated-API-access-vulnerability; https://forums.ivanti.com/s/article/KB-Remote-unauthenticated-API-access-vulnerability-CVE-2023-35078; https://www.cisa.gov/news-events/alerts/2023/07/24/ivanti-releases-security-updates-endpoint-manager-mobile-epmm-cve-2023-35078
CVE: CVE-2023-3885
Published: 2023-07-25
Description: A vulnerability was found in Campcodes Beauty Salon Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /admin/edit_category.php. The manipulation of the argument id leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-235247.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/E1CHO/cve_hub/blob/main/Beauty%20Salon%20Management%20System/Beauty%20Salon%20Management%20System%20-%20vuln%2017.pdf; https://vuldb.com/?ctiid.235247; https://vuldb.com/?id.235247
CVE: CVE-2023-21405
Published: 2023-07-25
Description: Knud from Fraktal.fi has found a flaw in some Axis Network Door Controllers and Axis Network
Intercoms when communicating over OSDP, highlighting that the OSDP message parser crashes
the pacsiod process, causing a temporary unavailability of the door-controlling functionalities
meaning that doors cannot be opened or closed. No sensitive or customer data can be extracted
as the Axis device is not further compromised. Please refer to the Axis security advisory for more information, mitigation and affected products and software versions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1286, CWE-754
References: https://www.axis.com/dam/public/7f/3a/ed/cve-2023-21405-en-US-407244.pdf; https://www.axis.com/dam/public/7f/3a/ed/cve-2023-21405-en-US-407244.pdf
CVE: CVE-2023-21406
Published: 2023-07-25
Description: Ariel Harush and Roy Hodir from OTORIO have found a flaw in the AXIS A1001 when
communicating over OSDP. A heap-based buffer overflow was found in the pacsiod process which
is handling the OSDP communication allowing to write outside of the allocated buffer. By
appending invalid data to an OSDP message it was possible to write data beyond the heap
allocated buffer. The data written outside the buffer could be used to execute arbitrary code. 

lease refer to the Axis security advisory for more information, mitigation and affected products and software versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-122, CWE-787, CWE-120
References: https://www.axis.com/dam/public/1b/21/5f/cve-2023-21406-en-US-407245.pdf; https://www.axis.com/dam/public/1b/21/5f/cve-2023-21406-en-US-407245.pdf
CVE: CVE-2023-34189
Published: 2023-07-25
Description: Exposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.7.0. The attacker could use general users to delete and update the process, which only the admin can operate occurrences. 

Users are advised to upgrade to Apache InLong's 1.8.0 or cherry-pick  https://github.com/apache/inlong/pull/8109  to solve it.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-668
References: http://www.openwall.com/lists/oss-security/2023/07/25/2; https://lists.apache.org/thread/smxqyx43hxjvzv4w71n2n3rfho9p378s; http://www.openwall.com/lists/oss-security/2023/07/25/2
CVE: CVE-2023-34434
Published: 2023-07-25
Description: Deserialization of Untrusted Data Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.7.0. 

The attacker could bypass the current logic and achieve arbitrary file reading. To solve it, users are advised to upgrade to Apache InLong's 1.8.0 or cherry-pick  https://github.com/apache/inlong/pull/8130 .
CVSS Score: 7.5 (HIGH)
CWE: CWE-502
References: http://seclists.org/fulldisclosure/2023/Jul/43; http://www.openwall.com/lists/oss-security/2023/07/25/3; https://lists.apache.org/thread/7f1o71w5r732cspltmtdydn01gllf4jo
CVE: CVE-2023-35088
Published: 2023-07-25
Description: Improper Neutralization of Special Elements Used in an SQL Command ('SQL Injection') vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.7.0. 
In the toAuditCkSql method, the groupId, streamId, auditId, and dt are directly concatenated into the SQL query statement, which may lead to SQL injection attacks.
Users are advised to upgrade to Apache InLong's 1.8.0 or cherry-pick [1] to solve it.

[1]  https://github.com/apache/inlong/pull/8198
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://seclists.org/fulldisclosure/2023/Jul/43; http://www.openwall.com/lists/oss-security/2023/07/25/4; https://lists.apache.org/thread/os7b66x4n8dbtrdpb7c6x37bb1vjb0tk
CVE: CVE-2023-3886
Published: 2023-07-25
Description: A vulnerability was found in Campcodes Beauty Salon Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/invoice.php. The manipulation of the argument inv_id leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-235248.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/E1CHO/cve_hub/blob/main/Beauty%20Salon%20Management%20System/Beauty%20Salon%20Management%20System%20-%20vuln%2018.pdf; https://vuldb.com/?ctiid.235248; https://vuldb.com/?id.235248
CVE: CVE-2023-3887
Published: 2023-07-25
Description: A vulnerability was found in Campcodes Beauty Salon Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/search-appointment.php. The manipulation of the argument searchdata leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-235249 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/E1CHO/cve_hub/blob/main/Beauty%20Salon%20Management%20System/Beauty%20Salon%20Management%20System%20-%20vuln%2019.pdf; https://vuldb.com/?ctiid.235249; https://vuldb.com/?id.235249
CVE: CVE-2023-3888
Published: 2023-07-25
Description: A vulnerability was found in Campcodes Beauty Salon Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/admin-profile.php. The manipulation of the argument adminname leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-235250 is the identifier assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/E1CHO/cve_hub/blob/main/Beauty%20Salon%20Management%20System/Beauty%20Salon%20Management%20System%20-%20vuln%2020.pdf; https://vuldb.com/?ctiid.235250; https://vuldb.com/?id.235250
CVE: CVE-2023-3890
Published: 2023-07-25
Description: A vulnerability classified as problematic has been found in Campcodes Beauty Salon Management System 1.0. This affects an unknown part of the file /admin/edit-accepted-appointment.php. The manipulation of the argument id leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-235251.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/E1CHO/cve_hub/blob/main/Beauty%20Salon%20Management%20System/Beauty%20Salon%20Management%20System%20-%20vuln%2021.pdf; https://vuldb.com/?ctiid.235251; https://vuldb.com/?id.235251
CVE: CVE-2023-3897
Published: 2023-07-25
Description: Username enumeration is possible through Bypassing CAPTCHA in On-premise SureMDM Solution on Windows deployment allows attacker to enumerate local user information via error message.

This issue affects SureMDM On-premise: 6.31 and below version
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-203, CWE-203
References: http://packetstormsecurity.com/files/177179/SureMDM-On-Premise-CAPTCHA-Bypass-User-Enumeration.html; https://www.42gears.com/security-and-compliance; http://packetstormsecurity.com/files/177179/SureMDM-On-Premise-CAPTCHA-Bypass-User-Enumeration.html
CVE: CVE-2023-2850
Published: 2023-07-25
Description: NodeBB is affected by a Cross-Site WebSocket Hijacking vulnerability due to missing validation of the request origin. Exploitation of this vulnerability allows certain user information to be extracted by attacker.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-1385, CWE-346
References: https://github.com/NodeBB/NodeBB/commit/51096ad2345fb1d1380bec0a447113489ef6c359; https://github.com/NodeBB/NodeBB/releases/tag/v3.1.3; https://github.com/NodeBB/NodeBB/security/advisories/GHSA-4qcv-qf38-5j3j
CVE: CVE-2023-23833
Published: 2023-07-25
Description: Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Steven Henty Drop Shadow Boxes plugin <= 1.7.10 versions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/drop-shadow-boxes/wordpress-drop-shadow-boxes-plugin-1-7-10-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/drop-shadow-boxes/wordpress-drop-shadow-boxes-plugin-1-7-10-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-33925
Published: 2023-07-25
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in PluginForage WooCommerce Product Categories Selection Widget plugin <= 2.0 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/woocommerce-product-category-selection-widget/wordpress-woocommerce-product-categories-selection-widget-plugin-2-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/woocommerce-product-category-selection-widget/wordpress-woocommerce-product-categories-selection-widget-plugin-2-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-35043
Published: 2023-07-25
Description: Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Neha Goel Recent Posts Slider plugin <= 1.1 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/recent-posts-slider/wordpress-recent-posts-slider-plugin-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/recent-posts-slider/wordpress-recent-posts-slider-plugin-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve