deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-9502
Published: 2025-08-27
Description: A weakness has been identified in Campcodes Online Loan Management System 1.0. This impacts an unknown function of the file /ajax.php?action=save_payment. Executing manipulation of the argument loan_id can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public and could be exploited.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/skyrainoh/CVE/issues/10; https://vuldb.com/?ctiid.321485; https://vuldb.com/?id.321485
CVE: CVE-2025-9503
Published: 2025-08-27
Description: A security vulnerability has been detected in Campcodes Online Loan Management System 1.0. Affected is an unknown function of the file /ajax.php?action=save_borrower. The manipulation of the argument lastname leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/nobugpal/cve_Vulnerability_application/issues/1; https://vuldb.com/?ctiid.321486; https://vuldb.com/?id.321486
CVE: CVE-2025-49035
Published: 2025-08-27
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in chaimchaikin Admin Menu Groups admin-menu-groups allows Stored XSS.This issue affects Admin Menu Groups: from n/a through <= 0.1.2.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/admin-menu-groups/vulnerability/wordpress-admin-menu-groups-plugin-0-1-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-49039
Published: 2025-08-27
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mibuthu Link View link-view allows Stored XSS.This issue affects Link View: from n/a through <= 0.8.0.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/link-view/vulnerability/wordpress-link-view-plugin-0-8-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-49040
Published: 2025-08-27
Description: Cross-Site Request Forgery (CSRF) vulnerability in Backup Bolt Backup Bolt backup-bolt allows Cross Site Request Forgery.This issue affects Backup Bolt: from n/a through <= 1.5.0.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/backup-bolt/vulnerability/wordpress-backup-bolt-plugin-1-4-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2025-9504
Published: 2025-08-27
Description: A vulnerability was detected in Campcodes Online Loan Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=save_plan. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit is now public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/nobugpal/cve_Vulnerability_application/issues/2; https://vuldb.com/?ctiid.321487; https://vuldb.com/?id.321487
CVE: CVE-2025-9505
Published: 2025-08-27
Description: A flaw has been found in Campcodes Online Loan Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=save_loan_type. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/Sxxxw/cve/issues/1; https://vuldb.com/?ctiid.321488; https://vuldb.com/?id.321488
CVE: CVE-2025-9506
Published: 2025-08-27
Description: A vulnerability has been found in Campcodes Online Loan Management System 1.0. This affects an unknown part of the file /ajax.php?action=delete_plan. Such manipulation of the argument ID leads to sql injection. The attack may be performed from a remote location. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/1276486/CVE/issues/2; https://vuldb.com/?ctiid.321489; https://vuldb.com/?id.321489
CVE: CVE-2025-9507
Published: 2025-08-27
Description: A weakness has been identified in itsourcecode Apartment Management System 1.0. Impacted is an unknown function of the file /report/visitor_info.php. Executing manipulation of the argument vid can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be exploited.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/zzb1388/cve/issues/47; https://itsourcecode.com/; https://vuldb.com/?ctiid.321503
CVE: CVE-2025-48081
Published: 2025-08-27
Description: Path Traversal: '.../...//' vulnerability in Printeers Printeers Print & Ship allows Path Traversal.This issue affects Printeers Print & Ship: from n/a through 1.17.0.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-35
References: https://patchstack.com/database/wordpress/plugin/invition-print-ship/vulnerability/wordpress-printeers-print-ship-plugin-1-17-0-directory-traversal-vulnerability?_s_id=cve
CVE: CVE-2025-9508
Published: 2025-08-27
Description: A vulnerability was detected in itsourcecode Apartment Management System 1.0. The impacted element is an unknown function of the file /report/rented_info.php. The manipulation of the argument rsid results in sql injection. The attack may be launched remotely. The exploit is now public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/zzb1388/cve/issues/46; https://itsourcecode.com/; https://vuldb.com/?ctiid.321505
CVE: CVE-2025-9509
Published: 2025-08-27
Description: A security flaw has been discovered in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /report/fair_info_all.php. Performing manipulation of the argument fid results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be exploited.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/zzb1388/cve/issues/45; https://itsourcecode.com/; https://vuldb.com/?ctiid.321502
CVE: CVE-2025-9510
Published: 2025-08-27
Description: A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. The affected element is an unknown function of the file /branch/addbranch.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/zzb1388/cve/issues/44; https://itsourcecode.com/; https://vuldb.com/?ctiid.321504
CVE: CVE-2025-57797
Published: 2025-08-27
Description: Incorrect privilege assignment vulnerability exists in ScanSnap Manager installers versions prior to V6.5L61. If this vulnerability is exploited, an authenticated local attacker may escalate privileges and execute an arbitrary command.
CVSS Score: 7.8 (HIGH)
CWE: CWE-266
References: https://jvn.jp/en/jp/JVN69684540/; https://www.pfu.ricoh.com/imaging/news/news20230606.html; https://www.pfu.ricoh.com/scansnap/software/sshome/requirement.html
CVE: CVE-2025-57846
Published: 2025-08-27
Description: Multiple i-フィルター products contain an issue with incorrect default permissions. If this vulnerability is exploited, a local authenticated attacker may replace a service executable on the system where the product is running, potentially allowing arbitrary code execution with SYSTEM privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://jvn.jp/en/jp/JVN55678602/; https://www.daj.jp/shared/php/downloadset/c/parts.php?page=dl&filename=information_20250827_01.pdf; https://www.daj.jp/shared/php/downloadset/c/parts.php?page=dl&filename=information_20250827_02.pdf
CVE: CVE-2025-9511
Published: 2025-08-27
Description: A vulnerability was identified in itsourcecode Apartment Management System 1.0. This vulnerability affects unknown code of the file /visitor/addvisitor.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/zzb1388/cve/issues/43; https://itsourcecode.com/; https://vuldb.com/?ctiid.321501
CVE: CVE-2025-9513
Published: 2025-08-27
Description: A flaw has been found in editso fuso up to 1.0.4-beta.7. This affects the function PenetrateRsaAndAesHandshake of the file src/net/penetrate/handshake/mod.rs. This manipulation of the argument priv_key causes inadequate encryption strength. Remote exploitation of the attack is possible. A high degree of complexity is needed for the attack. The exploitability is reported as difficult.
CVSS Score: 3.7 (LOW)
CWE: CWE-310, CWE-326
References: https://chatgpt.com/share/68ae1bfa-8cd4-8005-8add-969bc42047b4; https://vuldb.com/?ctiid.321506; https://vuldb.com/?id.321506
CVE: CVE-2025-9514
Published: 2025-08-27
Description: A vulnerability has been found in macrozheng mall up to 1.0.3. This impacts an unknown function of the component Registration. Such manipulation leads to weak password requirements. The attack can be executed remotely. Attacks of this nature are highly complex. The exploitability is said to be difficult. The vendor deleted the GitHub issue for this vulnerability without and explanation.
CVSS Score: 3.7 (LOW)
CWE: CWE-521
References: https://github.com/macrozheng/mall/issues/923; https://vuldb.com/?ctiid.321507; https://vuldb.com/?id.321507
CVE: CVE-2021-4459
Published: 2025-08-27
Description: An authorized remote attacker can access files and directories outside the intended web root, potentially exposing sensitive system information of the affected Sunny Boy devices.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-23
References: https://certvde.com/en/advisories/VDE-2025-066
CVE: CVE-2025-2313
Published: 2025-08-27
Description: In the Print.pl service, the "uhcPrintServerPrint" function allows execution of arbitrary code via the "CopyCounter" parameter.
CWE: CWE-94
References: https://cert.pl/en/posts/2025/08/CVE-2025-2313/
CVE: CVE-2025-30036
Published: 2025-08-27
Description: Stored XSS vulnerability exists in the "Oddział" (Ward) module, in the death diagnosis description field, and allows the execution of arbitrary JavaScript code. This can lead to session hijacking of other users and potentially to privilege escalation up to full administrative rights.
CWE: CWE-79
References: https://cert.pl/en/posts/2025/08/CVE-2025-2313/
CVE: CVE-2025-30037
Published: 2025-08-27
Description: The system exposes several endpoints, typically including "/int/" in their path, that should be restricted to internal services, but are instead publicly accessible without authentication to any host able to reach the application server on port 443/tcp.
CWE: CWE-306
References: https://cert.pl/en/posts/2025/08/CVE-2025-2313/
CVE: CVE-2025-30038
Published: 2025-08-27
Description: The vulnerability consists of a session ID leak when saving a file downloaded from CGM CLININET. The identifier is exposed through a built-in Windows security feature that stores additional metadata in an NTFS alternate data stream (ADS) for all files downloaded from potentially untrusted sources.
CWE: CWE-1230
References: https://cert.pl/en/posts/2025/08/CVE-2025-2313/
CVE: CVE-2025-30039
Published: 2025-08-27
Description: Unauthenticated access to the "/cgi-bin/CliniNET.prd/GetActiveSessions.pl" endpoint allows takeover of any user session logged into the system, including users with admin privileges.
CWE: CWE-306
References: https://cert.pl/en/posts/2025/08/CVE-2025-2313/
CVE: CVE-2025-30040
Published: 2025-08-27
Description: The vulnerability allows unauthenticated users to download a file containing session ID data by directly accessing the "/cgi-bin/CliniNET.prd/utils/userlogxls.pl" endpoint.
CWE: CWE-306
References: https://cert.pl/en/posts/2025/08/CVE-2025-2313/
CVE: CVE-2025-30041
Published: 2025-08-27
Description: The paths "/cgi-bin/CliniNET.prd/utils/userlogstat.pl", "/cgi-bin/CliniNET.prd/utils/usrlogstat.pl", and "/cgi-bin/CliniNET.prd/utils/dblogstat.pl" expose data containing session IDs.
CWE: CWE-306
References: https://cert.pl/en/posts/2025/08/CVE-2025-2313/
CVE: CVE-2025-30048
Published: 2025-08-27
Description: The "serverConfig" endpoint, which returns the module configuration including credentials, is accessible without authentication.
CWE: CWE-306
References: https://cert.pl/en/posts/2025/08/CVE-2025-2313/
CVE: CVE-2025-30055
Published: 2025-08-27
Description: The "system" function receives untrusted input from the user. If the "EnableJSCaching" option is enabled, it is possible to execute arbitrary code provided as the "Module" parameter.
CWE: CWE-94
References: https://cert.pl/en/posts/2025/08/CVE-2025-2313/
CVE: CVE-2025-30056
Published: 2025-08-27
Description: The RunCommand function accepts any parameter, which is then passed for execution in the shell. This allows an attacker to execute arbitrary code on the system.
CWE: CWE-94
References: https://cert.pl/en/posts/2025/08/CVE-2025-2313/
CVE: CVE-2025-30057
Published: 2025-08-27
Description: In UHCRTFDoc, the filename parameter can be exploited to execute arbitrary code via command injection into the system() call in the ConvertToPDF function.
CWE: CWE-94
References: https://cert.pl/en/posts/2025/08/CVE-2025-2313/
CVE: CVE-2025-30058
Published: 2025-08-27
Description: In the PatientService.pl service, the "getPatientIdentifier" function is vulnerable to SQL injection through the "pesel" parameter.
CWE: CWE-89
References: https://cert.pl/en/posts/2025/08/CVE-2025-2313/
CVE: CVE-2025-30059
Published: 2025-08-27
Description: In the PrepareCDExportJSON.pl service, the "getPerfServiceIds" function is vulnerable to SQL injection.
CWE: CWE-89
References: https://cert.pl/en/posts/2025/08/CVE-2025-2313/
CVE: CVE-2025-30060
Published: 2025-08-27
Description: In the ReturnUserUnitsXML.pl service, the "getUserInfo" function is vulnerable to SQL injection through the "UserID" parameter.
CWE: CWE-89
References: https://cert.pl/en/posts/2025/08/CVE-2025-2313/
CVE: CVE-2025-30061
Published: 2025-08-27
Description: In the "utils/Reporter/OpenReportWindow.pl" service, there is an SQL injection vulnerability through the "UserID" parameter.
CWE: CWE-89
References: https://cert.pl/en/posts/2025/08/CVE-2025-2313/
CVE: CVE-2025-30063
Published: 2025-08-27
Description: The configuration file containing database logins and passwords is readable by any local user.
CWE: CWE-732
References: https://cert.pl/en/posts/2025/08/CVE-2025-2313/
CVE: CVE-2025-30064
Published: 2025-08-27
Description: An insufficiently secured internal function allows session generation for arbitrary users. The decodeParam function checks the JWT but does not verify which signing algorithm was used. As a result, an attacker can use the "ex:action" parameter in the VerifyUserByThrustedService function to generate a session for any user.
CWE: CWE-347, CWE-912
References: https://cert.pl/en/posts/2025/08/CVE-2025-2313/
CVE: CVE-2025-9523
Published: 2025-08-27
Description: A vulnerability was detected in Tenda AC1206 15.03.06.23. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument mac results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be used.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119, CWE-121
References: https://github.com/XXRicardo/iot-cve/blob/main/Tenda/AC1206/AC1206V1.0RTL_V15.03.06.23.md; https://vuldb.com/?ctiid.321541; https://vuldb.com/?id.321541
CVE: CVE-2025-9525
Published: 2025-08-27
Description: A flaw has been found in Linksys E1700 1.0.0.4.003. Affected by this vulnerability is the function setWan of the file /goform/setWan. This manipulation of the argument DeviceName/lanIp causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-121
References: https://github.com/wudipjq/my_vuln/blob/main/Linksys2/vuln_58/58.md; https://github.com/wudipjq/my_vuln/blob/main/Linksys2/vuln_58/58.md#poc; https://vuldb.com/?ctiid.321542
CVE: CVE-2025-9526
Published: 2025-08-27
Description: A vulnerability has been found in Linksys E1700 1.0.0.4.003. Affected by this issue is the function setSysAdm of the file /goform/setSysAdm. Such manipulation of the argument rm_port leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-121
References: https://github.com/wudipjq/my_vuln/blob/main/Linksys2/vuln_59/59.md; https://github.com/wudipjq/my_vuln/blob/main/Linksys2/vuln_59/59.md#poc; https://vuldb.com/?ctiid.321543
CVE: CVE-2025-43728
Published: 2025-08-27
Description: Dell ThinOS 10, versions prior to 2508_10.0127, contain a Protection Mechanism Failure vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-693
References: https://www.dell.com/support/kbdoc/en-us/000359619/dsa-2025-331
CVE: CVE-2025-43729
Published: 2025-08-27
Description: Dell ThinOS 10, versions prior to 2508_10.0127, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A local low-privileged attacker could potentially exploit this vulnerability leading to Elevation of Privileges and Unauthorized Access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://www.dell.com/support/kbdoc/en-us/000359619/dsa-2025-331
CVE: CVE-2025-43730
Published: 2025-08-27
Description: Dell ThinOS 10, versions prior to 2508_10.0127, contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability. A local unauthenticated user could potentially exploit this vulnerability leading to Elevation of Privileges and Information disclosure.
CVSS Score: 8.4 (HIGH)
CWE: CWE-88
References: https://www.dell.com/support/kbdoc/en-us/000359619/dsa-2025-331
CVE: CVE-2025-43882
Published: 2025-08-27
Description: Dell ThinOS 10, versions prior to 2508_10.0127, contains an Unverified Ownership vulnerability. A local low-privileged attacker could potentially exploit this vulnerability leading to Unauthorized Access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-283
References: https://www.dell.com/support/kbdoc/en-us/000359619/dsa-2025-331
CVE: CVE-2025-56694
Published: 2025-08-27
Description: Client-side password validation (CWE-602) in lumasoft fotoShare Cloud 2025-03-13 allowing unauthenticated attackers to view password-protected photo albums.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-602
References: https://fotoshare.co/; https://inf0sectom.github.io/posts/fotoshareco/; https://support.lumasoft.co/hc/en-us/articles/[PII_REDACTED]73-Event-Privacy-and-Link-Sharing
CVE: CVE-2025-9527
Published: 2025-08-27
Description: A vulnerability was found in Linksys E1700 1.0.0.4.003. This affects the function QoSSetup of the file /goform/QoSSetup. Performing manipulation of the argument ack_policy results in stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-121
References: https://github.com/wudipjq/my_vuln/blob/main/Linksys2/vuln_60/60.md; https://github.com/wudipjq/my_vuln/blob/main/Linksys2/vuln_60/60.md#poc; https://vuldb.com/?ctiid.321544
CVE: CVE-2025-9528
Published: 2025-08-27
Description: A vulnerability was determined in Linksys E1700 1.0.0.4.003. This vulnerability affects the function systemCommand of the file /goform/systemCommand. Executing manipulation of the argument command can lead to os command injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-77, CWE-78
References: https://github.com/wudipjq/my_vuln/blob/main/Linksys2/vuln_61/61.md; https://github.com/wudipjq/my_vuln/blob/main/Linksys2/vuln_61/61.md#poc; https://vuldb.com/?ctiid.321545
CVE: CVE-2025-9529
Published: 2025-08-27
Description: A weakness has been identified in Campcodes Payroll Management System 1.0. The affected element is the function include of the file /index.php. This manipulation of the argument page causes file inclusion. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.
CVSS Score: 7.3 (HIGH)
CWE: CWE-73
References: https://github.com/chenjunjie3/cve/issues/6; https://vuldb.com/?ctiid.321548; https://vuldb.com/?id.321548
CVE: CVE-2025-9531
Published: 2025-08-27
Description: A vulnerability was detected in Portabilis i-Educar up to 2.10. This affects an unknown function of the file /intranet/agenda.php of the component Agenda Module. Performing manipulation of the argument cod_agenda results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://karinagante.github.io/cve-2025-9531/; https://karinagante.github.io/cve-2025-9531/#proof-of-concept-poc; https://vuldb.com/?ctiid.321550
CVE: CVE-2025-9532
Published: 2025-08-27
Description: A flaw has been found in Portabilis i-Educar up to 2.10. This impacts an unknown function of the file /RegraAvaliacao/view. Executing manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://karinagante.github.io/cve-2025-9532/; https://karinagante.github.io/cve-2025-9532/#proof-of-concept-poc; https://vuldb.com/?ctiid.321551
CVE: CVE-2025-50972
Published: 2025-08-27
Description: SQL Injection vulnerability in AbanteCart 1.4.2, allows unauthenticated attackers to execute arbitrary SQL commands via the tmpl_id parameter to index.php. Three techniques have been demonstrated: error-based injection using a crafted FLOOR-based payload, time-based blind injection via SLEEP(), and UNION-based injection to extract arbitrary data.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/4rdr/proofs/blob/main/info/abantecart_sql_injection_1.4.2_via_template_parameter.md
CVE: CVE-2025-50985
Published: 2025-08-27
Description: diskover-web v2.3.0 Community Edition is vulnerable to multiple reflected cross-site scripting (XSS) flaws in its web interface. Unsanitized GET parameters including maxage, maxindex, index, path, q (query), and doctype are directly echoed into the HTML response, allowing attackers to inject and execute arbitrary JavaScript when a victim visits a maliciously crafted URL.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-79
References: https://github.com/4rdr/proofs/blob/main/info/diskover-web-v2.3.0-community-edition-reflected-xss.md
CVE: CVE-2025-50986
Published: 2025-08-27
Description: diskover-web v2.3.0 Community Edition suffers from multiple stored cross-site scripting (XSS) vulnerabilities in its administrative settings interface. Various configuration fields such as ES_HOST, ES_INDEXREFRESH, ES_PORT, ES_SCROLLSIZE, ES_TRANSLOGSIZE, ES_TRANSLOGSYNCINT, EXCLUDES_FILES, FILE_TYPES[], INCLUDES_DIRS, INCLUDES_FILES, and TIMEZONE do not properly sanitize user-supplied input. Malicious payloads submitted via these parameters are persisted in the application and executed whenever an administrator views or edits the settings page.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-79
References: https://github.com/4rdr/proofs/blob/main/info/diskover-web-v2.3.0-community-edition-stored-xss.md