deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-25613
Published: 2023-02-20
Description: An LDAP Injection vulnerability exists in the LdapIdentityBackend of Apache Kerby before 2.0.3. 
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74
References: https://lists.apache.org/thread/ynz3hhbbq6d980fzpncwbh5jd8mkyt5y; https://lists.apache.org/thread/ynz3hhbbq6d980fzpncwbh5jd8mkyt5y
CVE: CVE-2023-25656
Published: 2023-02-20
Description: notation-go is a collection of libraries for supporting Notation sign, verify, push, and pull of oci artifacts. Prior to version 1.0.0-rc.3, notation-go users will find their application using excessive memory when verifying signatures. The application will be killed, and thus availability is impacted. The problem has been patched in the release v1.0.0-rc.3. Some workarounds are available. Users can review their own trust policy file and check if the identity string contains `=#`. Meanwhile, users should only put trusted certificates in their trust stores referenced by their own trust policy files, and make sure the `authenticity` validation is set to `enforce`.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770, CWE-770
References: https://github.com/notaryproject/notation-go/releases/tag/v1.0.0-rc.3; https://github.com/notaryproject/notation-go/security/advisories/GHSA-87x9-7grx-m28v; https://github.com/notaryproject/notation-go/releases/tag/v1.0.0-rc.3
CVE: CVE-2023-25805
Published: 2023-02-20
Description: versionn, software for changing version information across multiple files, has a command injection vulnerability in all versions prior to version 1.1.0. This issue is patched in version 1.1.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-77
References: https://github.com/commenthol/versionn/commit/2ca128823efe962b37f2698f0eb530c2b124842d; https://github.com/commenthol/versionn/security/advisories/GHSA-fj78-2vc5-f6cm; https://github.com/commenthol/versionn/commit/2ca128823efe962b37f2698f0eb530c2b124842d
CVE: CVE-2015-10081
Published: 2023-02-20
Description: A vulnerability was found in arnoldle submitByMailPlugin 1.0b2.9 and classified as problematic. This issue affects some unknown processing of the file edit_list.php. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. Upgrading to version 1.0b2.9a is able to address this issue. The patch is named a739f680a1623d22f52ff1371e86ca472e63756f. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-221495.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://github.com/arnoldle/phplist-plugin-submitByMailPlugin/commit/a739f680a1623d22f52ff1371e86ca472e63756f; https://vuldb.com/?ctiid.221495; https://vuldb.com/?id.221495
CVE: CVE-2016-15027
Published: 2023-02-20
Description: A vulnerability was found in meta4creations Post Duplicator Plugin 2.18 on WordPress. It has been classified as problematic. Affected is the function mtphr_post_duplicator_notice of the file includes/notices.php. The manipulation of the argument post-duplicated leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 2.19 is able to address this issue. The name of the patch is ca67c05e490c0cf93a1e9b2d93bfeff3dd96f594. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-221496.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79
References: https://github.com/meta4creations/post-duplicator/commit/ca67c05e490c0cf93a1e9b2d93bfeff3dd96f594; https://github.com/meta4creations/post-duplicator/releases/tag/2.19; https://vuldb.com/?ctiid.221496
CVE: CVE-2021-32847
Published: 2023-02-20
Description: HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0.20210107 and prior, a malicious guest can trigger a vulnerability in the host by abusing the disk driver that may lead to the disclosure of the host memory into the virtualized guest. This issue is fixed in commit cf60095a4d8c3cb2e182a14415467afd356e982f.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125, CWE-125
References: https://github.com/moby/hyperkit/blob/2f061e447e1435cdf1b9eda364cea6414f2c606b/src/lib/pci_virtio_block.c#L316; https://github.com/moby/hyperkit/commit/cf60095a4d8c3cb2e182a14415467afd356e982f; https://securitylab.github.com/advisories/GHSL-2021-058-moby-hyperkit/
CVE: CVE-2021-32848
Published: 2023-02-20
Description: Octobox is software for managing GitHub notifications. Prior to pull request (PR) 2807, a user of the system can provide a specifically crafted search query string that will trigger a ReDoS vulnerability. This issue is fixed in PR 2807.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770, CWE-1333
References: https://github.com/octobox/octobox/blob/372a0da981dbf47319fed[PII_REDACTED]fdf09fcc3/lib/search_parser.rb#L5; https://github.com/octobox/octobox/pull/2807; https://securitylab.github.com/advisories/GHSL-2021-100-octobox-octobox/
CVE: CVE-2022-46303
Published: 2023-02-20
Description: Command injection in SMS notifications in Tribe29 Checkmk <= 2.1.0p10, Checkmk <= 2.0.0p27, and Checkmk <= 1.6.0p29 allows an attacker with User Management permissions, as well as LDAP administrators in certain scenarios, to perform arbitrary commands within the context of the application's local permissions.
CVSS Score: 8.0 (HIGH)
CWE: CWE-20, CWE-78
References: https://checkmk.com/werk/14381; https://checkmk.com/werk/14381
CVE: CVE-2022-46836
Published: 2023-02-20
Description: PHP code injection in watolib auth.php and hosttags.php in Tribe29's Checkmk <= 2.1.0p10, Checkmk <= 2.0.0p27, and Checkmk <= 1.6.0p29 allows an attacker to inject and execute PHP code which will be executed upon request of the vulnerable component.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-20, CWE-94
References: https://checkmk.com/werk/14383; https://www.sonarsource.com/blog/checkmk-rce-chain-3/; https://checkmk.com/werk/14383
CVE: CVE-2022-47909
Published: 2023-02-20
Description: Livestatus Query Language (LQL) injection in the AuthUser HTTP query header of Tribe29's Checkmk <= 2.1.0p11, Checkmk <= 2.0.0p28, and all versions of Checkmk 1.6.0 (EOL) allows an attacker to perform direct queries to the application's core from localhost.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: https://checkmk.com/werk/14384; https://www.sonarsource.com/blog/checkmk-rce-chain-1/; https://checkmk.com/werk/14384
CVE: CVE-2022-48317
Published: 2023-02-20
Description: Expired sessions were not securely terminated in the RestAPI for Tribe29's Checkmk <= 2.1.0p10 and Checkmk <= 2.0.0p28 allowing an attacker to use expired session tokens when communicating with the RestAPI.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-613, CWE-613
References: https://checkmk.com/werk/14485; https://checkmk.com/werk/14485
CVE: CVE-2022-48318
Published: 2023-02-20
Description: No authorisation controls in the RestAPI documentation for Tribe29's Checkmk <= 2.1.0p13 and Checkmk <= 2.0.0p29 which may lead to unintended information disclosure through automatically generated user specific tags within Rest API documentation.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://checkmk.com/werk/14509; https://checkmk.com/werk/14509
CVE: CVE-2022-48319
Published: 2023-02-20
Description: Sensitive host secret disclosed in cmk-update-agent.log file in Tribe29's Checkmk <= 2.1.0p13, Checkmk <= 2.0.0p29, and all versions of Checkmk 1.6.0 (EOL) allows an attacker to gain access to the host secret through the unprotected agent updater log file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200, CWE-532
References: https://checkmk.com/werk/14916; https://checkmk.com/werk/14916
CVE: CVE-2022-48320
Published: 2023-02-20
Description: Cross-site Request Forgery (CSRF) in Tribe29's Checkmk <= 2.1.0p17, Checkmk <= 2.0.0p31, and all versions of Checkmk 1.6.0 (EOL) allow an attacker to add new visual elements to multiple pages.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://checkmk.com/werk/14924; https://checkmk.com/werk/14924
CVE: CVE-2022-48321
Published: 2023-02-20
Description: Limited Server-Side Request Forgery (SSRF) in agent-receiver in Tribe29's Checkmk <= 2.1.0p11 allows an attacker to communicate with local network restricted endpoints by use of the host registration API.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20, CWE-918
References: https://checkmk.com/werk/14385; https://www.sonarsource.com/blog/checkmk-rce-chain-1/; https://checkmk.com/werk/14385
CVE: CVE-2019-25104
Published: 2023-02-20
Description: A vulnerability has been found in rtcwcoop 1.0.2 and classified as problematic. Affected by this vulnerability is the function AICast_ScriptLoad of the file code/game/ai_cast_script.c of the component Team Command Handler. The manipulation leads to denial of service. The identifier of the patch is f2cd18bc2e1cbca8c4b78bee9c392272bd5f42ac. It is recommended to apply a patch to fix this issue. The identifier VDB-221485 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-404, CWE-404
References: https://github.com/rtcwcoop/rtcwcoop/commit/f2cd18bc2e1cbca8c4b78bee9c392272bd5f42ac; https://github.com/rtcwcoop/rtcwcoop/pull/45; https://vuldb.com/?ctiid.221485
CVE: CVE-2022-3901
Published: 2023-02-20
Description: Prototype Pollution in Visioweb.js 1.10.6 allows attackers to execute XSS on the client system.
CVSS Score: 7.2 (HIGH)
CWE: CWE-1321, CWE-1321
References: https://csirt.divd.nl/CVE-2022-3901; https://csirt.divd.nl/CVE-2022-3901
CVE: CVE-2022-44216
Published: 2023-02-20
Description: Gnuboard 5.5.4 and 5.5.5 is vulnerable to Insecure Permissions. An attacker can change password of all users without knowing victim's original password.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306, CWE-306
References: https://github.com/gnuboard/gnuboard5/commit/11718eb4c02ffdca5393bedc0300a75e4e7b19f2; https://gratis-herring-da5.notion.site/Gnuboard-Account-Takeover-version-5-5-4-5-5-5-2f69b0a21be642f58d8b7c72feea343a; https://sir.kr/g5_pds/6400
CVE: CVE-2021-32850
Published: 2023-02-20
Description: jQuery MiniColors is a color picker built on jQuery. Prior to version 2.3.6, jQuery MiniColors is prone to cross-site scripting when handling untrusted color names. This issue is patched in version 2.3.6.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/claviska/jquery-minicolors/commit/ef134824a7f4110ada53ea6c173111a4fa2f48f3; https://github.com/claviska/jquery-minicolors/releases/tag/2.3.6; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MC5HV4ESLV2E23YGHNJ542QEZBH6YE2F/
CVE: CVE-2021-32851
Published: 2023-02-20
Description: Mind-elixir is a free, open source mind map core. Prior to version 0.18.1, mind-elixir is prone to cross-site scripting when handling untrusted menus. This issue is patched in version 0.18.1
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/ssshooter/mind-elixir-core/blob/79942a68b14c8875ab7d270b1ad25bfff351b04c/src/plugin/contextMenu.js#L13; https://github.com/ssshooter/mind-elixir-core/commit/073485269ac83af24371f35bd08507defa885655; https://securitylab.github.com/advisories/GHSL-2021-1047_Mind-elixir/
CVE: CVE-2021-32852
Published: 2023-02-20
Description: Countly, a product analytics solution, is vulnerable to cross-site scripting prior to version 21.11 of the community edition. The victim must follow a malicious link or be redirected there from malicious web site. The attacker must have an account or be able to create one. This issue is patched in version 21.11.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/Countly/countly-server/blob/6b90bb775e747cabe46fe197c6a6989acc6c3417/frontend/express/app.js#L1112; https://github.com/Countly/countly-server/blob/6b90bb775e747cabe46fe197c6a6989acc6c3417/frontend/express/views/reset.html#L95; https://github.com/Countly/countly-server/releases/tag/v21.11
CVE: CVE-2021-32853
Published: 2023-02-20
Description: Erxes, an experience operating system (XOS) with a set of plugins, is vulnerable to cross-site scripting in versions 0.22.3 and prior. This results in client-side code execution. The victim must follow a malicious link or be redirected there from malicious web site. There are no known patches.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/erxes/erxes/blob/f131b49add72032650d483f044d00658908aaf4a/widgets/server/index.ts#L54; https://github.com/erxes/erxes/blob/f131b49add72032650d483f044d00658908aaf4a/widgets/server/views/widget.ejs#L14; https://securitylab.github.com/advisories/GHSL-2021-103-erxes/
CVE: CVE-2022-48337
Published: 2023-02-20
Description: GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system C library function in its implementation of the etags program. For example, a victim may use the "etags -u *" command (suggested in the etags documentation) in a situation where the current working directory has contents that depend on untrusted input.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://git.savannah.gnu.org/cgit/emacs.git/commit/?id=01a4035c869b91c153af9a9132c87adb7669ea1c; https://lists.debian.org/debian-lts-announce/2023/05/msg00008.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FLPQ4K6H2S5TY3L5UDN4K4B3L5RQJYQ6/
CVE: CVE-2022-48338
Published: 2023-02-20
Description: An issue was discovered in GNU Emacs through 28.2. In ruby-mode.el, the ruby-find-library-file function has a local command injection vulnerability. The ruby-find-library-file function is an interactive function, and bound to C-c C-f. Inside the function, the external command gem is called through shell-command-to-string, but the feature-name parameters are not escaped. Thus, malicious Ruby source files may cause commands to be executed.
CVSS Score: 7.3 (HIGH)
CWE: CWE-77, CWE-77
References: https://git.savannah.gnu.org/cgit/emacs.git/commit/?id=9a3b08061feea14d6f37685ca1ab8801758bfd1c; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FLPQ4K6H2S5TY3L5UDN4K4B3L5RQJYQ6/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U6HDBUQNAH2WL4MHWCTUZLN7NGF7CHTK/
CVE: CVE-2022-48339
Published: 2023-02-20
Description: An issue was discovered in GNU Emacs through 28.2. htmlfontify.el has a command injection vulnerability. In the hfy-istext-command function, the parameter file and parameter srcdir come from external input, and parameters are not escaped. If a file name or directory name contains shell metacharacters, code may be executed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-116, CWE-1116
References: https://git.savannah.gnu.org/cgit/emacs.git/commit/?id=1b4dc4691c1f87fc970fbe568b43869a15ad0d4c; https://lists.debian.org/debian-lts-announce/2023/05/msg00008.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FLPQ4K6H2S5TY3L5UDN4K4B3L5RQJYQ6/
CVE: CVE-2023-23452
Published: 2023-02-20
Description: Missing Authentication for Critical Function in SICK FX0-GPNT v3 Firmware Version V3.04 and V3.05 allows an unprivileged remote attacker to achieve arbitrary remote code execution via maliciously crafted RK512 commands to the listener on TCP port 9000.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306, CWE-306, CWE-306
References: https://sick.com/psirt; https://sick.com/psirt
CVE: CVE-2023-23453
Published: 2023-02-20
Description: Missing Authentication for Critical Function in SICK FX0-GENT v3 Firmware Version V3.04 and V3.05 allows an unprivileged remote attacker to achieve arbitrary remote code execution via maliciously crafted RK512 commands to the listener on TCP port 9000.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306, CWE-306, CWE-306
References: https://sick.com/psirt; https://sick.com/psirt
CVE: CVE-2023-26234
Published: 2023-02-21
Description: JD-GUI 1.6.6 allows deserialization via UIMainWindowPreferencesProvider.singleInstance.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-502, CWE-502
References: https://github.com/java-decompiler/jd-gui/issues/415; https://github.com/java-decompiler/jd-gui/pull/417; https://github.com/java-decompiler/jd-gui/issues/415
CVE: CVE-2023-26235
Published: 2023-02-21
Description: JD-GUI 1.6.6 allows XSS via util/net/InterProcessCommunicationUtil.java.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/java-decompiler/jd-gui/pull/418; https://github.com/java-decompiler/jd-gui/pull/418
CVE: CVE-2023-26242
Published: 2023-02-21
Description: afu_mmio_region_get_by_offset in drivers/fpga/dfl-afu-region.c in the Linux kernel through 6.1.12 has an integer overflow.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-190
References: https://bugzilla.suse.com/show_bug.cgi?id=1208518; https://patchwork.kernel.org/project/linux-fpga/patch/[PII_REDACTED]4326.89323-1-k1rh4.lee%40gmail.com; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-48340
Published: 2023-02-21
Description: In Gluster GlusterFS 11.0, there is an xlators/cluster/dht/src/dht-common.c dht_setxattr_mds_cbk use-after-free.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416, CWE-416
References: https://github.com/gluster/glusterfs/issues/3732; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UE6K2DXP4QZVKP32Z7BSYDSRBL4H7JSE/; https://github.com/gluster/glusterfs/issues/3732
CVE: CVE-2023-26249
Published: 2023-02-21
Description: Knot Resolver before 5.6.0 enables attackers to consume its resources, launching amplification attacks and potentially causing a denial of service. Specifically, a single client query may lead to a hundred TCP connection attempts if a DNS server closes connections without providing a response.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770, CWE-770
References: https://www.knot-resolver.cz/2023-01-26-knot-resolver-5.6.0.html; https://www.knot-resolver.cz/2023-01-26-knot-resolver-5.6.0.html
CVE: CVE-2023-26253
Published: 2023-02-21
Description: In Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer over-read.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-125
References: https://github.com/gluster/glusterfs/issues/3954; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UE6K2DXP4QZVKP32Z7BSYDSRBL4H7JSE/; https://github.com/gluster/glusterfs/issues/3954
CVE: CVE-2014-125089
Published: 2023-02-21
Description: A vulnerability was found in cention-chatserver 3.8.0-rc1. It has been declared as problematic. Affected by this vulnerability is the function _formatBody of the file lib/InternalChatProtocol.fe. The manipulation of the argument body leads to cross site scripting. The attack can be launched remotely. Upgrading to version 3.9 is able to address this issue. The identifier of the patch is c4c0258bbd18f6915f97f91d5fee625384096a26. It is recommended to upgrade the affected component. The identifier VDB-221497 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/cention-mujibur-rahman/cention-chatserver/commit/c4c0258bbd18f6915f97f91d5fee625384096a26; https://github.com/cention-mujibur-rahman/cention-chatserver/releases/tag/3.9; https://vuldb.com/?ctiid.221497
CVE: CVE-2023-26265
Published: 2023-02-21
Description: The Borg theme before 1.1.19 for Backdrop CMS does not sufficiently sanitize path arguments that are passed in via a URL. The function borg_preprocess_page in the file template.php does not properly sanitize incoming path arguments before using them.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://backdropcms.org/project/borg; https://github.com/backdrop-contrib/borg/compare/1.x-1.1.18...1.x-1.1.19; https://backdropcms.org/project/borg
CVE: CVE-2023-26266
Published: 2023-02-21
Description: In AFL++ 4.05c, the CmpLog component uses the current working directory to resolve and execute unprefixed fuzzing targets, allowing code execution.
CVSS Score: 7.3 (HIGH)
CWE: CWE-427
References: https://github.com/AFLplusplus/AFLplusplus/pull/1643; https://github.com/AFLplusplus/AFLplusplus/pull/1643
CVE: CVE-2023-24575
Published: 2023-02-21
Description: 
Dell Multifunction Printer E525w Driver and Software Suite, versions prior to 1.047.2022, A05, contain a local privilege escalation vulnerability that could be exploited by malicious users to compromise the affected system


CVSS Score: 7.8 (HIGH)
CWE: CWE-428
References: https://www.dell.com/support/kbdoc/en-us/000208396/dsa-2023-043; https://www.dell.com/support/kbdoc/en-us/000208396/dsa-2023-043
CVE: CVE-2015-10082
Published: 2023-02-21
Description: A vulnerability classified as problematic has been found in UIKit0 libplist 1.12. This affects the function plist_from_xml of the file src/xplist.c of the component XML Handler. The manipulation leads to xml external entity reference. The patch is named c086cb139af7c82845f6d565e636073ff4b37440. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-221499.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-611
References: https://github.com/UIKit0/libplist/commit/c086cb139af7c82845f6d565e636073ff4b37440; https://vuldb.com/?ctiid.221499; https://vuldb.com/?id.221499
CVE: CVE-2020-36656
Published: 2023-02-21
Description: The Spectra WordPress plugin before 1.15.0 does not sanitize user input as it reaches its style HTML attribute, allowing contributors to conduct stored XSS attacks via the plugin's Gutenberg blocks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/10f7e892-7a91-4292-b03e-6ad75756488b; https://wpscan.com/vulnerability/10f7e892-7a91-4292-b03e-6ad75756488b
CVE: CVE-2022-4385
Published: 2023-02-21
Description: The Intuitive Custom Post Order WordPress plugin before 3.1.4 does not check for authorization in the update-menu-order ajax action, allowing any logged in user (with roles as low as Subscriber) to update the menu order
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://wpscan.com/vulnerability/8f900d37-6eee-4434-8b9b-d10cc4a9167c; https://wpscan.com/vulnerability/8f900d37-6eee-4434-8b9b-d10cc4a9167c
CVE: CVE-2022-4386
Published: 2023-02-21
Description: The Intuitive Custom Post Order WordPress plugin before 3.1.4 lacks CSRF protection in its update-menu-order ajax action, allowing an attacker to trick any user to change the menu order via a CSRF attack
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/734064e3-afe9-4dfd-8d76-8a757cc94815; https://wpscan.com/vulnerability/734064e3-afe9-4dfd-8d76-8a757cc94815
CVE: CVE-2022-4622
Published: 2023-02-21
Description: The Login Logout Menu WordPress plugin through 1.3.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/ea055ed4-324d-4d77-826a-b6f814413eb2; https://wpscan.com/vulnerability/ea055ed4-324d-4d77-826a-b6f814413eb2
CVE: CVE-2022-4666
Published: 2023-02-21
Description: The Markup (JSON-LD) structured in schema.org WordPress plugin through 4.8.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/a6d23f2f-9504-40da-9b71-189033d8bd1d; https://wpscan.com/vulnerability/a6d23f2f-9504-40da-9b71-189033d8bd1d
CVE: CVE-2022-4669
Published: 2023-02-21
Description: The Page Builder: Live Composer WordPress plugin before 1.5.23 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/79f011e4-3422-4307-8736-f27048796aae; https://wpscan.com/vulnerability/79f011e4-3422-4307-8736-f27048796aae