deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-21683
Published: 2025-01-31
Description: In the Linux kernel, the following vulnerability has been resolved:

bpf: Fix bpf_sk_select_reuseport() memory leak

As pointed out in the original comment, lookup in sockmap can return a TCP
ESTABLISHED socket. Such TCP socket may have had SO_ATTACH_REUSEPORT_EBPF
set before it was ESTABLISHED. In other words, a non-NULL sk_reuseport_cb
does not imply a non-refcounted socket.

Drop sk's reference in both error paths.

unreferenced object 0xffff[PII_REDACTED]00 (size 2048):
  comm "test_progs", pid 44109, jiffies[PII_REDACTED]
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    80 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace (crc 9336483b):
    __kmalloc_noprof+0x3bf/0x560
    __reuseport_alloc+0x1d/0x40
    reuseport_alloc+0xca/0x150
    reuseport_attach_prog+0x87/0x140
    sk_reuseport_attach_bpf+0xc8/0x100
    sk_setsockopt+0x1181/0x1990
    do_sock_setsockopt+0x12b/0x160
    __sys_setsockopt+0x7b/0xc0
    __x64_sys_setsockopt+0x1b/0x30
    do_syscall_64+0x93/0x180
    entry_SYSCALL_64_after_hwframe+0x76/0x7e
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401, CWE-401
References: https://git.kernel.org/stable/c/0ab52a8ca6e156a64c51b5e7456cac9a0ebfd9bf; https://git.kernel.org/stable/c/b02e70be498b138e9c21701c2f33f4018ca7cd5e; https://git.kernel.org/stable/c/b3af60928ab9129befa65e6df0310d27300942bf
CVE: CVE-2025-24827
Published: 2025-01-31
Description: Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 39378.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-426
References: https://security-advisory.acronis.com/advisories/SEC-7841
CVE: CVE-2025-24828
Published: 2025-01-31
Description: Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 39378.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-426
References: https://security-advisory.acronis.com/advisories/SEC-7842
CVE: CVE-2025-24829
Published: 2025-01-31
Description: Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 39378.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-426
References: https://security-advisory.acronis.com/advisories/SEC-7839
CVE: CVE-2025-24830
Published: 2025-01-31
Description: Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 39378.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-426
References: https://security-advisory.acronis.com/advisories/SEC-7829
CVE: CVE-2025-24831
Published: 2025-01-31
Description: Local privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 39378.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-428
References: https://security-advisory.acronis.com/advisories/SEC-6153
CVE: CVE-2025-0929
Published: 2025-01-31
Description: SQL injection vulnerability in TeamCal Neo, version 3.8.2. This could allow an attacker to retrieve, update and delete all database information by injecting a malicious SQL statement via the ‘abs’ parameter in ‘/teamcal/src/index.php’.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-teamcal-neo
CVE: CVE-2025-0930
Published: 2025-01-31
Description: Reflected Cross-Site Scripting (XSS) in TeamCal Neo, version 3.8.2. This allows an attacker to execute malicious JavaScript code, after injecting code via the ‘abs’ parameter in ‘/teamcal/src/index.php’.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-teamcal-neo
CVE: CVE-2024-45650
Published: 2025-01-31
Description: IBM Security Verify Directory 10.0 through 10.0.3 is vulnerable to a denial of service when sending an LDAP extended operation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-754
References: https://www.ibm.com/support/pages/node/7182169
CVE: CVE-2023-38739
Published: 2025-01-31
Description: IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://www.ibm.com/support/pages/node/7182004
CVE: CVE-2024-11741
Published: 2025-01-31
Description: Grafana is an open-source platform for monitoring and observability. 
The Grafana Alerting VictorOps integration was not properly protected and could be exposed to users with Viewer permission. 
Fixed in versions 11.5.0, 11.4.1, 11.3.3,  11.2.6, 11.1.11, 11.0.11 and 10.4.15
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://grafana.com/security/security-advisories/cve-2024-11741/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2024-40696
Published: 2025-01-31
Description: IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://www.ibm.com/support/pages/node/7182011
CVE: CVE-2024-45089
Published: 2025-01-31
Description: IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition EBICS server could allow an authenticated user to obtain sensitive filename information due to an observable discrepancy.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-203
References: https://www.ibm.com/support/pages/node/7182063
CVE: CVE-2024-47103
Published: 2025-01-31
Description: IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://www.ibm.com/support/pages/node/7182011
CVE: CVE-2024-47116
Published: 2025-01-31
Description: IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.ibm.com/support/pages/node/7182046
CVE: CVE-2024-49807
Published: 2025-01-31
Description: IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.3 Standard Edition is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://www.ibm.com/support/pages/node/7182011
CVE: CVE-2024-53319
Published: 2025-01-31
Description: A heap buffer overflow in the XML Text Escaping component of Qualisys C++ SDK commit a32a21a allows attackers to cause Denial of Service (DoS) via escaping special XML characters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://github.com/qualisys/qualisys_cpp_sdk/issues/49
CVE: CVE-2024-53320
Published: 2025-01-31
Description: Qualisys C++ SDK commit a32a21a was discovered to contain multiple stack buffer overflows via the GetCurrentFrame, SaveCapture, and LoadProject functions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/qualisys/qualisys_cpp_sdk/issues/47
CVE: CVE-2024-53537
Published: 2025-01-31
Description: An issue in OpenPanel v0.3.4 to v0.2.1 allows attackers to execute a directory traversal in File Actions of File Manager.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: https://openpanel.com/docs/changelog/0.3.5/#%EF%B8%8F-security-fixes; https://packetstorm.news/files/id/188913/
CVE: CVE-2024-53582
Published: 2025-01-31
Description: An issue found in the Copy and View functions in the File Manager component of OpenPanel v0.3.4 allows attackers to execute a directory traversal via a crafted HTTP request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://openpanel.com/docs/changelog/0.3.5/#%EF%B8%8F-security-fixes; https://packetstorm.news/files/id/188913/
CVE: CVE-2025-22994
Published: 2025-01-31
Description: O2OA 9.1.3 is vulnerable to Cross Site Scripting (XSS) in Meetings - Settings.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/o2oa/o2oa/issues/167
CVE: CVE-2025-23215
Published: 2025-01-31
Description: PMD is an extensible multilanguage static code analyzer. The passphrase for the PMD and PMD Designer release signing keys are included in jar published to Maven Central. The private key itself is not known to have been compromised itself, but given its passphrase is, it must also be considered potentially compromised. As a mitigation, both compromised keys have been revoked so that no future use of the keys are possible. Note, that the published artifacts in Maven Central under the group id net.sourceforge.pmd are not compromised and the signatures are valid.
CWE: CWE-200, CWE-312, CWE-540
References: https://github.com/pmd/pmd-designer/commit/1548f5f27ba2981b890827fecbd0612fa70a0362; https://github.com/pmd/pmd-designer/commit/e87a45312753ec46b3e5576c6f6ac1f7de2f5891; https://github.com/pmd/pmd/security/advisories/GHSA-88m4-h43f-wx84
CVE: CVE-2024-42671
Published: 2025-01-31
Description: A Host Header Poisoning Open Redirect issue in slabiak Appointment Scheduler v.1.0.5 allows a remote attacker to redirect users to a malicious website, leading to potential credential theft, malware distribution, or other malicious activities.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/abbisQQ/Appointment-Scheduler-Host-Header-Poisoning-Open-Redirect/blob/main/README.md; https://github.com/slabiak/AppointmentScheduler/issues/53
CVE: CVE-2024-47857
Published: 2025-01-31
Description: SSH Communication Security PrivX versions between 18.0-36.0 implement insufficient validation on public key signatures when using native SSH connections via a proxy port. This allows an existing PrivX "account A" to impersonate another existing PrivX "account B" and gain access to SSH target hosts to which the "account B" has access.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://info.ssh.com/impersonation-vulnerability-privx; https://ssh.com
CVE: CVE-2024-49339
Published: 2025-01-31
Description: IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4.0 through 3.2.4.1 is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://www.ibm.com/support/pages/node/7182201
CVE: CVE-2024-49349
Published: 2025-01-31
Description: IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4.0 through 3.2.4.1 is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.ibm.com/support/pages/node/7182203
CVE: CVE-2024-53584
Published: 2025-01-31
Description: OpenPanel v0.3.4 was discovered to contain an OS command injection vulnerability via the timezone parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://openpanel.com/docs/changelog/0.3.5/#%EF%B8%8F-security-fixes; https://packetstorm.news/files/id/188915/
CVE: CVE-2024-57432
Published: 2025-01-31
Description: macrozheng mall-tiny 1.0.1 suffers from Insecure Permissions. The application's JWT signing keys are hardcoded and do not change. User information is explicitly written into the JWT and used for subsequent privilege management, making it is possible to forge the JWT of any user to achieve authentication bypass.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://github.com/peccc/restful_vul/blob/main/mall_tiny_weak_jwt/mall_tiny_weak_jwt.md
CVE: CVE-2025-22957
Published: 2025-01-31
Description: A SQL injection vulnerability exists in the front-end of the website in ZZCMS <= 2023, which can be exploited without any authentication. This vulnerability could potentially allow attackers to gain unauthorized access to the database and extract sensitive information.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.zzcms.net/; https://github.com/youyouiooi/vulnerability-reports/blob/main/CVE-2025-22957/REANDE.md
CVE: CVE-2025-23001
Published: 2025-01-31
Description: A Host header injection vulnerability exists in CTFd 3.7.5, due to the application failing to properly validate or sanitize the Host header. An attacker can manipulate the Host header in HTTP requests, which may lead to phishing attacks, reset password, or cache poisoning. NOTE: the Supplier's position is that the end user is supposed to edit the NGINX configuration template to set server_name (with this setting, Host header injection cannot occur).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-644
References: https://blog.ctfd.io/ctfd-3-7-6/; https://codetoanbug.com/poc-cve-2025-23001-ctfd-english/; https://github.com/CTFd/CTFd
CVE: CVE-2025-0938
Published: 2025-01-31
Description: The Python standard library functions `urllib.parse.urlsplit` and `urlparse` accepted domain names that included square brackets which isn't valid according to RFC 3986. Square brackets are only meant to be used as delimiters for specifying IPv6 and IPvFuture hosts in URLs. This could result in differential parsing across the Python URL parser and other specification-compliant URL parsers.
CWE: CWE-20
References: https://github.com/python/cpython/commit/526617ed68cde460236c973e5d0a8bad4de896ba; https://github.com/python/cpython/commit/90e526ae67b172ed7c6c56e7edad36263b0f9403; https://github.com/python/cpython/commit/a7084f6075c9595ba60119ce8c62f1496f50c568
CVE: CVE-2025-0934
Published: 2025-01-31
Description: A vulnerability was found in code-projects Job Recruitment 1.0. It has been classified as problematic. This affects an unknown part of the file /parse/_call_job_search_ajax.php. The manipulation of the argument n leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://code-projects.org/; https://github.com/1337g/CVE-2025-X/blob/main/job-recruitment_call_job_search_ajax-sqli.pdf; https://vuldb.com/?ctiid.294243
CVE: CVE-2024-53354
Published: 2025-01-31
Description: Multiple SQL injection vulnerabilities in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote authenticated attackers to execute arbitrary SQL commands via the (1) user parameter to /api/management/findfilterlist; the (2) user or (3) filter parameter to /api/audit/findmetawatcher; the (4) user parameter to /api/audit/findmetaalert; the (5) user parameter to /api/management/ds; the (6) user or (7) filter parameter to /api/audit/findmetarunalert; the (7) user parameter to /api/management/findtimeview; the (8) user, (9) filter or (10) target parameter to /api/management/getihmsettings; the (11) user or (12) filter parameter to /api/management/elementstype; the (14) login, (15) user, (16) is_local, (17) is_ldap, or (18) is_openid parameter to /api/user/addalias; the (19) role parameter to /api/user/addrole; the (20) user or (21) filter parameter to /api/management/addtimeview; the (22) TIMEAGO, (23) IDENTIFIER, (24) USER, (25) NAME, or (26) COST parameter to /api/management/addtagcosts; the (27) USER, or (28) VM_COST parameter to /api/management/updategenericcpucost; the (29) VM, (30) HOST, or (31) STORAGE parameter to /api/management/updatecostinfo; the (32) user, (33) filter, or (34) timeago parameter to /api/management/addfilter; the (35) user parameter to /api/report/getreporthistory.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/Elymaro/CVE/blob/main/EasyVirt/CVE-2024-53354.md
CVE: CVE-2024-53355
Published: 2025-01-31
Description: Multiple incorrect access control issues in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote authenticated attackers, with low privileges, to (1) add an admin user via the /api/user/addalias route; (2) modifiy a user via the /api/user/updatealias route; (4) delete users via the /api/user/delalias route; (4) get users via the /api/user/aliases route; (5) add a root group via the /api/user/adduser route; (6) modifiy a group via the /api/user/updateuser route; (7) delete a group via the /api/user/deluser route; (8) get groups via the /api/user/users route; (9) add an admin role via the /api/user/addrole route; (10) modifiy a role via the /api/user/updaterole route; (11) delete a role via the /api/user/delrole route; (12) get roles via the /api/user/roles route.
CVSS Score: 8.8 (HIGH)
CWE: CWE-281
References: https://github.com/Elymaro/CVE/blob/main/EasyVirt/CVE-2024-53355.md; https://github.com/Elymaro/CVE/blob/main/EasyVirt/CVE-2024-53355.md
CVE: CVE-2024-53356
Published: 2025-01-31
Description: Weak JWT Secret vulnerabilitiy in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote attackers to generate JWT for privilege escalation. The HMAC secret used for generating tokens is hardcoded as "somerandomaccesstoken". A weak HMAC secret poses a risk because attackers can use the predictable secret to create valid JSON Web Tokens (JWTs), allowing them access to important information and actions within the application.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://github.com/Elymaro/CVE/blob/main/EasyVirt/CVE-2024-53356.md; https://github.com/Elymaro/CVE/blob/main/EasyVirt/CVE-2024-53356.md
CVE: CVE-2024-53357
Published: 2025-01-31
Description: Multiple SQL injection vulnerabilities in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote authenticated attackers, with low privileges, to (1) add an admin user via the /api/user/addalias route; (2) modifiy a user via the /api/user/updatealiasroute; (4) delete users via the /api/user/delalias route; (4) get users via the /api/user/aliases route; (5) add a root group via the /api/user/adduserroute; (6) modifiy a group via the /api/user/updateuser route; (7) delete a group via the /api/user/deluser route; (8) get groups via the /api/user/usersroute; (9) add an admin role via the /api/user/addrole route; (10) modifiy a role via the /api/user/updaterole route; (11) delete a role via the /api/user/delrole route; (12) get roles via the /api/user/roles route.
CVSS Score: 7.5 (HIGH)
CWE: CWE-798
References: https://github.com/Elymaro/CVE/blob/main/EasyVirt/CVE-2024-53357.md
CVE: CVE-2024-55062
Published: 2025-01-31
Description: Code Injection vulnerability in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote unauthenticated attackers to execute arbitrary code to /api/license/sendlicense/.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/Elymaro/CVE/blob/main/EasyVirt/CVE-2024-55062.md; https://github.com/Elymaro/CVE/blob/main/EasyVirt/CVE-2024-55062.md
CVE: CVE-2024-57433
Published: 2025-01-31
Description: macrozheng mall-tiny 1.0.1 is vulnerable to Incorrect Access Control via the logout function. After a user logs out, their token is still available and fetches information in the logged-in state.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://github.com/peccc/restful_vul/blob/main/mall_tiny_logout_failed/mall_tiny_logout_failed.md
CVE: CVE-2024-57434
Published: 2025-01-31
Description: macrozheng mall-tiny 1.0.1 is vulnerable to Incorrect Access Control. The project imports users by default, and the test user is made a super administrator.
CVSS Score: 8.8 (HIGH)
CWE: CWE-863
References: https://github.com/peccc/restful_vul/blob/main/mall_tiny_weak_password/mall_tiny_weak_password.md; https://github.com/peccc/restful_vul/blob/main/mall_tiny_weak_password/mall_tiny_weak_password.md
CVE: CVE-2024-57435
Published: 2025-01-31
Description: In macrozheng mall-tiny 1.0.1, an attacker can send null data through the resource creation interface resulting in a null pointer dereference occurring in all subsequent operations that require authentication, which triggers a denial-of-service attack and service restart failure.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/peccc/restful_vul/blob/main/mall_tiny_dos/mall_tiny_dos.md; https://github.com/peccc/restful_vul/blob/main/mall_tiny_dos/mall_tiny_dos.md
CVE: CVE-2024-57587
Published: 2025-01-31
Description: Multiple SQL injection vulnerabilities in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote unauthenticated attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter to /api/auth/login.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-89
References: https://github.com/Elymaro/CVE/blob/main/EasyVirt/CVE-2024-57587.md
CVE: CVE-2025-24891
Published: 2025-01-31
Description: Dumb Drop is a file upload application. Users with permission to upload to the service are able to exploit a path traversal vulnerability to overwrite arbitrary system files. As the container runs as root by default, there is no limit to what can be overwritten. With this, it's possible to inject malicious payloads into files ran on schedule or upon certain service actions. As the service is not required to run with authentication enabled, this may permit wholly unprivileged users root access. Otherwise, anybody with a PIN.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-22, CWE-276
References: https://github.com/DumbWareio/DumbDrop/commit/cb586316648ccbfb21d27b84e90d72ccead9819d; https://github.com/DumbWareio/DumbDrop/security/advisories/GHSA-24f2-fv38-3274
CVE: CVE-2024-11780
Published: 2025-02-01
Description: The Site Search 360 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ss360-resultblock' shortcode in all versions up to, and including, 2.1.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3232517%40site-search-360&new=3232517%40site-search-360&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/4af66bb2-febe-4022-9526-39b1ecd8b01d?source=cve
CVE: CVE-2024-12171
Published: 2025-02-01
Description: The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the 'eh_crm_agent_add_user' AJAX action in all versions up to, and including, 3.2.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create new administrative user accounts.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/changeset/3227859/elex-helpdesk-customer-support-ticket-system/trunk/includes/class-crm-ajax-functions-one.php; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3213791%40elex-helpdesk-customer-support-ticket-system&new=3213791%40elex-helpdesk-customer-support-ticket-system&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/cbcd978b-e81f-4c39-b2f7-adc948d21b1b?source=cve