deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-36847
Published: 2023-08-17
Description: A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity.





With a specific request to installAppPackage.php that doesn't require authentication an attacker is able to upload arbitrary files via J-Web, leading to a loss of 

integrity

for a certain 

part of the file system, which may allow chaining to other vulnerabilities.


This issue affects Juniper Networks Junos OS on EX Series:



  *  All versions prior to 20.4R3-S8;
  *  21.1 versions 21.1R1 and later;
  *  21.2 versions prior to 21.2R3-S6;
  *  21.3 versions 

prior to 

 21.3R3-S5;
  *  21.4 versions 

prior to 

21.4R3-S4;
  *  22.1 versions 

prior to 

22.1R3-S3;
  *  22.2 versions 

prior to 

22.2R3-S1;
  *  22.3 versions 

prior to 

22.3R2-S2, 22.3R3;
  *  22.4 versions 

prior to 

22.4R2-S1, 22.4R3.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-306, CWE-306
References: https://supportportal.juniper.net/JSA72300; https://supportportal.juniper.net/JSA72300; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-36847
CVE: CVE-2023-40168
Published: 2023-08-17
Description: TurboWarp is a desktop application that compiles scratch projects to JavaScript. TurboWarp Desktop versions prior to version 1.8.0 allowed a malicious project or custom extension to read arbitrary files from disk and upload them to a remote server. The only required user interaction is opening the sb3 file or loading the extension. The web version of TurboWarp is not affected. This bug has been addressed in commit `55e07e99b59` after an initial fix which was reverted. Users are advised to upgrade to version 1.8.0 or later. Users unable to upgrade should avoid opening sb3 files or loading extensions from untrusted sources.
CVSS Score: 7.4 (HIGH)
CWE: CWE-863
References: https://github.com/TurboWarp/desktop/commit/55e07e99b59db334d75e8f46792a1569ab0884a6; https://github.com/TurboWarp/desktop/commit/a62dbd7a28b41857e3b6f32443fda0527d493267; https://github.com/TurboWarp/desktop/commit/f0f82aaf6cc8170e9da8b36953c98bfe533c019f
CVE: CVE-2023-40315
Published: 2023-08-17
Description: In OpenMNS Horizon 31.0.8 and versions earlier than 32.0.2 and related Meridian versions, any user that has the ROLE_FILESYSTEM_EDITOR can easily escalate their privileges to ROLE_ADMIN or any other role. The solution is to upgrade to Meridian 2023.1.5 or Horizon 32.0.2 or newer. Meridian and Horizon installation instructions state that they are intended for installation within an organization's private networks and should not be directly accessible from the Internet. OpenNMS thanks Erik Wynter for reporting this issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-863
References: https://docs.opennms.com/meridian/2023/releasenotes/changelog.html#releasenotes-changelog-Meridian-2023.1.5; https://github.com/OpenNMS/opennms/pull/6250; https://docs.opennms.com/meridian/2023/releasenotes/changelog.html#releasenotes-changelog-Meridian-2023.1.5
CVE: CVE-2023-39970
Published: 2023-08-17
Description: Unrestricted Upload of File with Dangerous Type vulnerability in AcyMailing component for Joomla. It allows remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://extensions.joomla.org/extension/acymailing-starter/; https://extensions.joomla.org/extension/acymailing-starter/
CVE: CVE-2023-39971
Published: 2023-08-17
Description: Improper Neutralization of Input During Web Page Generation vulnerability in AcyMailing Enterprise component for Joomla allows XSS. This issue affects AcyMailing Enterprise component for Joomla: 6.7.0-8.6.3.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://extensions.joomla.org/extension/acymailing-starter/; https://www.acymailing.com/acymailing-release-security-%F0%9F%94%90-news-updates/; https://extensions.joomla.org/extension/acymailing-starter/
CVE: CVE-2023-39972
Published: 2023-08-17
Description: Improper Access Control vulnerability in AcyMailing Enterprise component for Joomla. It allows unauthorized users to create new mailing lists.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: https://extensions.joomla.org/extension/acymailing-starter/; https://www.acymailing.com/acymailing-release-security-%F0%9F%94%90-news-updates/; https://extensions.joomla.org/extension/acymailing-starter/
CVE: CVE-2023-39973
Published: 2023-08-17
Description: Improper Access Control vulnerability in AcyMailing Enterprise component for Joomla. It allows the unauthorized removal of attachments from campaigns.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: https://extensions.joomla.org/extension/acymailing-starter/; https://www.acymailing.com/acymailing-release-security-%F0%9F%94%90-news-updates/; https://extensions.joomla.org/extension/acymailing-starter/
CVE: CVE-2023-39974
Published: 2023-08-17
Description: Exposure of Sensitive Information vulnerability in AcyMailing Enterprise component for Joomla. It allows unauthorized actors to get the number of subscribers in a specific list.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-668
References: https://extensions.joomla.org/extension/acymailing-starter/; https://www.acymailing.com/acymailing-release-security-%F0%9F%94%90-news-updates/; https://extensions.joomla.org/extension/acymailing-starter/
CVE: CVE-2023-28690
Published: 2023-08-17
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Steinbrecher WP BrowserUpdate plugin <= 4.5 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/wp-browser-update/wordpress-wp-browserupdate-plugin-4-4-1-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wp-browser-update/wordpress-wp-browserupdate-plugin-4-4-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-40171
Published: 2023-08-17
Description: Dispatch is an open source security incident management tool. The server response includes the JWT Secret Key used for signing JWT tokens in error message when the `Dispatch Plugin - Basic Authentication Provider` plugin encounters an error when attempting to decode a JWT token. Any Dispatch users who own their instance and rely on the `Dispatch Plugin - Basic Authentication Provider` plugin for authentication may be impacted, allowing for any account to be taken over within their own instance. This could be done by using the secret to sign attacker crafted JWTs. If you think that you may be impacted, we strongly suggest you to rotate the secret stored in the `DISPATCH_JWT_SECRET` envvar in the `.env` file. This issue has been addressed in commit `b1942a4319` which has been included in the `20230817` release. users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-209
References: https://github.com/Netflix/dispatch/commit/b1942a4319f0de820d86b84a58ebc85398b97c70; https://github.com/Netflix/dispatch/pull/3695; https://github.com/Netflix/dispatch/releases/tag/latest
CVE: CVE-2023-31492
Published: 2023-08-17
Description: Zoho ManageEngine ADManager Plus version 7182 and prior disclosed the default passwords for the account restoration of unauthorized domains to the authenticated users.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-522
References: http://packetstormsecurity.com/files/177091/ManageEngine-ADManager-Plus-Recovery-Password-Disclosure.html; https://github.com/passtheticket/vulnerability-research/blob/main/manage-engine-apps/admanager-recovery-password-disclosure.md; https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2023-31492.html
CVE: CVE-2023-39125
Published: 2023-08-18
Description: NTSC-CRT 2.2.1 has an integer overflow and out-of-bounds write in loadBMP in bmp_rw.c because a file's width, height, and BPP are not validated. NOTE: the vendor's perspective is "this main application was not intended to be a well tested program, it's just something to demonstrate it works and for the user to see how to integrate it into their own programs."
CVSS Score: 7.5 (HIGH)
CWE: CWE-190, CWE-787
References: https://github.com/LMP88959/NTSC-CRT/issues/32; https://github.com/LMP88959/NTSC-CRT/issues/32
CVE: CVE-2023-39665
Published: 2023-08-18
Description: D-Link DIR-868L fw_revA_1-12_eu_multi_20170316 was discovered to contain a buffer overflow via the acStack_50 parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/Davidteeri/Bug-Report/blob/main/D-Link/DIR-868L-bufferoverflow.md; https://support.dlink.com/; https://www.dlink.com/en/security-bulletin/
CVE: CVE-2023-39666
Published: 2023-08-18
Description: D-Link DIR-842 fw_revA_1-02_eu_multi_20151008 was discovered to contain multiple buffer overflows in the fgets function via the acStack_120 and acStack_220 parameters.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/Davidteeri/Bug-Report/blob/main/D-Link/DIR-842%20buffer%20overflow.md; https://support.dlink.com/; https://www.dlink.com/en/security-bulletin/
CVE: CVE-2023-39667
Published: 2023-08-18
Description: D-Link DIR-868L fw_revA_1-12_eu_multi_20170316 was discovered to contain a buffer overflow via the param_2 parameter in the FUN_0000acb4 function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://github.com/Davidteeri/Bug-Report/blob/main/D-Link/DIR-868L%20httpd-Improper%20Input%20Validation.md; https://support.dlink.com/; https://www.dlink.com/en/security-bulletin/
CVE: CVE-2023-39668
Published: 2023-08-18
Description: D-Link DIR-868L fw_revA_1-12_eu_multi_20170316 was discovered to contain a buffer overflow via the param_2 parameter in the inet_ntoa() function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/Davidteeri/Bug-Report/blob/main/D-Link/DIR-868L%20Buffer%20overflow%202.md; https://support.dlink.com/; https://www.dlink.com/en/security-bulletin/
CVE: CVE-2023-39669
Published: 2023-08-18
Description: D-Link DIR-880 A1_FW107WWb08 was discovered to contain a NULL pointer dereference in the function FUN_00010824.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/Davidteeri/Bug-Report/blob/main/D-Link/880%20unchecked%20return%20value.md; https://support.dlink.com/; https://www.dlink.com/en/security-bulletin/
CVE: CVE-2023-39670
Published: 2023-08-18
Description: Tenda AC6 _US_AC6V1.0BR_V15.03.05.16 was discovered to contain a buffer overflow via the function fgets.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/Davidteeri/Bug-Report/blob/main/Tenda/AC6%20buffer%20overflow.md; https://www.tendacn.com/download/list-3.html; https://github.com/Davidteeri/Bug-Report/blob/main/Tenda/AC6%20buffer%20overflow.md
CVE: CVE-2023-39671
Published: 2023-08-18
Description: D-Link DIR-880 A1_FW107WWb08 was discovered to contain a buffer overflow via the function FUN_0001be68.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/Davidteeri/Bug-Report/blob/main/D-Link/DIR880%20buffer%20overflow.md; https://support.dlink.com/; https://www.dlink.com/en/security-bulletin/
CVE: CVE-2023-39672
Published: 2023-08-18
Description: Tenda WH450 v1.0.0.18 was discovered to contain a buffer overflow via the function fgets.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/Davidteeri/Bug-Report/blob/main/Tenda/WH450%20buffer%20overflow.md; https://www.tendacn.com/download/list-3.html; https://github.com/Davidteeri/Bug-Report/blob/main/Tenda/WH450%20buffer%20overflow.md
CVE: CVE-2023-39673
Published: 2023-08-18
Description: Tenda AC15 V1.0BR_V15.03.05.18_multi_TD01 was discovered to contain a buffer overflow via the function FUN_00010e34().
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/Davidteeri/Bug-Report/blob/main/Tenda/AC15%20Impoper%20Input%20Validation.md; https://www.tendacn.com/download/list-3.html; https://github.com/Davidteeri/Bug-Report/blob/main/Tenda/AC15%20Impoper%20Input%20Validation.md
CVE: CVE-2023-39674
Published: 2023-08-18
Description: D-Link DIR-880 A1_FW107WWb08 was discovered to contain a buffer overflow via the function fgets.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/Davidteeri/Bug-Report/blob/main/D-Link/DIR880%20buffe%20overflow.md; https://support.dlink.com/; https://www.dlink.com/en/security-bulletin/
CVE: CVE-2023-4040
Published: 2023-08-18
Description: The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the eh_callback_handler function in versions up to, and including, 3.7.9. This makes it possible for unauthenticated attackers to modify the order status of arbitrary WooCommerce orders.
CVSS Score: 5.3 (MEDIUM)
References: https://plugins.trac.wordpress.org/changeset/2954934/; https://www.wordfence.com/threat-intel/vulnerabilities/id/ef543c61-2acc-4b72-81ff-883960d4c7c3?source=cve; https://plugins.trac.wordpress.org/changeset/2954934/
CVE: CVE-2023-30875
Published: 2023-08-18
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in All My Web Needs Logo Scheduler plugin <= 1.2.0 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/logo-scheduler-great-for-holidays-events-and-more/wordpress-logo-scheduler-great-for-holidays-events-and-more-plugin-1-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/logo-scheduler-great-for-holidays-events-and-more/wordpress-logo-scheduler-great-for-holidays-events-and-more-plugin-1-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-32626
Published: 2023-08-18
Description: Hidden functionality vulnerability in LAN-W300N/RS all versions, and LAN-W300N/PR5 all versions allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://jvn.jp/en/vu/JVNVU91630351/; https://www.elecom.co.jp/news/security/20230810-01/; https://jvn.jp/en/vu/JVNVU91630351/
CVE: CVE-2023-35991
Published: 2023-08-18
Description: Hidden functionality vulnerability in LOGITEC wireless LAN routers allows an unauthenticated attacker to log in to the product's certain management console and execute arbitrary OS commands. Affected products and versions are as follows: LAN-W300N/DR all versions, LAN-WH300N/DR all versions, LAN-W300N/P all versions, LAN-WH450N/GP all versions, LAN-WH300AN/DGP all versions, LAN-WH300N/DGP all versions, and LAN-WH300ANDGPE all versions.
CVSS Score: 9.8 (CRITICAL)
References: https://jvn.jp/en/vu/JVNVU91630351/; https://www.elecom.co.jp/news/security/20230810-01/; https://jvn.jp/en/vu/JVNVU91630351/
CVE: CVE-2023-38132
Published: 2023-08-18
Description: LAN-W451NGR all versions provided by LOGITEC CORPORATION contains an improper access control vulnerability, which allows an unauthenticated attacker to log in to telnet service.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: https://jvn.jp/en/vu/JVNVU91630351/; https://www.elecom.co.jp/news/security/20230810-01/; https://jvn.jp/en/vu/JVNVU91630351/
CVE: CVE-2023-38576
Published: 2023-08-18
Description: Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an authenticated user to execute arbitrary OS commands on a certain management console.
CVSS Score: 8.0 (HIGH)
CWE: CWE-94
References: https://jvn.jp/en/vu/JVNVU91630351/; https://www.elecom.co.jp/news/security/20230810-01/; https://jvn.jp/en/vu/JVNVU91630351/
CVE: CVE-2023-39415
Published: 2023-08-18
Description: Improper authentication vulnerability in Proself Enterprise/Standard Edition Ver5.61 and earlier, Proself Gateway Edition Ver1.62 and earlier, and Proself Mail Sanitize Edition Ver1.07 and earlier allow a remote unauthenticated attacker to log in to the product's Control Panel and perform an unintended operation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://jvn.jp/en/jp/JVN19661362/; https://www.proself.jp/information/149/; https://www.proself.jp/information/150/
CVE: CVE-2023-39416
Published: 2023-08-18
Description: Proself Enterprise/Standard Edition Ver5.61 and earlier, Proself Gateway Edition Ver1.62 and earlier, and Proself Mail Sanitize Edition Ver1.07 and earlier allow a remote authenticated attacker with an administrative privilege to execute arbitrary OS commands.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://jvn.jp/en/jp/JVN19661362/; https://www.proself.jp/information/149/; https://www.proself.jp/information/150/
CVE: CVE-2023-39445
Published: 2023-08-18
Description: Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an unauthenticated attacker to execute arbitrary code by sending a specially crafted file to the product's certain management console.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://jvn.jp/en/vu/JVNVU91630351/; https://www.elecom.co.jp/news/security/20230810-01/; https://jvn.jp/en/vu/JVNVU91630351/
CVE: CVE-2023-39454
Published: 2023-08-18
Description: Buffer overflow vulnerability exists in ELECOM wireless LAN routers, which may allow an unauthenticated attacker to execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://jvn.jp/en/vu/JVNVU91630351/; https://www.elecom.co.jp/news/security/20230711-01/; https://jvn.jp/en/vu/JVNVU91630351/
CVE: CVE-2023-39455
Published: 2023-08-18
Description: OS command injection vulnerability in ELECOM wireless LAN routers allows an authenticated user to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-600GHBK-A all versions, WRC-1467GHBK-A all versions, WRC-1900GHBK-A all versions, WRC-733FEBK2-A all versions, WRC-F1167ACF2 all versions, WRC-1467GHBK-S all versions, and WRC-1900GHBK-S all versions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://jvn.jp/en/vu/JVNVU91630351/; https://www.elecom.co.jp/news/security/20230810-01/; https://jvn.jp/en/vu/JVNVU91630351/
CVE: CVE-2023-39944
Published: 2023-08-18
Description: OS command injection vulnerability in WRC-F1167ACF all versions, and WRC-1750GHBK all versions allows an attacker who can access the product to execute an arbitrary OS command by sending a specially crafted request.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://jvn.jp/en/vu/JVNVU91630351/; https://www.elecom.co.jp/news/security/20230810-01/; https://jvn.jp/en/vu/JVNVU91630351/
CVE: CVE-2023-40069
Published: 2023-08-18
Description: OS command injection vulnerability in ELECOM wireless LAN routers allows an attacker who can access the product to execute an arbitrary OS command by sending a specially crafted request. Affected products and versions are as follows: WRC-F1167ACF all versions, WRC-1750GHBK all versions, WRC-1167GHBK2 all versions, WRC-1750GHBK2-I all versions, and WRC-1750GHBK-E all versions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://jvn.jp/en/vu/JVNVU91630351/; https://www.elecom.co.jp/news/security/20230810-01/; https://jvn.jp/en/vu/JVNVU91630351/
CVE: CVE-2023-40072
Published: 2023-08-18
Description: OS command injection vulnerability in ELECOM wireless LAN access point devices allows an authenticated user to execute an arbitrary OS command by sending a specially crafted request.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://jvn.jp/en/vu/JVNVU91630351/; https://www.elecom.co.jp/news/security/20230810-01/; https://www.elecom.co.jp/news/security/20231114-01/
CVE: CVE-2023-31094
Published: 2023-08-18
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Lauri Karisola / WP Trio Stock Sync for WooCommerce plugin <= 2.4.0 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/stock-sync-for-woocommerce/wordpress-stock-sync-for-woocommerce-plugin-2-4-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/stock-sync-for-woocommerce/wordpress-stock-sync-for-woocommerce-plugin-2-4-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-31228
Published: 2023-08-18
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CreativeMindsSolutions CM On Demand Search And Replace plugin <= 1.3.0 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/cm-on-demand-search-and-replace/wordpress-cm-on-demand-search-and-replace-plugin-1-3-0-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/cm-on-demand-search-and-replace/wordpress-cm-on-demand-search-and-replace-plugin-1-3-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-4407
Published: 2023-08-18
Description: A vulnerability classified as critical was found in Codecanyon Credit Lite 1.5.4. Affected by this vulnerability is an unknown functionality of the file /portal/reports/account_statement of the component POST Request Handler. The manipulation of the argument date1/date2 leads to sql injection. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-237511.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: http://packetstormsecurity.com/files/174244/Credit-Lite-1.5.4-SQL-Injection.html; https://vuldb.com/?ctiid.237511; https://vuldb.com/?id.237511
CVE: CVE-2023-4409
Published: 2023-08-18
Description: A vulnerability, which was classified as critical, has been found in NBS&HappySoftWeChat 1.1.6. Affected by this issue is some unknown functionality. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-237512.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-434
References: https://github.com/ApricityXX/cve/blob/main/upload/upload.md; https://vuldb.com/?ctiid.237512; https://vuldb.com/?id.237512
CVE: CVE-2023-31218
Published: 2023-08-18
Description: Cross-Site Request Forgery (CSRF) leading to Stored Cross-Site Scripting (XSS) vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional plugin <= 1.0.6 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79, CWE-352
References: https://patchstack.com/database/vulnerability/bulk-editor/wordpress-wolf-wordpress-posts-bulk-editor-and-manager-professional-plugin-1-0-6-cross-site-scripting-xss-via-csrf-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/bulk-editor/wordpress-wolf-wordpress-posts-bulk-editor-and-manager-professional-plugin-1-0-6-cross-site-scripting-xss-via-csrf-vulnerability?_s_id=cve
CVE: CVE-2023-31232
Published: 2023-08-18
Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in David Artiss Plugins List plugin <= 2.5 versions.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/plugins-list/wordpress-plugins-list-plugin-2-5-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/plugins-list/wordpress-plugins-list-plugin-2-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-32103
Published: 2023-08-18
Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Theme Palace TP Education plugin <= 4.4 versions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/tp-education/wordpress-tp-education-plugin-4-4-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/tp-education/wordpress-tp-education-plugin-4-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-32105
Published: 2023-08-18
Description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ollybach WPPizza – A Restaurant Plugin plugin <= 3.17.1 versions.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/wppizza/wordpress-wppizza-a-restaurant-plugin-plugin-3-17-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/wppizza/wordpress-wppizza-a-restaurant-plugin-plugin-3-17-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve