deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-34190
Published: 2021-07-06
Description: A stored cross site scripting (XSS) vulnerability in index.php?menu=billing_rates of Issabel PBX version 4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Name" or "Prefix" fields under the "Create New Rate" module.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://research.0xdutra.com/posts/research-issabel-stored-xss/; https://www.youtube.com/watch?v=apJH_D68lZI; https://research.0xdutra.com/posts/research-issabel-stored-xss/
CVE: CVE-2020-22249
Published: 2021-07-06
Description: Remote Code Execution vulnerability in phplist 3.5.1. The application does not check any file extensions stored in the plugin zip file, Uploading a malicious plugin which contains the php files with extensions like PHP,phtml,php7 will be copied to the plugins directory which would lead to the remote code execution
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://drive.google.com/open?id=1znDU4fDKA_seg16mJLLtgaaFfvmf-mS6; https://drive.google.com/open?id=1znDU4fDKA_seg16mJLLtgaaFfvmf-mS6
CVE: CVE-2020-22251
Published: 2021-07-06
Description: Cross Site Scripting (XSS) vulnerability in phpList 3.5.3 via the login name field in Manage Administrators when adding a new admin.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/phpList/phplist3/issues/660; https://github.com/phpList/phplist3/issues/660
CVE: CVE-2020-23697
Published: 2021-07-06
Description: Cross Site Scripting vulnerabilty in Monstra CMS 3.0.4 via the page feature in admin/index.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/monstra-cms/monstra/issues/463; https://github.com/monstra-cms/monstra/issues/463
CVE: CVE-2021-22226
Published: 2021-07-06
Description: Under certain conditions, some users were able to push to protected branches that were restricted to deploy keys in GitLab CE/EE since version 13.9
CVSS Score: 6.5 (MEDIUM)
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22226.json; https://gitlab.com/gitlab-org/gitlab/-/issues/326684; https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22226.json
CVE: CVE-2021-22229
Published: 2021-07-06
Description: An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.8. Under a special condition it was possible to access data of an internal repository through project fork done by a project member.
CVSS Score: 5.9 (MEDIUM)
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22229.json; https://gitlab.com/gitlab-org/gitlab/-/issues/332609; https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22229.json
CVE: CVE-2021-22232
Published: 2021-07-06
Description: HTML injection was possible via the full name field before versions 13.11.6, 13.12.6, and 14.0.2 in GitLab CE
CVSS Score: 3.5 (LOW)
CWE: CWE-74
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22232.json; https://gitlab.com/gitlab-org/gitlab/-/issues/300713; https://hackerone.com/reports/1090634
CVE: CVE-2021-22223
Published: 2021-07-06
Description: Client-Side code injection through Feature Flag name in GitLab CE/EE starting with 11.9 allows a specially crafted feature flag name to PUT requests on behalf of other users via clicking on a link
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22223.json; https://gitlab.com/gitlab-org/gitlab/-/issues/293946; https://hackerone.com/reports/1059557
CVE: CVE-2021-22228
Published: 2021-07-06
Description: An issue has been discovered in GitLab affecting all versions before 13.11.6, all versions starting from 13.12 before 13.12.6, and all versions starting from 14.0 before 14.0.2. Improper access control allows unauthorised users to access project details using Graphql.
CVSS Score: 6.5 (MEDIUM)
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22228.json; https://gitlab.com/gitlab-org/gitlab/-/issues/332605; https://hackerone.com/reports/1192460
CVE: CVE-2021-35039
Published: 2021-07-07
Description: kernel/module.c in the Linux kernel before 5.12.14 mishandles Signature Verification, aka CID-0c18f29aae7c. Without CONFIG_MODULE_SIG, verification that a kernel module is signed, for loading via init_module, does not occur for a module.sig_enforce=1 command-line argument.
CVSS Score: 7.8 (HIGH)
CWE: CWE-347
References: http://www.openwall.com/lists/oss-security/2021/07/06/3; https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.14; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0c18f29aae7ce3dadd26d8ee3505d07cc982df75
CVE: CVE-2021-20738
Published: 2021-07-07
Description: WRC-1167FS-W, WRC-1167FS-B, and WRC-1167FSA all versions allow an unauthenticated network-adjacent attacker to obtain sensitive information via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
References: https://jvn.jp/en/vu/JVNVU94260088/index.html; https://www.elecom.co.jp/news/security/20210706-01/; https://jvn.jp/en/vu/JVNVU94260088/index.html
CVE: CVE-2021-20739
Published: 2021-07-07
Description: WRC-300FEBK, WRC-F300NF, WRC-733FEBK, WRH-300RD, WRH-300BK, WRH-300SV, WRH-300WH, WRH-H300WH, WRH-H300BK, WRH-300BK-S, and WRH-300WH-S all versions allows an unauthenticated network-adjacent attacker to execute an arbitrary OS command via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://jvn.jp/en/vu/JVNVU94260088/index.html; https://www.elecom.co.jp/news/security/20210706-01/; https://jvn.jp/en/vu/JVNVU94260088/index.html
CVE: CVE-2021-20776
Published: 2021-07-07
Description: Improper authentication vulnerability in SCT-40CM01SR and AT-40CM01SR allows an attacker to bypass access restriction and execute an arbitrary command via telnet.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://jvn.jp/en/jp/JVN21636825/index.html; https://jvn.jp/en/jp/JVN21636825/index.html
CVE: CVE-2021-20777
Published: 2021-07-07
Description: Improper authorization in handler for custom URL scheme vulnerability in GU App for Android versions from 4.8.0 to 5.0.2 allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://jvn.jp/en/jp/JVN25850723/index.html; https://jvn.jp/en/jp/JVN25850723/index.html
CVE: CVE-2021-20779
Published: 2021-07-07
Description: Cross-site request forgery (CSRF) vulnerability in WordPress Email Template Designer - WP HTML Mail versions prior to 3.0.8 allows remote attackers to hijack the authentication of administrators via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://codemiq.com/en/; https://jvn.jp/en/jp/JVN42880365/index.html; https://wordpress.org/plugins/wp-html-mail/
CVE: CVE-2021-20780
Published: 2021-07-07
Description: Cross-site request forgery (CSRF) vulnerability in WPCS - WordPress Currency Switcher 1.1.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://jvn.jp/en/jp/JVN91372527/index.html; https://pluginus.net/; https://wordpress.org/plugins/currency-switcher/
CVE: CVE-2021-22227
Published: 2021-07-07
Description: A reflected cross-site script vulnerability in GitLab before versions 13.11.6, 13.12.6 and 14.0.2 allowed an attacker to send a malicious link to a victim and trigger actions on their behalf if they clicked it
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22227.json; https://gitlab.com/gitlab-org/gitlab/-/issues/212887; https://hackerone.com/reports/834555
CVE: CVE-2021-22230
Published: 2021-07-07
Description: Improper code rendering while rendering merge requests could be exploited to submit malicious code. This vulnerability affects GitLab CE/EE 9.3 and later through 13.11.6, 13.12.6, and 14.0.2.
CVSS Score: 4.9 (MEDIUM)
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22230.json; https://gitlab.com/gitlab-org/gitlab/-/issues/211976; https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22230.json
CVE: CVE-2021-22231
Published: 2021-07-07
Description: A denial of service in user's profile page is found starting with GitLab CE/EE 8.0 that allows attacker to reject access to their profile page via using a specially crafted username.
CVSS Score: 3.5 (LOW)
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22231.json; https://gitlab.com/gitlab-org/gitlab/-/issues/26295; https://hackerone.com/reports/475098
CVE: CVE-2021-26035
Published: 2021-07-07
Description: An issue was discovered in Joomla! 3.0.0 through 3.9.27. Inadequate escaping in the rules field of the JForm API leads to a XSS vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://developer.joomla.org/security-centre/[PII_REDACTED]1-core-xss-in-jform-rules-field.html; https://developer.joomla.org/security-centre/[PII_REDACTED]1-core-xss-in-jform-rules-field.html
CVE: CVE-2021-26036
Published: 2021-07-07
Description: An issue was discovered in Joomla! 2.5.0 through 3.9.27. Missing validation of input could lead to a broken usergroups table.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://developer.joomla.org/security-centre/[PII_REDACTED]2-core-dos-through-usergroup-table-manipulation.html; https://developer.joomla.org/security-centre/[PII_REDACTED]2-core-dos-through-usergroup-table-manipulation.html
CVE: CVE-2021-26037
Published: 2021-07-07
Description: An issue was discovered in Joomla! 2.5.0 through 3.9.27. CMS functions did not properly termine existing user sessions when a user's password was changed or the user was blocked.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-613
References: https://developer.joomla.org/security-centre/[PII_REDACTED]3-core-lack-of-enforced-session-termination.html; https://developer.joomla.org/security-centre/[PII_REDACTED]3-core-lack-of-enforced-session-termination.html
CVE: CVE-2021-26038
Published: 2021-07-07
Description: An issue was discovered in Joomla! 2.5.0 through 3.9.27. Install action in com_installer lack the required hardcoded ACL checks for superusers. A default system is not affected cause the default ACL for com_installer is limited to super users already.
CVSS Score: 7.5 (HIGH)
CWE: CWE-754
References: https://developer.joomla.org/security-centre/[PII_REDACTED]4-core-privilege-escalation-through-com-installer.html; https://developer.joomla.org/security-centre/[PII_REDACTED]4-core-privilege-escalation-through-com-installer.html
CVE: CVE-2021-26039
Published: 2021-07-07
Description: An issue was discovered in Joomla! 3.0.0 through 3.9.27. Inadequate escaping in the imagelist view of com_media leads to a XSS vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://developer.joomla.org/security-centre/[PII_REDACTED]5-core-xss-in-com-media-imagelist.html; https://developer.joomla.org/security-centre/[PII_REDACTED]5-core-xss-in-com-media-imagelist.html
CVE: CVE-2021-22224
Published: 2021-07-07
Description: A cross-site request forgery vulnerability in the GraphQL API in GitLab since version 13.12 and before versions 13.12.6 and 14.0.2 allowed an attacker to call mutations as the victim
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22224.json; https://gitlab.com/gitlab-org/gitlab/-/issues/324397; https://hackerone.com/reports/1122408
CVE: CVE-2021-22225
Published: 2021-07-07
Description: Insufficient input sanitization in markdown in GitLab version 13.11 and up allows an attacker to exploit a stored cross-site scripting vulnerability via a specially-crafted markdown
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22225.json; https://gitlab.com/gitlab-org/gitlab/-/issues/331051; https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22225.json
CVE: CVE-2021-22555
Published: 2021-07-07
Description: A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space
CVSS Score: 8.3 (HIGH)
CWE: CWE-787, CWE-787
References: http://packetstormsecurity.com/files/163528/Linux-Kernel-Netfilter-Heap-Out-Of-Bounds-Write.html; http://packetstormsecurity.com/files/163878/Kernel-Live-Patch-Security-Notice-LSN-0080-1.html; http://packetstormsecurity.com/files/164155/Kernel-Live-Patch-Security-Notice-LSN-0081-1.html
CVE: CVE-2021-25952
Published: 2021-07-07
Description: Prototype pollution vulnerability in ‘just-safe-set’ versions 1.0.0 through 2.2.1 allows an attacker to cause a denial of service and may lead to remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1321
References: https://github.com/angus-c/just/commit/dd57a476f4bb9d78c6f60741898dc04c71d2eb53; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25952; https://github.com/angus-c/just/commit/dd57a476f4bb9d78c6f60741898dc04c71d2eb53
CVE: CVE-2021-34620
Published: 2021-07-07
Description: The WP Fluent Forms plugin < 3.6.67 for WordPress is vulnerable to Cross-Site Request Forgery leading to stored Cross-Site Scripting and limited Privilege Escalation due to a missing nonce check in the access control function for administrative AJAX actions
CVSS Score: 8.8 (HIGH)
CWE: CWE-79, CWE-352, CWE-352
References: https://plugins.trac.wordpress.org/browser/fluentform/trunk/app/Modules/Acl/Acl.php?rev=2196688; https://www.wordfence.com/blog/2021/06/cross-site-request-forgery-patched-in-wp-fluent-forms/; https://plugins.trac.wordpress.org/browser/fluentform/trunk/app/Modules/Acl/Acl.php?rev=2196688
CVE: CVE-2021-34621
Published: 2021-07-07
Description: A vulnerability in the user registration component found in the ~/src/Classes/RegistrationAuth.php file of the ProfilePress WordPress plugin made it possible for users to register on sites as an administrator. This issue affects versions 3.0.0 - 3.1.3. .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269, CWE-306
References: http://packetstormsecurity.com/files/163973/WordPress-ProfilePress-3.1.3-Privilege-Escalation.html; https://www.wordfence.com/blog/2021/06/easily-exploitable-critical-vulnerabilities-patched-in-profilepress-plugin/; http://packetstormsecurity.com/files/163973/WordPress-ProfilePress-3.1.3-Privilege-Escalation.html
CVE: CVE-2021-34622
Published: 2021-07-07
Description: A vulnerability in the user profile update component found in the ~/src/Classes/EditUserProfile.php file of the ProfilePress WordPress plugin made it possible for users to escalate their privileges to that of an administrator while editing their profile. This issue affects versions 3.0.0 - 3.1.3. .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269
References: https://www.wordfence.com/blog/2021/06/easily-exploitable-critical-vulnerabilities-patched-in-profilepress-plugin/; https://www.wordfence.com/blog/2021/06/easily-exploitable-critical-vulnerabilities-patched-in-profilepress-plugin/
CVE: CVE-2021-34623
Published: 2021-07-07
Description: A vulnerability in the image uploader component found in the ~/src/Classes/ImageUploader.php file of the ProfilePress WordPress plugin made it possible for users to upload arbitrary files during user registration or during profile updates. This issue affects versions 3.0.0 - 3.1.3. .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://www.wordfence.com/blog/2021/06/easily-exploitable-critical-vulnerabilities-patched-in-profilepress-plugin/; https://www.wordfence.com/blog/2021/06/easily-exploitable-critical-vulnerabilities-patched-in-profilepress-plugin/
CVE: CVE-2021-34624
Published: 2021-07-07
Description: A vulnerability in the file uploader component found in the ~/src/Classes/FileUploader.php file of the ProfilePress WordPress plugin made it possible for users to upload arbitrary files during user registration or during profile updates. This issue affects versions 3.0.0 - 3.1.3. .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://www.wordfence.com/blog/2021/06/easily-exploitable-critical-vulnerabilities-patched-in-profilepress-plugin/; https://www.wordfence.com/blog/2021/06/easily-exploitable-critical-vulnerabilities-patched-in-profilepress-plugin/
CVE: CVE-2021-34625
Published: 2021-07-07
Description: A vulnerability in the saveCustomType function of the WP Upload Restriction WordPress plugin allows low-level authenticated users to inject arbitrary web scripts. This issue affects versions 2.2.3 and prior.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.wordfence.com/vulnerability-advisories/#CVE-2021-34625; https://www.wordfence.com/vulnerability-advisories/#CVE-2021-34625
CVE: CVE-2021-34626
Published: 2021-07-07
Description: A vulnerability in the deleteCustomType function of the WP Upload Restriction WordPress plugin allows low-level authenticated users to delete custom extensions added by administrators. This issue affects versions 2.2.3 and prior.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: https://www.wordfence.com/vulnerability-advisories/#CVE-2021-34626; https://www.wordfence.com/vulnerability-advisories/#CVE-2021-34626
CVE: CVE-2021-34627
Published: 2021-07-07
Description: A vulnerability in the getSelectedMimeTypesByRole function of the WP Upload Restriction WordPress plugin allows low-level authenticated users to view custom extensions added by administrators. This issue affects versions 2.2.3 and prior.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: https://www.wordfence.com/vulnerability-advisories/#CVE-2021-34627; https://www.wordfence.com/vulnerability-advisories/#CVE-2021-34627
CVE: CVE-2021-36212
Published: 2021-07-07
Description: app/View/SharingGroups/view.ctp in MISP before 2.4.146 allows stored XSS in the sharing groups view.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/MISP/MISP/commit/01521d614cb578de75a406394b4f0426f6036ba7; https://github.com/MISP/MISP/compare/v2.4.145...v2.4.146; https://github.com/MISP/MISP/commit/01521d614cb578de75a406394b4f0426f6036ba7
CVE: CVE-2020-20211
Published: 2021-07-07
Description: Mikrotik RouterOs 6.44.5 (long-term tree) suffers from an assertion failure vulnerability in the /nova/bin/console process. An authenticated remote attacker can cause a Denial of Service due to an assertion failure via a crafted packet.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-617
References: http://seclists.org/fulldisclosure/2021/May/0; https://mikrotik.com/; http://seclists.org/fulldisclosure/2021/May/0
CVE: CVE-2020-20212
Published: 2021-07-07
Description: Mikrotik RouterOs 6.44.5 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/console process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://seclists.org/fulldisclosure/2021/May/0; https://mikrotik.com/; http://seclists.org/fulldisclosure/2021/May/0
CVE: CVE-2020-20213
Published: 2021-07-07
Description: Mikrotik RouterOs 6.44.5 (long-term tree) suffers from an stack exhaustion vulnerability in the /nova/bin/net process. An authenticated remote attacker can cause a Denial of Service due to overloading the systems CPU.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-674
References: http://seclists.org/fulldisclosure/2021/May/10; https://cwe.mitre.org/data/definitions/674.html; https://mikrotik.com/
CVE: CVE-2020-20215
Published: 2021-07-07
Description: Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/diskd process. An authenticated remote attacker can cause a Denial of Service due to invalid memory access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: http://seclists.org/fulldisclosure/2021/May/10; https://mikrotik.com/; http://seclists.org/fulldisclosure/2021/May/10
CVE: CVE-2020-20216
Published: 2021-07-07
Description: Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/graphing process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://seclists.org/fulldisclosure/2021/May/10; https://mikrotik.com/; http://seclists.org/fulldisclosure/2021/May/10
CVE: CVE-2020-20225
Published: 2021-07-07
Description: Mikrotik RouterOs before 6.47 (stable tree) suffers from an assertion failure vulnerability in the /nova/bin/user process. An authenticated remote attacker can cause a Denial of Service due to an assertion failure via a crafted packet.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-617
References: http://seclists.org/fulldisclosure/2021/May/12; https://mikrotik.com/; http://seclists.org/fulldisclosure/2021/May/12
CVE: CVE-2020-24038
Published: 2021-07-07
Description: myFax version 229 logs sensitive information in the export log module which allows any user to access critical information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-532
References: https://github.com/Dmitriy-area51/Exploit/tree/master/CVE-2020-24038; https://myfax.com/; https://github.com/Dmitriy-area51/Exploit/tree/master/CVE-2020-24038
CVE: CVE-2020-24141
Published: 2021-07-07
Description: Server-side request forgery in the WP-DownloadManager plugin 1.68.4 for WordPress lets an attacker send crafted requests from the back-end server of a vulnerable web application via the file_remote parameter to download-add.php. It can help identify open ports, local network hosts and execute command on services
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-918
References: https://github.com/secwx/research/blob/main/cve/CVE-2020-24141.md; https://github.com/secwx/research/blob/main/cve/CVE-2020-24141.md
CVE: CVE-2020-24142
Published: 2021-07-07
Description: Server-side request forgery in the Video Downloader for TikTok (aka downloader-tiktok) plugin 1.3 for WordPress lets an attacker send crafted requests from the back-end server of a vulnerable web application via the njt-tk-download-video parameter. It can help identify open ports, local network hosts and execute command on services
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918
References: https://github.com/secwx/research/blob/main/cve/CVE-2020-24142.md; https://github.com/secwx/research/blob/main/cve/CVE-2020-24142.md
CVE: CVE-2020-24143
Published: 2021-07-07
Description: Directory traversal in the Video Downloader for TikTok (aka downloader-tiktok) plugin 1.3 for WordPress lets an attacker get access to files that are stored outside the web root folder via the njt-tk-download-video parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/secwx/research/blob/main/cve/CVE-2020-24143.md; https://github.com/secwx/research/blob/main/cve/CVE-2020-24143.md
CVE: CVE-2020-24144
Published: 2021-07-07
Description: Directory traversal in the Media File Organizer (aka media-file-organizer) plugin 1.0.1 for WordPress lets an attacker get access to files that are stored outside the web root folder via the items[] parameter in a move operation.
CVSS Score: 8.6 (HIGH)
CWE: CWE-22
References: https://github.com/secwx/research/blob/main/cve/CVE-2020-24144.md; https://ru.wordpress.org/plugins/media-file-organizer/; https://github.com/secwx/research/blob/main/cve/CVE-2020-24144.md
CVE: CVE-2020-24145
Published: 2021-07-07
Description: Cross Site Scripting (XSS) vulnerability in the CM Download Manager (aka cm-download-manager) plugin 2.7.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via a crafted deletescreenshot action.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/secwx/research/blob/main/cve/CVE-2020-24145.md; https://wordpress.org/plugins/cm-download-manager/#developers; https://github.com/secwx/research/blob/main/cve/CVE-2020-24145.md
CVE: CVE-2020-24146
Published: 2021-07-07
Description: Directory traversal in the CM Download Manager (aka cm-download-manager) plugin 2.7.0 for WordPress allows authorized users to delete arbitrary files and possibly cause a denial of service via the fileName parameter in a deletescreenshot action.
CVSS Score: 8.1 (HIGH)
CWE: CWE-22
References: https://github.com/secwx/research/blob/main/cve/CVE-2020-24146.md; https://wordpress.org/plugins/cm-download-manager/#developers; https://github.com/secwx/research/blob/main/cve/CVE-2020-24146.md