deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-1260
Published: 2024-02-06
Description: A vulnerability classified as critical has been found in Juanpao JPShop up to 1.5.02. This affects the function actionIndex of the file /api/controllers/admin/app/ComboController.php of the component API. The manipulation of the argument pic_url leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-252999.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434, CWE-434
References: https://note.zhaoj.in/share/H73DuWdyifaI; https://vuldb.com/?ctiid.252999; https://vuldb.com/?id.252999
CVE: CVE-2024-1261
Published: 2024-02-06
Description: A vulnerability classified as critical was found in Juanpao JPShop up to 1.5.02. This vulnerability affects the function actionIndex of the file /api/controllers/merchant/app/ComboController.php of the component API. The manipulation of the argument pic_url leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-253000.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434, CWE-434
References: https://note.zhaoj.in/share/v2JpHJngvw7E; https://vuldb.com/?ctiid.253000; https://vuldb.com/?id.253000
CVE: CVE-2024-22519
Published: 2024-02-06
Description: An issue discovered in OpenDroneID OSM 3.5.1 allows attackers to impersonate other drones via transmission of crafted data packets.
CVSS Score: 8.2 (HIGH)
CWE: CWE-290, CWE-290
References: https://github.com/Drone-Lab/opendroneid-vulnerability; https://github.com/Drone-Lab/opendroneid-vulnerability
CVE: CVE-2024-22520
Published: 2024-02-06
Description: An issue discovered in Dronetag Drone Scanner 1.5.2 allows attackers to impersonate other drones via transmission of crafted data packets.
CVSS Score: 8.2 (HIGH)
CWE: CWE-290, CWE-290
References: https://github.com/Drone-Lab/Dronetag-vulnerability; https://github.com/Drone-Lab/Dronetag-vulnerability
CVE: CVE-2024-24254
Published: 2024-02-06
Description: PX4 Autopilot 1.14 and earlier, due to the lack of synchronization mechanism for loading geofence data, has a Race Condition vulnerability in the geofence.cpp and mission_feasibility_checker.cpp. This will result in the drone uploading overlapping geofences and mission routes.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://github.com/Drone-Lab/PX4-Autopilot/blob/report-can-not-pause-vulnerability/Multi-Threaded%20Race%20Condition%20bug%20found%20in%20PX4%20cause%20drone%20can%20not%20PAUSE.md; https://github.com/PX4/PX4-Autopilot; https://github.com/Drone-Lab/PX4-Autopilot/blob/report-can-not-pause-vulnerability/Multi-Threaded%20Race%20Condition%20bug%20found%20in%20PX4%20cause%20drone%20can%20not%20PAUSE.md
CVE: CVE-2024-24575
Published: 2024-02-06
Description: libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Using well-crafted inputs to `git_revparse_single` can cause the function to enter an infinite loop, potentially causing a Denial of Service attack in the calling application. The revparse function in `src/libgit2/revparse.c` uses a loop to parse the user-provided spec string. There is an edge-case during parsing that allows a bad actor to force the loop conditions to access arbitrary memory. Potentially, this could also leak memory if the extracted rev spec is reflected back to the attacker. As such, libgit2 versions before 1.4.0 are not affected. Users should upgrade to version 1.6.5 or 1.7.2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400
References: https://github.com/libgit2/libgit2/commit/add2dabb3c16aa49b33904dcdc07cd915efc12fa; https://github.com/libgit2/libgit2/releases/tag/v1.6.5; https://github.com/libgit2/libgit2/releases/tag/v1.7.2
CVE: CVE-2024-24577
Published: 2024-02-06
Description: libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Using well-crafted inputs to `git_index_add` can cause heap corruption that could be leveraged for arbitrary code execution. There is an issue in the `has_dir_name` function in `src/libgit2/index.c`, which frees an entry that should not be freed. The freed entry is later used and overwritten with potentially bad actor-controlled data leading to controlled heap corruption. Depending on the application that uses libgit2, this could lead to arbitrary code execution. This issue has been patched in version 1.6.5 and 1.7.2.
CVSS Score: 8.6 (HIGH)
CWE: CWE-122, CWE-119
References: https://github.com/libgit2/libgit2/releases/tag/v1.6.5; https://github.com/libgit2/libgit2/releases/tag/v1.7.2; https://github.com/libgit2/libgit2/security/advisories/GHSA-j2v7-4f6v-gpg8
CVE: CVE-2024-24680
Published: 2024-02-06
Description: An issue was discovered in Django 3.2 before 3.2.24, 4.2 before 4.2.10, and Django 5.0 before 5.0.2. The intcomma template filter was subject to a potential denial-of-service attack when used with very long strings.
CVSS Score: 7.5 (HIGH)
References: https://docs.djangoproject.com/en/5.0/releases/security/; https://groups.google.com/forum/#%21forum/django-announce; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D2JIRXEDP4ZET5KFMAPPYSK663Q52NEX/
CVE: CVE-2024-1262
Published: 2024-02-06
Description: A vulnerability, which was classified as critical, has been found in Juanpao JPShop up to 1.5.02. This issue affects the function actionUpdate of the file /api/controllers/merchant/design/MaterialController.php of the component API. The manipulation of the argument pic_url leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-253001 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434, CWE-434
References: https://note.zhaoj.in/share/C1btykKlahBD; https://vuldb.com/?ctiid.253001; https://vuldb.com/?id.253001
CVE: CVE-2024-1263
Published: 2024-02-06
Description: A vulnerability, which was classified as critical, was found in Juanpao JPShop up to 1.5.02. Affected is the function actionUpdate of the file /api/controllers/merchant/shop/PosterController.php of the component API. The manipulation of the argument pic_url leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-253002 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434, CWE-434
References: https://note.zhaoj.in/share/Lkrp36sa1EHO; https://vuldb.com/?ctiid.253002; https://vuldb.com/?id.253002
CVE: CVE-2024-22388
Published: 2024-02-06
Description: Certain configuration available in the communication channel for encoders could expose sensitive data when reader configuration cards are programmed. This data could include credential and device administration keys.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-1188
References: https://support.hidglobal.com/; https://www.cisa.gov/news-events/ics-advisories/icsa-24-037-01; https://support.hidglobal.com/
CVE: CVE-2024-24255
Published: 2024-02-06
Description: A Race Condition discovered in geofence.cpp and mission_feasibility_checker.cpp in PX4 Autopilot 1.14 and earlier allows attackers to send drones on unintended missions.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://github.com/Drone-Lab/PX4-Autopilot/blob/report-the-faliure-of-precheck/report-the-faliure-of-precheck.md; https://github.com/Drone-Lab/PX4-Autopilot/blob/report-the-faliure-of-precheck/report-the-faliure-of-precheck.md
CVE: CVE-2024-0955
Published: 2024-02-07
Description: 
A stored XSS vulnerability exists where an authenticated, remote attacker with administrator privileges on the Nessus application could alter Nessus proxy settings, which could lead to the execution of remote arbitrary scripts. 


CVSS Score: 4.8 (MEDIUM)
CWE: CWE-20, CWE-79
References: https://www.tenable.com/security/tns-2024-01; https://www.tenable.com/security/tns-2024-01
CVE: CVE-2024-0971
Published: 2024-02-07
Description: 
A SQL injection vulnerability exists where an authenticated, low-privileged remote attacker could potentially alter scan DB content.


CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://www.tenable.com/security/tns-2024-01; https://www.tenable.com/security/tns-2024-01
CVE: CVE-2024-1264
Published: 2024-02-07
Description: A vulnerability has been found in Juanpao JPShop up to 1.5.02 and classified as critical. Affected by this vulnerability is the function actionUpdate of the file /api/controllers/common/UploadsController.php. The manipulation of the argument imgage leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-253003.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434, CWE-434
References: https://note.zhaoj.in/share/f8b2IX7GsZS5; https://vuldb.com/?ctiid.253003; https://vuldb.com/?id.253003
CVE: CVE-2024-1265
Published: 2024-02-07
Description: A vulnerability classified as problematic has been found in CodeAstro University Management System 1.0. Affected is an unknown function of the file /att_add.php of the component Attendance Management. The manipulation of the argument Student Name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-253008.
CVSS Score: 2.4 (LOW)
CWE: CWE-79, CWE-79
References: https://drive.google.com/file/d/1AnzEcwDC0AP56i65zCqekFAeYQY6skBH/view?usp=sharing; https://vuldb.com/?ctiid.253008; https://vuldb.com/?id.253008
CVE: CVE-2024-1283
Published: 2024-02-07
Description: Heap buffer overflow in Skia in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-122
References: https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop.html; https://issues.chromium.org/issues/41494860; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KN32XXNHIR6KBS4BYQTZV2JQFN4D6ZSE/
CVE: CVE-2024-1284
Published: 2024-02-07
Description: Use after free in Mojo in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416, CWE-416
References: https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop.html; https://issues.chromium.org/issues/41494539; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KN32XXNHIR6KBS4BYQTZV2JQFN4D6ZSE/
CVE: CVE-2024-24001
Published: 2024-02-07
Description: jshERP v3.3 is vulnerable to SQL Injection. via the com.jsh.erp.controller.DepotHeadController: com.jsh.erp.utils.BaseResponseInfo findallocationDetail() function of jshERP which allows an attacker to construct malicious payload to bypass jshERP's protection mechanism.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/24001.txt; https://github.com/jishenghua/jshERP/issues/99; https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/24001.txt
CVE: CVE-2024-24002
Published: 2024-02-07
Description: jshERP v3.3 is vulnerable to SQL Injection. The com.jsh.erp.controller.MaterialController: com.jsh.erp.utils.BaseResponseInfo getListWithStock() function of jshERP does not filter `column` and `order` parameters well enough, and an attacker can construct malicious payload to bypass jshERP's protection mechanism in `safeSqlParse` method for sql injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/24002.txt; https://github.com/jishenghua/jshERP/issues/99; https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/24002.txt
CVE: CVE-2024-24004
Published: 2024-02-07
Description: jshERP v3.3 is vulnerable to SQL Injection. The com.jsh.erp.controller.DepotHeadController: com.jsh.erp.utils.BaseResponseInfo findInOutDetail() function of jshERP does not filter `column` and `order` parameters well enough, and an attacker can construct malicious payload to bypass jshERP's protection mechanism in `safeSqlParse` method for sql injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/24004.txt; https://github.com/jishenghua/jshERP/issues/99; https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/24004.txt
CVE: CVE-2024-1266
Published: 2024-02-07
Description: A vulnerability classified as problematic was found in CodeAstro University Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /st_reg.php of the component Student Registration Form. The manipulation of the argument Address leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-253009 was assigned to this vulnerability.
CVSS Score: 2.4 (LOW)
CWE: CWE-79
References: https://drive.google.com/file/d/16a9lQqUFBICw-Hhbe9bT5sSB7qwZjMwA/view?usp=sharing; https://vuldb.com/?ctiid.253009; https://vuldb.com/?id.253009
CVE: CVE-2024-1267
Published: 2024-02-07
Description: A vulnerability, which was classified as problematic, has been found in CodeAstro Restaurant POS System 1.0. Affected by this issue is some unknown functionality of the file create_account.php. The manipulation of the argument Full Name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-253010 is the identifier assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://drive.google.com/drive/folders/18N_20KuGPjrBbvOMSfbvBIc1sMKyycH3?usp=sharing; https://vuldb.com/?ctiid.253010; https://vuldb.com/?id.253010
CVE: CVE-2024-22021
Published: 2024-02-07
Description: Vulnerability CVE-2024-22021 allows a Veeam Recovery Orchestrator user with a low privileged role (Plan Author) to retrieve plans from a Scope other than the one they are assigned to. 

CVSS Score: 4.3 (MEDIUM)
CWE: CWE-285
References: https://veeam.com/kb4541; https://veeam.com/kb4541
CVE: CVE-2024-22022
Published: 2024-02-07
Description: Vulnerability CVE-2024-22022 allows a Veeam Recovery Orchestrator user that has been assigned a low-privileged role to access the NTLM hash of the service account used by the Veeam Orchestrator Server Service.
CVSS Score: 8.8 (HIGH)
CWE: CWE-200
References: https://veeam.com/kb4541; https://veeam.com/kb4541
CVE: CVE-2024-24019
Published: 2024-02-07
Description: A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass in crafted offset, limit, and sort parameters to perform SQL injection via /system/roleDataPerm/list
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/201206030/novel-plus; https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/24019.txt; https://github.com/201206030/novel-plus
CVE: CVE-2024-1268
Published: 2024-02-07
Description: A vulnerability, which was classified as critical, was found in CodeAstro Restaurant POS System 1.0. This affects an unknown part of the file update_product.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-253011.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://drive.google.com/drive/folders/1utXNnlH67FjUaBsYhw1cQWyZsO9MLy1i?usp=sharing; https://vuldb.com/?ctiid.253011; https://vuldb.com/?id.253011
CVE: CVE-2024-1269
Published: 2024-02-07
Description: A vulnerability has been found in SourceCodester Product Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /supplier.php. The manipulation of the argument supplier_name/supplier_contact leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-253012.
CVSS Score: 2.4 (LOW)
CWE: CWE-79
References: https://github.com/PrecursorYork/Product-Management-System-Using-PHP-and-MySQL-Reflected-XSS-POC/blob/main/README.md; https://vuldb.com/?ctiid.253012; https://vuldb.com/?id.253012
CVE: CVE-2023-6388
Published: 2024-02-07
Description: Suite CRM version 7.14.2 allows making arbitrary HTTP requests through

the vulnerable server. This is possible because the application is vulnerable

to SSRF.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-918, CWE-918
References: https://docs.suitecrm.com/admin/releases/7.14.x/#_7_14_4; https://fluidattacks.com/advisories/leon/; https://github.com/salesagility/SuiteCRM/
CVE: CVE-2024-0849
Published: 2024-02-07
Description: Leanote version 2.7.0 allows obtaining arbitrary local files. This is possible because the application is vulnerable to LFR.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://fluidattacks.com/advisories/alesso; https://github.com/leanote/desktop-app; https://fluidattacks.com/advisories/alesso
CVE: CVE-2024-24810
Published: 2024-02-07
Description: WiX toolset lets developers create installers for Windows Installer, the Windows installation engine. The .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges. This impacts any installer built with the WiX installer framework. This issue has been patched in version 4.0.4.
CVSS Score: 8.2 (HIGH)
CWE: CWE-426
References: https://github.com/wixtoolset/issues/security/advisories/GHSA-7wh2-wxc7-9ph5; https://github.com/wixtoolset/issues/security/advisories/GHSA-7wh2-wxc7-9ph5
CVE: CVE-2024-23446
Published: 2024-02-07
Description: An issue was discovered by Elastic, whereby the Detection Engine Search API does not respect Document-level security (DLS) or Field-level security (FLS) when querying the .alerts-security.alerts-{space_id} indices. Users who are authorized to call this API may obtain unauthorized access to documents if their roles are configured with DLS or FLS against the aforementioned index.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: https://discuss.elastic.co/t/kibana-8-12-1-security-update-esa-2024-01/352686; https://www.elastic.co/community/security; https://discuss.elastic.co/t/kibana-8-12-1-security-update-esa-2024-01/352686
CVE: CVE-2024-23447
Published: 2024-02-07
Description: An issue was discovered in the Windows Network Drive Connector when using Document Level Security to assign permissions to a file, with explicit allow write and deny read. Although the document is not accessible to the user in Network Drive it is visible in search applications to the user.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: https://discuss.elastic.co/t/elastic-network-drive-connector-8-12-1-security-update-esa-2024-02/352687; https://www.elastic.co/community/security; https://discuss.elastic.co/t/elastic-network-drive-connector-8-12-1-security-update-esa-2024-02/352687
CVE: CVE-2024-0256
Published: 2024-02-07
Description: The Starbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Profile Display Name and Social Settings in all versions up to, and including, 3.4.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset/3029599/starbox; https://www.wordfence.com/threat-intel/vulnerabilities/id/0eafe473-9177-47c4-aa1e-2350cb827447?source=cve; https://plugins.trac.wordpress.org/changeset/3029599/starbox
CVE: CVE-2024-0628
Published: 2024-02-07
Description: The WP RSS Aggregator plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.23.5 via the RSS feed source in admin settings. This makes it possible for authenticated attackers, with administrator-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.
CVSS Score: 3.8 (LOW)
CWE: CWE-918
References: https://plugins.trac.wordpress.org/changeset/3029525/wp-rss-aggregator; https://www.wordfence.com/threat-intel/vulnerabilities/id/2154383e-eabb-4964-8991-423dd68d5efb?source=cve; https://plugins.trac.wordpress.org/changeset/3029525/wp-rss-aggregator
CVE: CVE-2024-1037
Published: 2024-02-07
Description: The All-In-One Security (AIOS) – Security and Firewall plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter in all versions up to, and including, 5.2.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/all-in-one-wp-security-and-firewall/trunk/admin/wp-security-list-404.php#L32; https://plugins.trac.wordpress.org/browser/all-in-one-wp-security-and-firewall/trunk/admin/wp-security-list-404.php#L50; https://plugins.trac.wordpress.org/changeset/3032127/all-in-one-wp-security-and-firewall/tags/5.2.6/admin/wp-security-list-404.php
CVE: CVE-2024-1055
Published: 2024-02-07
Description: The PowerPack Addons for Elementor (Free Widgets, Extensions and Templates) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's buttons in all versions up to, and including, 2.7.14 due to insufficient input sanitization and output escaping on user supplied URL values. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/powerpack-lite-for-elementor/trunk/modules/buttons/widgets/buttons.php#L1544; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3030473%40powerpack-lite-for-elementor&new=3030473%40powerpack-lite-for-elementor&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/036cf299-80c2-48a8-befc-02899ab96e3c?source=cve
CVE: CVE-2023-40355
Published: 2024-02-07
Description: Cross Site Scripting (XSS) vulnerability in Axigen versions 10.3.3.0 before 10.3.3.59, 10.4.0 before 10.4.19, and 10.5.0 before 10.5.5, allows authenticated attackers to execute arbitrary code and obtain sensitive information via the logic for switching between the Standard and Ajax versions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.axigen.com/knowledgebase/Axigen-WebMail-XSS-Vulnerability-CVE-2023-40355-_396.html; https://www.axigen.com/knowledgebase/Axigen-WebMail-XSS-Vulnerability-CVE-2023-40355-_396.html