deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-22179
Published: 2024-04-18
Description: The application is vulnerable to an unauthenticated parameter 
manipulation that allows an attacker to set the credentials to blank 
giving her access to the admin panel. Also vulnerable to account 
takeover and arbitrary password change.
CVSS Score: 7.5 (HIGH)
CWE: CWE-302
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02; https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02
CVE: CVE-2024-30924
Published: 2024-04-18
Description: Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the checkin.php component.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-692
References: https://chocapikk.com/posts/2024/derbynet-vulnerabilities/; http://seclists.org/fulldisclosure/2024/Apr/10; https://chocapikk.com/posts/2024/derbynet-vulnerabilities/
CVE: CVE-2024-30925
Published: 2024-04-18
Description: Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the photo-thumbs.php component.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://chocapikk.com/posts/2024/derbynet-vulnerabilities/; http://seclists.org/fulldisclosure/2024/Apr/11; https://chocapikk.com/posts/2024/derbynet-vulnerabilities/
CVE: CVE-2024-30926
Published: 2024-04-18
Description: Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the ./inc/kiosks.inc component.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79
References: https://chocapikk.com/posts/2024/derbynet-vulnerabilities/; http://seclists.org/fulldisclosure/2024/Apr/12; https://chocapikk.com/posts/2024/derbynet-vulnerabilities/
CVE: CVE-2024-30927
Published: 2024-04-18
Description: Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the racer-results.php component.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-79
References: https://chocapikk.com/posts/2024/derbynet-vulnerabilities/; http://seclists.org/fulldisclosure/2024/Apr/13; https://chocapikk.com/posts/2024/derbynet-vulnerabilities/
CVE: CVE-2024-30928
Published: 2024-04-18
Description: SQL Injection vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary SQL commands via 'classids' Parameter in ajax/query.slide.next.inc
CVSS Score: 8.1 (HIGH)
CWE: CWE-89
References: https://chocapikk.com/posts/2024/derbynet-vulnerabilities/; http://seclists.org/fulldisclosure/2024/Apr/14; https://chocapikk.com/posts/2024/derbynet-vulnerabilities/
CVE: CVE-2024-30929
Published: 2024-04-18
Description: Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the 'back' Parameter in playlist.php
CVSS Score: 8.0 (HIGH)
CWE: CWE-79
References: https://chocapikk.com/posts/2024/derbynet-vulnerabilities/; http://seclists.org/fulldisclosure/2024/Apr/15; https://chocapikk.com/posts/2024/derbynet-vulnerabilities/
CVE: CVE-2024-32473
Published: 2024-04-18
Description: Moby is an open source container framework that is a key component of Docker Engine, Docker Desktop, and other distributions of container tooling or runtimes. In 26.0.0, IPv6 is not disabled on network interfaces, including those belonging to networks where `--ipv6=false`. An container with an `ipvlan` or `macvlan` interface will normally be configured to share an external network link with the host machine. Because of this direct access, (1) Containers may be able to communicate with other hosts on the local network over link-local IPv6 addresses, (2) if router advertisements are being broadcast over the local network, containers may get SLAAC-assigned addresses, and (3) the interface  will be a member of IPv6 multicast groups. This means interfaces in IPv4-only networks present an unexpectedly and unnecessarily increased attack surface. The issue is patched in 26.0.2. To completely disable IPv6 in a container, use `--sysctl=net.ipv6.conf.all.disable_ipv6=1` in the `docker create` or `docker run` command. Or, in the service configuration of a `compose` file.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-668
References: https://github.com/moby/moby/commit/7cef0d9cd1cf221d8c0b7b7aeda69552649e0642; https://github.com/moby/moby/security/advisories/GHSA-x84c-p2g9-rqv9; https://github.com/moby/moby/commit/7cef0d9cd1cf221d8c0b7b7aeda69552649e0642
CVE: CVE-2024-3741
Published: 2024-04-18
Description: Electrolink transmitters are vulnerable to an authentication bypass 
vulnerability affecting the login cookie. An attacker can set an 
arbitrary value except 'NO' to the login cookie and have full system 
access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-302
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02; https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02
CVE: CVE-2024-1491
Published: 2024-04-18
Description: The devices allow access to an unprotected endpoint that allows MPFS 
file system binary image upload without authentication. The MPFS2 file 
system module provides a light-weight read-only file system that can be 
stored in external EEPROM, external serial flash, or internal flash 
program memory. This file system serves as the basis for the HTTP2 web 
server module, but is also used by the SNMP module and is available to 
other applications that require basic read-only storage capabilities. 
This can be exploited to overwrite the flash program memory that holds 
the web server's main interfaces and execute arbitrary code.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02; https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02
CVE: CVE-2024-21846
Published: 2024-04-18
Description: An unauthenticated attacker can reset the board and stop transmitter 
operations by sending a specially-crafted GET request to the command.cgi
 gateway, resulting in a denial-of-service scenario.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-306
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02; https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02
CVE: CVE-2024-21872
Published: 2024-04-18
Description: The device allows an unauthenticated attacker to bypass authentication 
and modify the cookie to reveal hidden pages that allows more critical 
operations to the transmitter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-565
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02; https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02
CVE: CVE-2024-22186
Published: 2024-04-18
Description: The application suffers from a privilege escalation vulnerability. An 
attacker logged in as guest can escalate his privileges by poisoning the
 cookie to become administrator.
CVSS Score: 8.8 (HIGH)
CWE: CWE-565
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02; https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02
CVE: CVE-2024-3742
Published: 2024-04-18
Description: Electrolink transmitters store credentials in clear-text. Use of these credentials could allow an attacker to access the system.
CVSS Score: 7.5 (HIGH)
CWE: CWE-312
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02; https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-02
CVE: CVE-2024-30938
Published: 2024-04-19
Description: SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to obtain sensitive information via the ID parameter in the SEMCMS_User.php component.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/lampSEC/semcms/blob/main/semcms.md; https://github.com/lampSEC/semcms/blob/main/semcms.md
CVE: CVE-2024-31750
Published: 2024-04-19
Description: SQL injection vulnerability in f-logic datacube3 v.1.0 allows a remote attacker to obtain sensitive information via the req_id parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/lampSEC/semcms/blob/main/datacube3.md; https://github.com/lampSEC/semcms/blob/main/datacube3.md
CVE: CVE-2024-22061
Published: 2024-04-19
Description: A Heap Overflow vulnerability in WLInfoRailService component of Ivanti Avalanche before 6.4.3 allows a remote unauthenticated attacker to execute arbitrary commands 
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US; https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US
CVE: CVE-2024-23526
Published: 2024-04-19
Description: An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditions can allow an unauthenticated remote attacker to read sensitive information in memory. 
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US; https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US
CVE: CVE-2024-23528
Published: 2024-04-19
Description: An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditions can allow an unauthenticated remote attacker to read sensitive information in memory. 
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US; https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US
CVE: CVE-2024-23529
Published: 2024-04-19
Description: An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditions can allow an unauthenticated remote attacker to read sensitive information in memory. 
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US; https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US
CVE: CVE-2024-23530
Published: 2024-04-19
Description: An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditions can allow an unauthenticated remote attacker to read sensitive information in memory. 
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US; https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US
CVE: CVE-2024-23531
Published: 2024-04-19
Description: An Integer Overflow vulnerability in WLInfoRailService component of Ivanti Avalanche before 6.4.3 allows an unauthenticated remote attacker to perform denial of service attacks. In certain rare conditions this could also lead to reading content from memory. 
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US; https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US
CVE: CVE-2024-23532
Published: 2024-04-19
Description: An out-of-bounds Read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows an authenticated remote attacker to perform denial of service attacks. In certain conditions this could also lead to remote code execution. 
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US; https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US
CVE: CVE-2024-23533
Published: 2024-04-19
Description: An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditions can allow an authenticated remote attacker to read sensitive information in memory. 
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US; https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US
CVE: CVE-2024-23534
Published: 2024-04-19
Description: An Unrestricted File-upload vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM. 
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US; https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US
CVE: CVE-2024-23535
Published: 2024-04-19
Description: A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM. 
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US; https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US
CVE: CVE-2024-24991
Published: 2024-04-19
Description: A Null Pointer Dereference vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows an authenticated remote attacker to perform denial of service attacks. 
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US; https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US
CVE: CVE-2024-24992
Published: 2024-04-19
Description: A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US; ZDI-CAN-22854https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US
CVE: CVE-2024-24993
Published: 2024-04-19
Description: A Race Condition (TOCTOU) vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM. 
CVSS Score: 7.5 (HIGH)
CWE: CWE-367
References: https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US; https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US
CVE: CVE-2024-24994
Published: 2024-04-19
Description: A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM. 
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US; https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US
CVE: CVE-2024-24995
Published: 2024-04-19
Description: A Race Condition (TOCTOU) vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM. 
CVSS Score: 7.5 (HIGH)
CWE: CWE-367
References: https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US; https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US
CVE: CVE-2024-24996
Published: 2024-04-19
Description: A Heap overflow vulnerability in WLInfoRailService component of Ivanti Avalanche before 6.4.3 allows an unauthenticated remote attacker to execute arbitrary commands. 
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122
References: https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US; https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US
CVE: CVE-2024-24997
Published: 2024-04-19
Description: A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM. 
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US; https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US
CVE: CVE-2024-24998
Published: 2024-04-19
Description: A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM. 
CVSS Score: 8.8 (HIGH)
CWE: CWE-31
References: https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US; https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US
CVE: CVE-2024-24999
Published: 2024-04-19
Description: A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM. 
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US; https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US
CVE: CVE-2024-25000
Published: 2024-04-19
Description: A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM. 
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US; https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US
CVE: CVE-2024-27975
Published: 2024-04-19
Description: An Use-after-free vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM. 
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US; https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US
CVE: CVE-2024-27976
Published: 2024-04-19
Description: A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM. 
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US; https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US
CVE: CVE-2024-27977
Published: 2024-04-19
Description: A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to delete arbitrary files, thereby leading to Denial-of-Service. 
CVSS Score: 8.1 (HIGH)
CWE: CWE-22
References: https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US; https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US
CVE: CVE-2024-27978
Published: 2024-04-19
Description: A Null Pointer Dereference vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows an authenticated remote attacker to perform denial of service attacks.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US; https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US
CVE: CVE-2024-27984
Published: 2024-04-19
Description: A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to delete specific type of files and/or cause denial of service. 
CVSS Score: 7.1 (HIGH)
CWE: CWE-22
References: https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US; https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US
CVE: CVE-2024-29204
Published: 2024-04-19
Description: A Heap Overflow vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows a remote unauthenticated attacker to execute arbitrary commands 
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122
References: https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US; https://forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed?language=en_US
CVE: CVE-2024-3560
Published: 2024-04-19
Description: The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the _id value in all versions up to, and including, 4.2.6.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3072233%40learnpress&new=3072233%40learnpress&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/8ea002da-bf37-4c6d-a46e-4f0e7f8968ad?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3072233%40learnpress&new=3072233%40learnpress&sfp_email=&sfph_mail=
CVE: CVE-2024-3598
Published: 2024-04-19
Description: The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Creative Button widget in all versions up to, and including, 3.6.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpmet.com/plugin/elementskit/; https://www.wordfence.com/threat-intel/vulnerabilities/id/a9e4b14f-0f55-47bc-8e40-19b262e50561?source=cve; https://wpmet.com/plugin/elementskit/
CVE: CVE-2024-3600
Published: 2024-04-19
Description: The Poll Maker – Best WordPress Poll Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting due to a missing capability check on the ays_poll_maker_quick_start AJAX action in addition to insufficient escaping and sanitization in all versions up to, and including, 5.1.8. This makes it possible for unauthenticated attackers to create quizzes and inject malicious web scripts into them that execute when a user visits the page.
CVSS Score: 7.2 (HIGH)
CWE: CWE-862, CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3071296%40poll-maker&new=3071296%40poll-maker&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/fec015e1-7f64-4917-a242-90bd1135f680?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3071296%40poll-maker&new=3071296%40poll-maker&sfp_email=&sfph_mail=