deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-43445
Published: 2023-01-23
Description: ONLYOFFICE all versions as of 2021-11-08 is affected by Incorrect Access Control. An attacker can authenticate with the web socket service of the ONLYOFFICE document editor which is protected by JWT auth by using a default JWT signing key.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-287
References: https://github.com/ONLYOFFICE/server; https://labs.nettitude.com/blog/exploiting-onlyoffice-web-sockets-for-unauthenticated-remote-code-execution/; https://www.onlyoffice.com/
CVE: CVE-2021-43446
Published: 2023-01-23
Description: ONLYOFFICE all versions as of 2021-11-08 is vulnerable to Cross Site Scripting (XSS). The "macros" feature of the document editor allows malicious cross site scripting payloads to be used.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/ONLYOFFICE/server; https://labs.nettitude.com/blog/exploiting-onlyoffice-web-sockets-for-unauthenticated-remote-code-execution/; https://onlyoffice.com/
CVE: CVE-2021-43447
Published: 2023-01-23
Description: ONLYOFFICE all versions as of 2021-11-08 is affected by Incorrect Access Control. An authentication bypass in the document editor allows attackers to edit documents without authentication.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306, CWE-306
References: https://github.com/ONLYOFFICE/server; https://labs.nettitude.com/blog/exploiting-onlyoffice-web-sockets-for-unauthenticated-remote-code-execution/; https://www.onlyoffice.com/
CVE: CVE-2021-43448
Published: 2023-01-23
Description: ONLYOFFICE all versions as of 2021-11-08 is vulnerable to Improper Input Validation. A lack of input validation can allow an attacker to spoof the names of users who interact with a document, if the document id is known.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://github.com/ONLYOFFICE/server; https://labs.nettitude.com/blog/exploiting-onlyoffice-web-sockets-for-unauthenticated-remote-code-execution/; https://www.onlyoffice.com/
CVE: CVE-2021-43449
Published: 2023-01-23
Description: ONLYOFFICE all versions as of 2021-11-08 is vulnerable to Server-Side Request Forgery (SSRF). The document editor service can be abused to read and serve arbitrary URLs as a document.
CVSS Score: 8.1 (HIGH)
CWE: CWE-918, CWE-918
References: https://github.com/ONLYOFFICE/server; https://labs.nettitude.com/blog/exploiting-onlyoffice-web-sockets-for-unauthenticated-remote-code-execution/; https://www.onlyoffice.com/
CVE: CVE-2022-0316
Published: 2023-01-23
Description: The WeStand WordPress theme before 2.1, footysquare WordPress theme, aidreform WordPress theme, statfort WordPress theme, club-theme WordPress theme, kingclub-theme WordPress theme, spikes WordPress theme, spikes-black WordPress theme, soundblast WordPress theme, bolster WordPress theme from ChimpStudio and PixFill does not have any authorisation and upload validation in the lang_upload.php file, allowing any unauthenticated attacker to upload arbitrary files to the web server.
CVSS Score: 9.8 (CRITICAL)
References: https://wpscan.com/vulnerability/9ab3d6cf-aad7-41bc-9aae-dc5313f12f7c; https://wpscan.com/vulnerability/9ab3d6cf-aad7-41bc-9aae-dc5313f12f7c
CVE: CVE-2022-3425
Published: 2023-01-23
Description: The Analyticator WordPress plugin before 6.5.6 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.
CVSS Score: 7.2 (HIGH)
References: https://wpscan.com/vulnerability/df1c36bb-9861-4272-89c9-ae76e62f687c; https://wpscan.com/vulnerability/df1c36bb-9861-4272-89c9-ae76e62f687c
CVE: CVE-2022-3811
Published: 2023-01-23
Description: The EU Cookie Law for GDPR/CCPA WordPress plugin through 3.1.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 4.8 (MEDIUM)
References: https://wpscan.com/vulnerability/262924da-e269-4008-a24f-9f26a033b23e; https://wpscan.com/vulnerability/262924da-e269-4008-a24f-9f26a033b23e
CVE: CVE-2022-41505
Published: 2023-01-23
Description: An access control issue on TP-LInk Tapo C200 V1 devices allows physically proximate attackers to obtain root access by connecting to the UART pins, interrupting the boot process, and setting an init=/bin/sh value.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-306
References: https://github.com/hemant70072/Access-control-issue-in-TP-Link-Tapo-C200-V1.; https://github.com/hemant70072/Access-control-issue-in-TP-Link-Tapo-C200-V1.
CVE: CVE-2022-47065
Published: 2023-01-23
Description: TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow via the submit-url parameter at /formNewSchedule. This vulnerability allows attackers to execute arbitrary code via a crafted payload. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-121
References: https://github.com/chunklhit/cve/blob/master/TRENDNet/TEW-820AP/01/README.md; https://github.com/chunklhit/cve/blob/master/TRENDNet/TEW-820AP/01/README.md
CVE: CVE-2022-4017
Published: 2023-01-23
Description: The Booster for WooCommerce WordPress plugin before 6.0.1, Booster Plus for WooCommerce WordPress plugin before 6.0.1, Booster Elite for WooCommerce WordPress plugin before 6.0.1 have either flawed CSRF checks or are missing them completely in numerous places, allowing attackers to make logged in users perform unwanted actions via CSRF attacks
CVSS Score: 8.8 (HIGH)
References: https://wpscan.com/vulnerability/609072d0-9bb9-4fe0-9626-7e4a334ca3a4; https://wpscan.com/vulnerability/609072d0-9bb9-4fe0-9626-7e4a334ca3a4
CVE: CVE-2022-4230
Published: 2023-01-23
Description: The WP Statistics WordPress plugin before 13.2.9 does not escape a parameter, which could allow authenticated users to perform SQL Injection attacks. By default, the affected feature is available to users with the manage_options capability (admin+), however the plugin has a settings to allow low privilege users to access it as well.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://wpscan.com/vulnerability/a0e40cfd-b217-481c-8fc4-027a0a023312; https://wpscan.com/vulnerability/a0e40cfd-b217-481c-8fc4-027a0a023312
CVE: CVE-2022-4303
Published: 2023-01-23
Description: The WP Limit Login Attempts WordPress plugin through 2.6.4 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible to bypass IP-based restrictions on login forms.
CVSS Score: 7.5 (HIGH)
CWE: CWE-290
References: https://wpscan.com/vulnerability/8428a5e1-dbef-4516-983f-f95605c6dd09; https://wpscan.com/vulnerability/8428a5e1-dbef-4516-983f-f95605c6dd09
CVE: CVE-2022-4305
Published: 2023-01-23
Description: The Login as User or Customer WordPress plugin before 3.3 lacks authorization checks to ensure that users are allowed to log in as another one, which could allow unauthenticated attackers to obtain a valid admin session.
CVSS Score: 9.8 (CRITICAL)
References: https://wpscan.com/vulnerability/286d972d-7bda-455c-a226-fd9ce5f925bd; https://wpscan.com/vulnerability/286d972d-7bda-455c-a226-fd9ce5f925bd
CVE: CVE-2022-4307
Published: 2023-01-23
Description: The پلاگین پرداخت دلخواه WordPress plugin before 2.9.3 does not sanitise and escape some parameters, allowing unauthenticated attackers to send a request with XSS payloads, which will be triggered when a high privilege users such as admin visits a page from the plugin.
CVSS Score: 6.1 (MEDIUM)
References: https://wpscan.com/vulnerability/4000ba69-d73f-4c5b-a[PII_REDACTED]4cebb; https://wpscan.com/vulnerability/4000ba69-d73f-4c5b-a[PII_REDACTED]4cebb
CVE: CVE-2022-4323
Published: 2023-01-23
Description: The Analyticator WordPress plugin before 6.5.6 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present
CVSS Score: 7.2 (HIGH)
References: https://wpscan.com/vulnerability/ce8027b8-9473-463e-ba80-49b3d6d16228; https://wpscan.com/vulnerability/ce8027b8-9473-463e-ba80-49b3d6d16228
CVE: CVE-2022-4346
Published: 2023-01-23
Description: The All-In-One Security (AIOS) WordPress plugin before 5.1.3 leaked settings of the plugin publicly, including the used email address.
CVSS Score: 5.3 (MEDIUM)
References: https://wpscan.com/vulnerability/cc05f760-983d-4dc1-afbb-6b4965aa8abe; https://wpscan.com/vulnerability/cc05f760-983d-4dc1-afbb-6b4965aa8abe
CVE: CVE-2022-4383
Published: 2023-01-23
Description: The CBX Petition for WordPress plugin through 1.0.3 does not properly sanitize and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.
CVSS Score: 9.8 (CRITICAL)
References: https://wpscan.com/vulnerability/e0fe5a53-8ae2-4b67-ac6e-4a8860e39035; https://wpscan.com/vulnerability/e0fe5a53-8ae2-4b67-ac6e-4a8860e39035
CVE: CVE-2022-4443
Published: 2023-01-23
Description: The BruteBank WordPress plugin before 1.9 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged-in admin change them via a CSRF attack.
CVSS Score: 6.5 (MEDIUM)
References: https://wpscan.com/vulnerability/1e621d62-13c7-4b2f-96ca-3617a796d037; https://wpscan.com/vulnerability/1e621d62-13c7-4b2f-96ca-3617a796d037
CVE: CVE-2022-4467
Published: 2023-01-23
Description: The Search & Filter WordPress plugin before 1.2.16 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/54168861-c0b8-4de6-a9af-0ad5c20b4a45; https://wpscan.com/vulnerability/54168861-c0b8-4de6-a9af-0ad5c20b4a45
CVE: CVE-2022-4474
Published: 2023-01-23
Description: The Easy Social Feed WordPress plugin before 6.4.0 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/3acc6940-13ec-40fb-8471-6b2f0445c543; https://wpscan.com/vulnerability/3acc6940-13ec-40fb-8471-6b2f0445c543
CVE: CVE-2022-4475
Published: 2023-01-23
Description: The Collapse-O-Matic WordPress plugin before 1.8.3 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/3b5c377c-3148-4373-996c-89851d5e39e5; https://wpscan.com/vulnerability/3b5c377c-3148-4373-996c-89851d5e39e5
CVE: CVE-2022-4485
Published: 2023-01-23
Description: The Page-list WordPress plugin before 5.3 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/685b068e-0727-45fb-bd8c-66bb1dc3a8e7; https://wpscan.com/vulnerability/685b068e-0727-45fb-bd8c-66bb1dc3a8e7
CVE: CVE-2022-4509
Published: 2023-01-23
Description: The Content Control WordPress plugin before 1.1.10 does not validate and escapes some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as a contributor to perform Stored Cross-Site Scripting attacks, which could be used against high privilege users such as admins.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/90baba2e-a64f-4725-b76c-3aed94b18910; https://wpscan.com/vulnerability/90baba2e-a64f-4725-b76c-3aed94b18910
CVE: CVE-2022-4542
Published: 2023-01-23
Description: The Compact WP Audio Player WordPress plugin before 1.9.8 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/f0bef96f-dfe2-4988-adf8-e1bd493c5242; https://wpscan.com/vulnerability/f0bef96f-dfe2-4988-adf8-e1bd493c5242
CVE: CVE-2022-4545
Published: 2023-01-23
Description: The Sitemap WordPress plugin before 4.4 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/19f482cb-fcfd-43e6-9a04-143e06351a70; https://wpscan.com/vulnerability/19f482cb-fcfd-43e6-9a04-143e06351a70
CVE: CVE-2022-4548
Published: 2023-01-23
Description: The Optimize images ALT Text & names for SEO using AI WordPress plugin before 2.0.8 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged-in admin change them via a CSRF attack.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/0ff435bc-ea20-4993-98ae-1f61b1732b59; https://wpscan.com/vulnerability/0ff435bc-ea20-4993-98ae-1f61b1732b59
CVE: CVE-2022-4570
Published: 2023-01-23
Description: The Top 10 WordPress plugin before 3.2.3 does not validate and escape some of its Block attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/a2483ecf-42a6-470a-b965-4e05069d1cef; https://wpscan.com/vulnerability/a2483ecf-42a6-470a-b965-4e05069d1cef
CVE: CVE-2022-4576
Published: 2023-01-23
Description: The Easy Bootstrap Shortcode WordPress plugin through 4.5.4 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/0d679e0e-891b-44f1-ac7f-a766e12956e0; https://wpscan.com/vulnerability/0d679e0e-891b-44f1-ac7f-a766e12956e0
CVE: CVE-2022-4624
Published: 2023-01-23
Description: The GS Logo Slider WordPress plugin before 3.3.8 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/e7dc0202-6be4-46fc-a451-fb3a25727b51; https://wpscan.com/vulnerability/e7dc0202-6be4-46fc-a451-fb3a25727b51
CVE: CVE-2022-4625
Published: 2023-01-23
Description: The Login Logout Menu WordPress plugin before 1.4.0 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/cd6657d5-810c-4d0c-8bbf-1f8d4a2d8d15; https://wpscan.com/vulnerability/cd6657d5-810c-4d0c-8bbf-1f8d4a2d8d15
CVE: CVE-2022-4627
Published: 2023-01-23
Description: The ShiftNav WordPress plugin before 1.7.2 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/be9e8870-0682-441d-8955-d096d1346bd1; https://wpscan.com/vulnerability/be9e8870-0682-441d-8955-d096d1346bd1
CVE: CVE-2022-4629
Published: 2023-01-23
Description: The Product Slider for WooCommerce WordPress plugin before 2.6.4 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/cf0a51f9-21d3-4ae8-b7d2-361921038fe8; https://wpscan.com/vulnerability/cf0a51f9-21d3-4ae8-b7d2-361921038fe8
CVE: CVE-2022-4650
Published: 2023-01-23
Description: The HashBar WordPress plugin before 1.3.6 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/b430fdaa-191a-429e-b6d2-479b32bb1075; https://wpscan.com/vulnerability/b430fdaa-191a-429e-b6d2-479b32bb1075
CVE: CVE-2022-4668
Published: 2023-01-23
Description: The Easy Appointments WordPress plugin before 3.11.2 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/3e43156a-b784-4066-be69-23b139aafbad; https://wpscan.com/vulnerability/3e43156a-b784-4066-be69-23b139aafbad
CVE: CVE-2022-4672
Published: 2023-01-23
Description: The WordPress Simple Shopping Cart WordPress plugin before 4.6.2 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/6500271f-9d1c-40ed-be58-a6cea8d1110d; https://wpscan.com/vulnerability/6500271f-9d1c-40ed-be58-a6cea8d1110d
CVE: CVE-2022-4673
Published: 2023-01-23
Description: The Rate my Post WordPress plugin before 3.3.9 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/1c4f379d-252a-487b-81c9-bf711ab71dff; https://wpscan.com/vulnerability/1c4f379d-252a-487b-81c9-bf711ab71dff
CVE: CVE-2022-4675
Published: 2023-01-23
Description: The Mongoose Page Plugin WordPress plugin before 1.9.0 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/21f4cc5d-c4b4-495f-acf3-9fdf53591052; https://wpscan.com/vulnerability/21f4cc5d-c4b4-495f-acf3-9fdf53591052
CVE: CVE-2022-4693
Published: 2023-01-23
Description: The User Verification WordPress plugin before 1.0.94 was affected by an Auth Bypass security vulnerability. To bypass authentication, we only need to know the user’s username. Depending on whose username we know, which can be easily queried because it is usually public data, we may even be given an administrative role on the website.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-522, CWE-522
References: https://lana.codes/lanavdb/eeabe1d3-6f64-400a-8fb2-0865efdf6957; https://wpscan.com/vulnerability/1eee10a8-135f-4b76-8289-c381ff1f51ea; https://lana.codes/lanavdb/eeabe1d3-6f64-400a-8fb2-0865efdf6957
CVE: CVE-2022-4706
Published: 2023-01-23
Description: The Genesis Columns Advanced WordPress plugin before 2.0.4 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as a contributor to perform Stored Cross-Site Scripting attacks which could be used against high-privilege users such as admins.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/30882a45-ca03-4ff1-a36d-758d9b9b641c; https://wpscan.com/vulnerability/30882a45-ca03-4ff1-a36d-758d9b9b641c
CVE: CVE-2022-4715
Published: 2023-01-23
Description: The Structured Content WordPress plugin before 1.5.1 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/4394fe86-4240-4454-b724-81464b04123a; https://wpscan.com/vulnerability/4394fe86-4240-4454-b724-81464b04123a
CVE: CVE-2022-4716
Published: 2023-01-23
Description: The WP Popups WordPress plugin before 2.1.4.8 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/24176ad3-2317-4853-b4db-8394384d52cd; https://wpscan.com/vulnerability/24176ad3-2317-4853-b4db-8394384d52cd
CVE: CVE-2022-4718
Published: 2023-01-23
Description: The Landing Page Builder WordPress plugin before 1.4.9.9 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/04d7cd44-9e18-42b9-9f79-cc9cd6980526; https://wpscan.com/vulnerability/04d7cd44-9e18-42b9-9f79-cc9cd6980526
CVE: CVE-2022-4746
Published: 2023-01-23
Description: The FluentAuth WordPress plugin before 1.0.2 prioritizes getting a visitor's IP address from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible to bypass the IP-based blocks set by the plugin.
CVSS Score: 7.5 (HIGH)
CWE: CWE-290, CWE-290
References: https://wpscan.com/vulnerability/62e3babc-00c6-4a35-972f-8f03ba70ba32; https://wpscan.com/vulnerability/62e3babc-00c6-4a35-972f-8f03ba70ba32
CVE: CVE-2022-4751
Published: 2023-01-23
Description: The Word Balloon WordPress plugin before 4.19.3 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/dd5cc04a-042d-402a-ab7a-96aff3d57478; https://wpscan.com/vulnerability/dd5cc04a-042d-402a-ab7a-96aff3d57478
CVE: CVE-2022-4753
Published: 2023-01-23
Description: The Print-O-Matic WordPress plugin before 2.1.8 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
CVSS Score: 5.4 (MEDIUM)
References: https://wpscan.com/vulnerability/5d72ec1f-5379-4d8e-850c-afe8b41bb126; https://wpscan.com/vulnerability/5d72ec1f-5379-4d8e-850c-afe8b41bb126