deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-5340
Published: 2023-11-20
Description: The Five Star Restaurant Menu and Food Ordering WordPress plugin before 2.4.11 unserializes user input via an AJAX action available to unauthenticated users, allowing them to perform PHP Object Injection when a suitable gadget is present on the blog.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74
References: https://wpscan.com/vulnerability/91a5847a-62e7-4b98-a554-5eecb6a06e5b; https://wpscan.com/vulnerability/91a5847a-62e7-4b98-a554-5eecb6a06e5b
CVE: CVE-2023-5343
Published: 2023-11-20
Description: The Popup box WordPress plugin before 3.7.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/74613b38-48f2-43d5-bae5-25c89ba7db6e; https://wpscan.com/vulnerability/74613b38-48f2-43d5-bae5-25c89ba7db6e
CVE: CVE-2023-5509
Published: 2023-11-20
Description: The myStickymenu WordPress plugin before 2.6.5 does not adequately authorize some ajax calls, allowing any logged-in user to perform the actions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-863
References: https://wpscan.com/vulnerability/3b33c262-e7f0-4310-b26d-4727d7c25c9d; https://wpscan.com/vulnerability/3b33c262-e7f0-4310-b26d-4727d7c25c9d
CVE: CVE-2023-5609
Published: 2023-11-20
Description: The Seraphinite Accelerator WordPress plugin before 2.2.29 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/aac4bcc8-b826-4165-aed3-f422dd178692; https://wpscan.com/vulnerability/aac4bcc8-b826-4165-aed3-f422dd178692
CVE: CVE-2023-5610
Published: 2023-11-20
Description: The Seraphinite Accelerator WordPress plugin before 2.2.29 does not validate the URL to redirect any authenticated user to, leading to an arbitrary redirect
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-601
References: https://wpscan.com/vulnerability/e880a9fb-b089-4f98-9781-7d946f22777e; https://wpscan.com/vulnerability/e880a9fb-b089-4f98-9781-7d946f22777e
CVE: CVE-2023-5640
Published: 2023-11-20
Description: The Article Analytics WordPress plugin does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://devl00p.github.io/posts/Injection-SQL-dans-le-plugin-Wordpress-Article-Analytics/; https://wpscan.com/vulnerability/9a383ef5-0f1a-4894-8f78-845abcb5062d; https://devl00p.github.io/posts/Injection-SQL-dans-le-plugin-Wordpress-Article-Analytics/
CVE: CVE-2023-5651
Published: 2023-11-20
Description: The WP Hotel Booking WordPress plugin before 2.0.8 does not have authorisation and CSRF checks, as well as does not ensure that the package to be deleted is a package, allowing any authenticated users, such as subscriber to delete arbitrary posts
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-732
References: https://wpscan.com/vulnerability/a365c050-96ae-4266-aa87-850ee259ee2c; https://wpscan.com/vulnerability/a365c050-96ae-4266-aa87-850ee259ee2c
CVE: CVE-2023-5652
Published: 2023-11-20
Description: The WP Hotel Booking WordPress plugin before 2.0.8 does not have authorisation and CSRF checks, as well as does not escape user input before using it in a SQL statement of a function hooked to admin_init, allowing unauthenticated users to perform SQL injections
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://wpscan.com/vulnerability/8ea46b9a-5239-476b-949d-49546371eac1; https://wpscan.com/vulnerability/8ea46b9a-5239-476b-949d-49546371eac1
CVE: CVE-2023-5799
Published: 2023-11-20
Description: The WP Hotel Booking WordPress plugin before 2.0.8 does not have proper authorisation when deleting a package, allowing Contributor and above roles to delete posts that do no belong to them
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-863
References: https://wpscan.com/vulnerability/3061f85e-a70e-49e5-bccf-ae9240f51178; https://wpscan.com/vulnerability/3061f85e-a70e-49e5-bccf-ae9240f51178
CVE: CVE-2023-38823
Published: 2023-11-20
Description: Buffer Overflow vulnerability in Tenda Ac19 v.1.0, AC18, AC9 v.1.0, AC6 v.2.0 and v.1.0 allows a remote attacker to execute arbitrary code via the formSetCfm function in bin/httpd.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://github.com/johnathanhuutri/CVE_report/blob/master/CVE-2023-38823/README.md; https://github.com/johnathanhuutri/CVE_report/blob/master/CVE-2023-38823/README.md
CVE: CVE-2023-46990
Published: 2023-11-20
Description: Deserialization of Untrusted Data in PublicCMS v.4.0.202302.e allows a remote attacker to execute arbitrary code via a crafted script to the writeReplace function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://github.com/sanluan/PublicCMS/issues/76#issue[PII_REDACTED]; https://github.com/sanluan/PublicCMS/issues/76#issue[PII_REDACTED]
CVE: CVE-2023-47417
Published: 2023-11-20
Description: Cross Site Scripting (XSS) vulnerability in the component /shells/embedder.html of DZSlides after v2011.07.25 allows attackers to execute arbitrary code via a crafted payload.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/cd80/5b7702ffbfc8531f30b56356a4a7f4dd; https://github.com/paulrouget/dzslides; https://gist.github.com/cd80/5b7702ffbfc8531f30b56356a4a7f4dd
CVE: CVE-2023-48109
Published: 2023-11-20
Description: Tenda AX1803 v1.0.0.1 was discovered to contain a heap overflow via the deviceId parameter in the function saveParentControlInfo . This vulnerability allows attackers to cause a Denial of Service (DoS) attack
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://tjr181.com/index.php/archives/13/; http://tjr181.com/index.php/archives/13/
CVE: CVE-2023-48110
Published: 2023-11-20
Description: Tenda AX1803 v1.0.0.1 was discovered to contain a heap overflow via the urls parameter in the function saveParentControlInfo . This vulnerability allows attackers to cause a Denial of Service (DoS) attack
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: http://tjr181.com/index.php/archives/13/; http://tjr181.com/index.php/archives/13/
CVE: CVE-2023-48111
Published: 2023-11-20
Description: Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the time parameter in the function saveParentControlInfo . This vulnerability allows attackers to cause a Denial of Service (DoS) attack
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: http://tjr181.com/index.php/archives/13/; http://tjr181.com/index.php/archives/13/
CVE: CVE-2023-46470
Published: 2023-11-20
Description: Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via crafted telecommand in the timeline view of the ArchiveBrowser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.linkedin.com/pulse/more-xss-clickjacking-yamcs-v586-visionspace-technologies-uvevf; https://www.linkedin.com/pulse/more-xss-clickjacking-yamcs-v586-visionspace-technologies-uvevf
CVE: CVE-2023-46471
Published: 2023-11-20
Description: Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via the text variable scriptContainer of the ScriptViewer.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.linkedin.com/pulse/more-xss-clickjacking-yamcs-v586-visionspace-technologies-uvevf; https://www.linkedin.com/pulse/more-xss-clickjacking-yamcs-v586-visionspace-technologies-uvevf
CVE: CVE-2023-47172
Published: 2023-11-20
Description: Certain WithSecure products allow Local Privilege Escalation. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, and WithSecure Elements Endpoint Protection 17 and later.
CVSS Score: 7.8 (HIGH)
References: https://www.withsecure.com/en/support/security-advisories/cve-2023-47172; https://www.withsecure.com/en/support/security-advisories/cve-2023-47172
CVE: CVE-2023-47311
Published: 2023-11-20
Description: An issue in Yamcs 5.8.6 allows attackers to send aribitrary telelcommands in a Command Stack via Clickjacking.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-1021
References: https://www.linkedin.com/pulse/more-xss-clickjacking-yamcs-v586-visionspace-technologies-uvevf; https://www.linkedin.com/pulse/more-xss-clickjacking-yamcs-v586-visionspace-technologies-uvevf
CVE: CVE-2023-6062
Published: 2023-11-20
Description: 
An arbitrary file write vulnerability exists where an authenticated, remote attacker with administrator privileges on the Nessus application could alter Nessus Rules variables to overwrite arbitrary files on the remote host, which could lead to a denial of service condition. 


CVSS Score: 6.8 (MEDIUM)
CWE: CWE-787
References: https://www.tenable.com/security/tns-2023-39; https://www.tenable.com/security/tns-2023-40; https://www.tenable.com/security/tns-2023-39
CVE: CVE-2023-6178
Published: 2023-11-20
Description: 
An arbitrary file write vulnerability exists where an authenticated attacker with privileges on the managing application could alter Nessus Rules variables to overwrite arbitrary files on the remote host, which could lead to a denial of service condition. 


CVSS Score: 6.8 (MEDIUM)
CWE: CWE-787
References: https://www.tenable.com/security/tns-2023-41; https://www.tenable.com/security/tns-2023-41
CVE: CVE-2023-48176
Published: 2023-11-20
Description: An Insecure Permissions issue in WebsiteGuide v.0.2 allows a remote attacker to gain escalated privileges via crafted jwt (JSON web token).
CVSS Score: 9.8 (CRITICAL)
References: https://prairie-steed-4d7.notion.site/WebsiteGuide-vulnerability-analysis-33a701c4fbf24555bffde17da0c73d8d?pvs=4; https://prairie-steed-4d7.notion.site/WebsiteGuide-vulnerability-analysis-33a701c4fbf24555bffde17da0c73d8d?pvs=4
CVE: CVE-2023-48192
Published: 2023-11-20
Description: An issue in TOTOlink A3700R v.9.1.2u.6134_B20201202 allows a local attacker to execute arbitrary code via the setTracerouteCfg function.
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: http://totolink.com; https://github.com/zxsssd/TotoLink-; https://www.totolink.net/
CVE: CVE-2023-48051
Published: 2023-11-20
Description: An issue in /upydev/keygen.py in upydev v0.4.3 allows attackers to decrypt sensitive information via weak encryption padding.
CVSS Score: 7.5 (HIGH)
CWE: CWE-326
References: https://github.com/Carglglz/upydev/issues/38; https://github.com/Carglglz/upydev/issues/38
CVE: CVE-2023-48310
Published: 2023-11-20
Description: TestingPlatform is a testing platform for Internet Security Standards. Prior to version 2.1.1, user input is not filtered correctly. Nmap options are accepted. In this particular case, the option to create log files is accepted in addition to a host name (and even without). A log file is created at the location specified. These files are created as root. If the file exists, the existing file is being rendered useless. This can result in denial of service. Additionally, input for scanning can be any CIDR blocks passed to nmap. An attacker can scan 0.0.0.0/0 or even local networks. Version 2.1.1 contains a patch for this issue.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-20
References: https://github.com/NC3-LU/TestingPlatform/commit/7b3e7ca869a4845aa7445f874c22c5929315c3a7; https://github.com/NC3-LU/TestingPlatform/releases/tag/v2.1.1; https://github.com/NC3-LU/TestingPlatform/security/advisories/GHSA-9fhc-f3mr-w6h6
CVE: CVE-2023-6199
Published: 2023-11-20
Description: Book Stack version 23.10.2 allows filtering local files on the server. This is possible because the application is vulnerable to SSRF.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918, CWE-918
References: https://fluidattacks.com/advisories/imagination/; https://www.bookstackapp.com/blog/bookstack-release-v23-10-3/; https://fluidattacks.com/advisories/imagination/
CVE: CVE-2023-40151
Published: 2023-11-21
Description: 


When user authentication is not enabled the shell can execute commands with the highest privileges. Red Lion SixTRAK and VersaTRAK Series RTUs with authenticated users enabled (UDR-A) any Sixnet UDR message will meet an authentication challenge over UDP/IP. When the same message comes over TCP/IP the RTU will simply accept the message with no authentication challenge.




CVSS Score: 10.0 (CRITICAL)
CWE: CWE-749
References: https://support.redlion.net/hc/en-us/articles/[PII_REDACTED]269-RLCSIM-2023-05-Authentication-Bypass-and-Remote-Code-Execution; https://www.cisa.gov/news-events/ics-advisories/icsa-23-320-01; https://support.redlion.net/hc/en-us/articles/[PII_REDACTED]269-RLCSIM-2023-05-Authentication-Bypass-and-Remote-Code-Execution
CVE: CVE-2023-6142
Published: 2023-11-21
Description: Dev blog v1.0 allows to exploit an XSS through an unrestricted file upload, together with a bad entropy of filenames. With this an attacker can upload a malicious HTML file, then guess the filename of the uploaded file and send it to a potential victim.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://fluidattacks.com/advisories/bunny/; https://github.com/Armanidrisi/devblog/; https://fluidattacks.com/advisories/bunny/
CVE: CVE-2023-6144
Published: 2023-11-21
Description: Dev blog v1.0 allows to exploit an account takeover through the "user" cookie. With this, an attacker can access any user's session just by knowing their username.

CVSS Score: 9.1 (CRITICAL)
CWE: CWE-639
References: https://fluidattacks.com/advisories/almighty/; https://github.com/Armanidrisi/devblog/; https://fluidattacks.com/advisories/almighty/
CVE: CVE-2023-42770
Published: 2023-11-21
Description: 
Red Lion SixTRAK and VersaTRAK Series RTUs with authenticated users enabled (UDR-A) any Sixnet UDR message will meet an authentication challenge over UDP/IP. When the same message is received over TCP/IP the RTU will simply accept the message with no authentication challenge.


CVSS Score: 10.0 (CRITICAL)
CWE: CWE-288, CWE-306
References: https://https://support.redlion.net/hc/en-us/articles/[PII_REDACTED]269-RLCSIM-2023-05-Authentication-Bypass-and-Remote-Code-Execution; https://www.cisa.gov/news-events/ics-advisories/icsa-23-320-01; https://https://support.redlion.net/hc/en-us/articles/[PII_REDACTED]269-RLCSIM-2023-05-Authentication-Bypass-and-Remote-Code-Execution
CVE: CVE-2023-45886
Published: 2023-11-21
Description: The BGP daemon (bgpd) in IP Infusion ZebOS through 7.10.6 allow remote attackers to cause a denial of service by sending crafted BGP update messages containing a malformed attribute.
CVSS Score: 7.5 (HIGH)
References: https://blog.benjojo.co.uk/post/bgp-path-attributes-grave-error-handling; https://my.f5.com/manage/s/article/K000137315; https://www.ipinfusion.com/doc_prod_cat/zebos/
CVE: CVE-2023-21416
Published: 2023-11-21
Description: Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API dynamicoverlay.cgi was vulnerable to a Denial-of-Service attack allowing for an attacker to block access to the overlay configuration page in the web interface of the Axis device. This flaw can only be exploited after authenticating with an operator- or administrator-privileged service account however the impact is equal. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.
CVSS Score: 7.1 (HIGH)
CWE: CWE-35
References: https://www.axis.com/dam/public/35/2a/a6/cve-2023-21416-en-US-417790.pdf; https://www.axis.com/dam/public/35/2a/a6/cve-2023-21416-en-US-417790.pdf
CVE: CVE-2023-21417
Published: 2023-11-21
Description: Sandro Poppi, member of the AXIS OS Bug Bounty Program,

has found that the VAPIX API manageoverlayimage.cgi was vulnerable to path traversal attacks that allows for file/folder deletion. This flaw can only be exploited after authenticating with an operator- or administrator- privileged service account. The impact of exploiting this vulnerability is lower with operator service accounts and limited to non-system files compared to administrator-privileges.
 Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.
CVSS Score: 7.1 (HIGH)
CWE: CWE-35, CWE-22
References: https://www.axis.com/dam/public/2a/82/12/cve-2023-21417-en-US-417791.pdf; https://www.axis.com/dam/public/2a/82/12/cve-2023-21417-en-US-417791.pdf
CVE: CVE-2023-21418
Published: 2023-11-21
Description: Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API irissetup.cgi was vulnerable to path traversal attacks that allows for file deletion. This flaw can only be exploited after authenticating with an operator- or administrator-privileged service account. The impact of exploiting this vulnerability is lower with operator service accounts and limited to non-system files compared to administrator-privileges. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.
CVSS Score: 7.1 (HIGH)
CWE: CWE-35, CWE-22
References: https://www.axis.com/dam/public/49/93/55/cve-2023-21418-en-US-417792.pdf; https://www.axis.com/dam/public/49/93/55/cve-2023-21418-en-US-417792.pdf
CVE: CVE-2023-46935
Published: 2023-11-21
Description: eyoucms v1.6.4 is vulnerable Cross Site Scripting (XSS), which can lead to stealing sensitive information of logged-in users.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/weng-xianhu/eyoucms/issues/55; https://github.com/weng-xianhu/eyoucms/issues/55
CVE: CVE-2023-4149
Published: 2023-11-21
Description: A vulnerability in the web-based management allows an unauthenticated remote attacker to inject arbitrary system commands and gain full system control. Those commands are executed with root privileges. The vulnerability is located in the user request handling of the web-based management.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://cert.vde.com/en/advisories/VDE-2023-037; https://cert.vde.com/en/advisories/VDE-2023-037
CVE: CVE-2023-4424
Published: 2023-11-21
Description: An malicious BLE device can cause buffer overflow by sending malformed advertising packet BLE device using Zephyr OS, leading to DoS or potential RCE on the victim BLE device.
CVSS Score: 8.3 (HIGH)
CWE: CWE-190, CWE-120
References: https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-j4qm-xgpf-qjw3; https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-j4qm-xgpf-qjw3
CVE: CVE-2023-5553
Published: 2023-11-21
Description: During internal Axis Security Development Model (ASDM) threat-modelling, a flaw was found in the protection for device tampering (commonly known as Secure Boot) in AXIS OS making it vulnerable to a sophisticated attack to bypass this protection. To Axis' knowledge, there are no known exploits of the vulnerability at this time. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.
CVSS Score: 7.6 (HIGH)
CWE: CWE-863
References: https://www.axis.com/dam/public/0a/66/25/cve-2023-5553-en-US-417789.pdf; https://www.axis.com/dam/public/0a/66/25/cve-2023-5553-en-US-417789.pdf
CVE: CVE-2023-5776
Published: 2023-11-21
Description: The Post Meta Data Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.1. This is due to missing nonce validation on the pmdm_wp_ajax_delete_meta, pmdm_wp_delete_user_meta, and pmdm_wp_delete_user_meta functions. This makes it possible for unauthenticated attackers to delete arbitrary user, term, and post meta via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://plugins.svn.wordpress.org/post-meta-data-manager/tags/1.2.1/readme.txt; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2981559%40post-meta-data-manager&new=2981559%40post-meta-data-manager&sfp_email=&sfph_mail=; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2994271%40post-meta-data-manager&new=2994271%40post-meta-data-manager&sfp_email=&sfph_mail=
CVE: CVE-2023-5598
Published: 2023-11-21
Description: Stored Cross-site Scripting (XSS) vulnerabilities affecting 3DSwym in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2023x allow an attacker to execute arbitrary script code.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.3ds.com/vulnerability/advisories; https://www.3ds.com/vulnerability/advisories
CVE: CVE-2023-5599
Published: 2023-11-21
Description: A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2023x allows an attacker to execute arbitrary script code.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.3ds.com/vulnerability/advisories; https://www.3ds.com/vulnerability/advisories
CVE: CVE-2023-28802
Published: 2023-11-21
Description: An Improper Validation of Integrity Check Value in Zscaler Client Connector on Windows allows an authenticated user to disable ZIA/ZPA by interrupting the service restart from Zscaler Diagnostics. This issue affects Client Connector: before 4.2.0.149.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-354, CWE-354
References: https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023?applicable_category=Windows&applicable_version=4.2; https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023?applicable_category=Windows&applicable_version=4.2
CVE: CVE-2023-6235
Published: 2023-11-21
Description: An uncontrolled search path element vulnerability has been found in the Duet Display product, affecting version 2.5.9.1. An attacker could place an arbitrary libusk.dll file in the C:\Users\user\AppData\Local\Microsoft\WindowsApps\ directory, which could lead to the execution and persistence of arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://www.incibe.es/en/incibe-cert/notices/aviso/arbitrary-code-execution-duet-display; https://www.incibe.es/en/incibe-cert/notices/aviso/arbitrary-code-execution-duet-display
CVE: CVE-2023-48124
Published: 2023-11-21
Description: Cross Site Scripting in SUP Online Shopping v.1.0 allows a remote attacker to execute arbitrary code via the Name, Email and Address parameters in the Register New Account component.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://patelvarshil.medium.com/cve-2023-48124-xss-vulnerability-in-an-e-commerce-platform-ad7d4ab77af4; https://www.sourcecodester.com/; https://patelvarshil.medium.com/cve-2023-48124-xss-vulnerability-in-an-e-commerce-platform-ad7d4ab77af4
CVE: CVE-2023-49060
Published: 2023-11-21
Description: An attacker could have accessed internal pages or data by ex-filtrating a security key from ReaderMode via the `referrerpolicy` attribute. This vulnerability affects Firefox for iOS < 120.
CVSS Score: 9.8 (CRITICAL)
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1861405; https://www.mozilla.org/security/advisories/mfsa2023-51/; https://bugzilla.mozilla.org/show_bug.cgi?id=1861405
CVE: CVE-2023-49061
Published: 2023-11-21
Description: An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firefox for iOS < 120.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1861420; https://www.mozilla.org/security/advisories/mfsa2023-51/; https://bugzilla.mozilla.org/show_bug.cgi?id=1861420