deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-6380
Published: 2025-07-24
Description: The ONLYOFFICE Docs plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization within its oo.callback REST endpoint in versions 1.1.0 to 2.2.0. The plugin’s permission callback only verifies that the supplied, encrypted attachment ID maps to an existing attachment post, but does not verify the requester’s identity or capabilities. This makes it possible for unauthenticated attackers to log in as an arbitrary user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/onlyoffice/tags/2.2.0/public/class-onlyoffice-plugin-public.php#L111; https://plugins.trac.wordpress.org/browser/onlyoffice/tags/2.2.0/public/views/class-onlyoffice-plugin-callback.php#L57; https://wordpress.org/plugins/onlyoffice/#developers
CVE: CVE-2025-6382
Published: 2025-07-24
Description: The Taeggie Feed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's taeggie-feed shortcode in all versions up to, and including, 0.1.10. The plugin’s render() method takes the user-supplied name attribute and injects it directly into a <script> tag - both in the id attribute and inside jQuery.getScript() - without proper escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/taeggie-feed/trunk/taeggie_feed.php; https://plugins.trac.wordpress.org/changeset/3336357/; https://wordpress.org/plugins/taeggie-feed/#developers
CVE: CVE-2025-6385
Published: 2025-07-24
Description: The WP Applink plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title’ parameter in all versions up to, and including, 0.4.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/wp-applink/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/75e41e78-ce8c-4248-9eca-b36391fbbbde?source=cve
CVE: CVE-2025-6387
Published: 2025-07-24
Description: The WP Get The Table plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in all versions up to, and including, 1.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3333917%40wp-get-the-table&new=3333917%40wp-get-the-table; https://wordpress.org/plugins/wp-get-the-table/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/8bd18b7a-6555-4838-821d-fcbe0be34ac4?source=cve
CVE: CVE-2025-6441
Published: 2025-07-24
Description: The Webinar Solution: Create live/evergreen/automated/instant webinars, stream & Zoom Meetings | WebinarIgnition plugin for WordPress is vulnerable to unauthenticated login token generation due to a missing capability check on the `webinarignition_sign_in_support_staff` and `webinarignition_register_support` functions in all versions up to, and including, 4.03.32. This makes it possible for unauthenticated attackers to generate login tokens for arbitrary WordPress users under certain circumstances, issuing authorization cookies which can lead to authentication bypass.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/webinar-ignition/trunk/inc/class-webinarignition.php#L549; https://plugins.trac.wordpress.org/browser/webinar-ignition/trunk/inc/class.WebinarignitionAjax.php#L769; https://plugins.trac.wordpress.org/browser/webinar-ignition/trunk/inc/class.WebinarignitionManager.php#L1040
CVE: CVE-2025-6539
Published: 2025-07-24
Description: The Voltax Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 1.6.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/voltax-video-player/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/babc2e50-27a5-413b-8611-0e9e9db33deb?source=cve
CVE: CVE-2025-6588
Published: 2025-07-24
Description: The FunnelCockpit plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘error’ parameter in all versions up to, and including, 1.4.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick an administrative user into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/funnelcockpit/trunk/admin/class-funnelcockpit-admin.php#L433; https://plugins.trac.wordpress.org/changeset/3337752; https://www.wordfence.com/threat-intel/vulnerabilities/id/df2e744f-e1d6-4380-8e24-e98e9df4dd2f?source=cve
CVE: CVE-2025-7640
Published: 2025-07-24
Description: The hiWeb Export Posts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.9.0.0. This is due to missing or incorrect nonce validation on the tool-dashboard-history.php file. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php), via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 8.1 (HIGH)
CWE: CWE-22
References: https://plugins.trac.wordpress.org/browser/hiweb-export-posts/trunk/views/tool-dashboard-history.php#L3; https://wordpress.org/plugins/hiweb-export-posts/; https://www.wordfence.com/threat-intel/vulnerabilities/id/38c23f59-8332-49ab-a219-1f5fac8a283c?source=cve
CVE: CVE-2025-7690
Published: 2025-07-24
Description: The Affiliate Plus plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.2. This is due to missing or incorrect nonce validation on the 'affiplus_settings' page. This makes it possible for unauthenticated attackers to perform an unauthorized action granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/browser/affiliate-plus/trunk/affiplus.php; https://plugins.trac.wordpress.org/browser/affiliate-plus/trunk/affipsettings.php; https://wordpress.org/plugins/affiliate-plus/
CVE: CVE-2025-7695
Published: 2025-07-24
Description: The Dataverse Integration plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization checks within its reset_password_link REST endpoint in versions 2.77 through 2.81. The endpoint’s handler accepts a client-supplied id, email, or login, looks up that user, and calls get_password_reset_key() unconditionally. Because it only checks that the caller is authenticated, and not that they own or may edit the target account, any authenticated attacker, with Subscriber-level access and above, can obtain a password reset link for an administrator and hijack that account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/integration-cds/trunk/src/API/AuthenticatedEndpoint.php; https://plugins.trac.wordpress.org/browser/integration-cds/trunk/src/API/Endpoints/GetResetUserPasswordLink.php; https://plugins.trac.wordpress.org/changeset?new=3329717%40integration-cds%2Ftrunk&old=3323579%40integration-cds%2Ftrunk
CVE: CVE-2025-7780
Published: 2025-07-24
Description: The AI Engine plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.4. The simpleTranscribeAudio endpoint fails to restrict URL schemes before calling get_audio(). This makes it possible for authenticated attackers, with Subscriber-level access and above, to read any file on the web server and exfiltrate it via the plugin’s OpenAI API integration.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://plugins.trac.wordpress.org/browser/ai-engine/tags/2.9.3/classes/api.php#L625; https://plugins.trac.wordpress.org/browser/ai-engine/tags/2.9.3/classes/engines/chatml.php#L829; https://plugins.trac.wordpress.org/changeset/3332540/
CVE: CVE-2025-7822
Published: 2025-07-24
Description: The WP Wallcreeper plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the admin_notices hook in all versions up to, and including, 1.6.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to enable and disable caching.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/wp-wallcreeper/trunk/wp-wallcreeper.php#L166; https://www.wordfence.com/threat-intel/vulnerabilities/id/629f36e3-f4a4-43a6-a98b-960088c8dd77?source=cve
CVE: CVE-2025-7835
Published: 2025-07-24
Description: The iThoughts Advanced Code Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.10. This is due to missing or incorrect nonce validation on the 'ithoughts_ace_update_options' AJAX action. This makes it possible for unauthenticated attackers to update plugin settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wordpress.org/plugins/ithoughts-advanced-code-editor/; https://www.wordfence.com/threat-intel/vulnerabilities/id/e99ed03f-ed0a-4f17-b9fe-db0a0e573ed2?source=cve
CVE: CVE-2025-7959
Published: 2025-07-24
Description: The Station Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘width' and 'height’ parameter in all versions up to, and including, 2.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/station-pro/tags/2.4.2/core/inc/player/class-station-player.php#L71; https://wordpress.org/plugins/station-pro/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/f4026b41-29c3-4e0a-bf75-ae4ba47edb4f?source=cve
CVE: CVE-2025-7966
Published: 2025-07-24
Description: The Get Youtube Subs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘channel', 'layout', and 'subs_count’ parameters in all versions up to, and including, 3.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/get-youtube-subs/trunk/includes/youtubesubs-class.php#L142; https://wordpress.org/plugins/get-youtube-subs/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/5a25728c-3d98-414b-bad0-2c05eb1f4ca2?source=cve
CVE: CVE-2025-8071
Published: 2025-07-24
Description: Mine CloudVod plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘audio’ parameter in all versions up to, and including, 2.1.10 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/mine-cloudvod/tags/2.1.10/build/audioplayer/render.php#L66; https://plugins.trac.wordpress.org/browser/mine-cloudvod/tags/2.2.0/build/audioplayer/render.php#L66; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3352024%40mine-cloudvod&new=3352024%40mine-cloudvod&sfp_email=&sfph_mail=
CVE: CVE-2025-40680
Published: 2025-07-24
Description: Lack of sensitive data encryption in CapillaryScope v2.5.0 of Capillary io, which stores both the proxy credentials and the JWT session token in plain text within different registry keys on the Windows operating system. Any authenticated local user with read access to the registry can extract these sensitive values.
CWE: CWE-311
References: https://www.incibe.es/en/incibe-cert/notices/aviso/encryption-sensitive-data-capillaryscope-missing
CVE: CVE-2025-4822
Published: 2025-07-24
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bayraktar Solar Energies ScadaWatt Otopilot allows SQL Injection.This issue affects ScadaWatt Otopilot: before 27.05.2025.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.usom.gov.tr/bildirim/tr-25-0175
CVE: CVE-2025-5243
Published: 2025-07-24
Description: Unrestricted Upload of File with Dangerous Type, Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SMG Software Information Portal allows Code Injection, Upload a Web Shell to a Web Server, Code Inclusion.This issue affects Information Portal: before 13.06.2025.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-78, CWE-434
References: https://www.usom.gov.tr/bildirim/tr-25-0174
CVE: CVE-2025-45731
Published: 2025-07-24
Description: A group deletion race condition in 2FAuth v5.5.0 causes data inconsistencies and orphaned accounts when a group is deleted while other operations are pending.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-362
References: https://github.com/Bubka/2FAuth/commit/b82a7eb604ddfe994fadce7db3a9e4a201c54a83; https://github.com/Bubka/2FAuth/security/advisories/GHSA-ph6w-q992-7qrx
CVE: CVE-2025-4784
Published: 2025-07-24
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Moderec Tourtella allows SQL Injection.This issue affects Tourtella: before 26.05.2025.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.usom.gov.tr/bildirim/tr-25-0176
CVE: CVE-2025-33013
Published: 2025-07-24
Description: IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, 3.6.0, and MQ Operator SC2 3.2.0 through 3.2.13 Container could disclose sensitive information to a local user due to improper clearing of heap memory before release.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-244, CWE-212
References: https://www.ibm.com/support/pages/node/7240431
CVE: CVE-2025-33109
Published: 2025-07-24
Description: IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 is vulnerable to a privilege escalation caused by an invalid database authority check.  A bad actor could execute a database procedure or function without having all required permissions, in addition to causing denial of service for some database actions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-250
References: https://www.ibm.com/support/pages/node/7240410
CVE: CVE-2025-36005
Published: 2025-07-24
Description: IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, 3.6.0, and MQ Operator SC2 3.2.0 through 3.2.13 Internet Pass-Thru could allow a malicious user to obtain sensitive information from another TLS session connection by the proxy to the same hostname and port due to improper certificate validation.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://www.ibm.com/support/pages/node/7240431
CVE: CVE-2025-51082
Published: 2025-07-24
Description: Tenda AC8V4 V16.03.34.06` was discovered to contain stack overflow at /goform/fast_setting_wifi_set. The manipulation of the argument `timeZone` leads to stack-based buffer overflow.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-121
References: http://tenda.com; https://github.com/TL-SN/IOT/blob/main/Tenda/Tenda-AC8v4%20%20V16.03.34.06/CVE-2025-51082.md
CVE: CVE-2025-51085
Published: 2025-07-24
Description: Tenda AC8V4 V16.03.34.06` was discovered to contain stack overflow at /goform/SetSysTimeCfg. The manipulation of the argument `timeZone` and `timeType` leads to stack-based buffer overflow.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-121
References: http://tenda.com; https://github.com/TL-SN/IOT/blob/main/Tenda/Tenda-AC8v4%20%20V16.03.34.06/CVE-2025-51085.md
CVE: CVE-2025-51087
Published: 2025-07-24
Description: Tenda AC8V4 V16.03.34.06` was discovered to contain stack overflow at /goform/saveParentControlInfo. The manipulation of the argument time leads to stack-based buffer overflow.
CVSS Score: 8.6 (HIGH)
CWE: CWE-121
References: http://tenda.com; https://github.com/TL-SN/IOT/blob/main/Tenda/Tenda-AC8v4%20%20V16.03.34.06/CVE-2025-51087.md
CVE: CVE-2025-51088
Published: 2025-07-24
Description: Tenda AC8V4 V16.03.34.06` was discovered to contain stack overflow at /goform/WifiGuestSet. The manipulation of the argument `shareSpeed` leads to stack-based buffer overflow.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-121
References: http://tenda.com; https://github.com/TL-SN/IOT/blob/main/Tenda/Tenda-AC8v4%20%20V16.03.34.06/CVE-2025-51088.md
CVE: CVE-2025-51089
Published: 2025-07-24
Description: Tenda AC8V4 V16.03.34.06` was discovered to contain heap overflow at /goform/GetParentControlInfo.The manipulation of the argument `mac` leads to heap-based buffer overflow.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-122
References: http://tenda.com; https://github.com/TL-SN/IOT/blob/main/Tenda/Tenda-AC8v4%20%20V16.03.34.06/CVE-2025-51089.md
CVE: CVE-2025-8114
Published: 2025-07-24
Description: A flaw was found in libssh, a library that implements the SSH protocol. When calculating the session ID during the key exchange (KEX) process, an allocation failure in cryptographic functions may lead to a NULL pointer dereference. This issue can cause the client or server to crash.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-476
References: https://access.redhat.com/security/cve/CVE-2025-8114; https://bugzilla.redhat.com/show_bug.cgi?id=2383220; https://git.libssh.org/projects/libssh.git/commit/?id=53ac23ded4cb2c5463f6c4cd1525331bd578812d
CVE: CVE-2025-25214
Published: 2025-07-24
Description: A race condition vulnerability exists in the aVideoEncoder.json.php unzip functionality of WWBN AVideo 14.4 and dev master commit 8a8954ff. A series of specially crafted HTTP request can lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-362
References: https://talosintelligence.com/vulnerability_reports/TALOS-2025-2212; https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2212
CVE: CVE-2025-36548
Published: 2025-07-24
Description: A cross-site scripting (xss) vulnerability exists in the LoginWordPress loginForm cancelUri parameter functionality of WWBN AVideo 14.4 and dev master commit 8a8954ff. A specially crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get a user to visit a webpage to trigger this vulnerability.
CVSS Score: 8.3 (HIGH)
CWE: CWE-79
References: https://talosintelligence.com/vulnerability_reports/TALOS-2025-2208; https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2208
CVE: CVE-2025-41420
Published: 2025-07-24
Description: A cross-site scripting (xss) vulnerability exists in the userLogin cancelUri parameter functionality of WWBN AVideo 14.4 and dev master commit 8a8954ff. A specially crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get a user to visit a webpage to trigger this vulnerability.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79
References: https://talosintelligence.com/vulnerability_reports/TALOS-2025-2209; https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2209
CVE: CVE-2025-46410
Published: 2025-07-24
Description: A cross-site scripting (xss) vulnerability exists in the managerPlaylists PlaylistOwnerUsersId parameter functionality of WWBN AVideo 14.4 and dev master commit 8a8954ff. A specially crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get a user to visit a webpage to trigger this vulnerability.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79
References: https://talosintelligence.com/vulnerability_reports/TALOS-2025-2205; https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2205; https://talosintelligence.com/vulnerability_reports/TALOS-2025-2205
CVE: CVE-2025-46993
Published: 2025-07-24
Description: Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb25-48.html
CVE: CVE-2025-46996
Published: 2025-07-24
Description: Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb25-48.html
CVE: CVE-2025-47061
Published: 2025-07-24
Description: Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb25-48.html
CVE: CVE-2025-48732
Published: 2025-07-24
Description: An incomplete blacklist exists in the .htaccess sample of WWBN AVideo 14.4 and dev master commit 8a8954ff. A specially crafted HTTP request can lead to a arbitrary code execution. An attacker can request a .phar file to trigger this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-184
References: https://talosintelligence.com/vulnerability_reports/TALOS-2025-2213; https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2213; https://talosintelligence.com/vulnerability_reports/TALOS-2025-2213
CVE: CVE-2025-50128
Published: 2025-07-24
Description: A cross-site scripting (xss) vulnerability exists in the videoNotFound 404ErrorMsg parameter functionality of WWBN AVideo 14.4 and dev master commit 8a8954ff. A specially crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get a user to visit a webpage to trigger this vulnerability.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79
References: https://talosintelligence.com/vulnerability_reports/TALOS-2025-2207; https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2207; https://talosintelligence.com/vulnerability_reports/TALOS-2025-2207