deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-23946
Published: 2022-02-04
Description: A stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon GCodeNumber parsing functionality of KiCad EDA 6.0.1 and master commit de006fc010. A specially-crafted gerber or excellon file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://lists.debian.org/debian-lts-announce/2022/05/msg00009.html; https://lists.debian.org/debian-lts-announce/2022/08/msg00010.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5EMCGSSP3FIWCSL2KXVXLF35JYZKZE5Q/
CVE: CVE-2022-23947
Published: 2022-02-04
Description: A stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon DCodeNumber parsing functionality of KiCad EDA 6.0.1 and master commit de006fc010. A specially-crafted gerber or excellon file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://lists.debian.org/debian-lts-announce/2022/05/msg00009.html; https://lists.debian.org/debian-lts-announce/2022/08/msg00010.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5EMCGSSP3FIWCSL2KXVXLF35JYZKZE5Q/
CVE: CVE-2022-23980
Published: 2022-02-04
Description: Cross-Site Scripting (XSS) vulnerability discovered in Yasr – Yet Another Stars Rating WordPress plugin (versions <= 2.9.9), vulnerable at parameter 'source'.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://patchstack.com/database/vulnerability/yet-another-stars-rating/wordpress-yasr-yet-another-stars-rating-plugin-2-9-9-cross-site-scripting-xss-vulnerability; https://wordpress.org/plugins/yet-another-stars-rating/#developers; https://patchstack.com/database/vulnerability/yet-another-stars-rating/wordpress-yasr-yet-another-stars-rating-plugin-2-9-9-cross-site-scripting-xss-vulnerability
CVE: CVE-2022-24113
Published: 2022-02-04
Description: Local privilege escalation due to excessive permissions assigned to child processes. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 28035, Acronis Agent (Windows) before build 27147, Acronis Cyber Protect Home Office (Windows) before build 39612, Acronis True Image 2021 (Windows) before build 39287
CVSS Score: 7.8 (HIGH)
CWE: CWE-250, CWE-276
References: https://security-advisory.acronis.com/advisories/SEC-2881; https://security-advisory.acronis.com/advisories/SEC-2881
CVE: CVE-2022-24114
Published: 2022-02-04
Description: Local privilege escalation due to race condition on application startup. The following products are affected: Acronis Cyber Protect Home Office (macOS) before build 39605, Acronis True Image 2021 (macOS) before build 39287
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-362
References: https://security-advisory.acronis.com/advisories/SEC-3316; https://security-advisory.acronis.com/advisories/SEC-3316
CVE: CVE-2022-24115
Published: 2022-02-04
Description: Local privilege escalation due to unrestricted loading of unsigned libraries. The following products are affected: Acronis Cyber Protect Home Office (macOS) before build 39605, Acronis True Image 2021 (macOS) before build 39287
CVSS Score: 7.8 (HIGH)
CWE: CWE-347, CWE-347
References: https://security-advisory.acronis.com/advisories/SEC-3359; https://security-advisory.acronis.com/advisories/SEC-3359
CVE: CVE-2022-0437
Published: 2022-02-05
Description: Cross-site Scripting (XSS) - DOM in NPM karma prior to 6.3.14.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/karma-runner/karma/commit/839578c45a8ac42fbc1d72105f97eab77dd3eb8a; https://huntr.dev/bounties/64b67ea1-5487-4382-a5f6-e8a95f798885; https://github.com/karma-runner/karma/commit/839578c45a8ac42fbc1d72105f97eab77dd3eb8a
CVE: CVE-2022-0501
Published: 2022-02-05
Description: Cross-site Scripting (XSS) - Reflected in Packagist ptrofimov/beanstalk_console prior to 1.7.12.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/ptrofimov/beanstalk_console/commit/e351c8260ec1d3718d9e475ee57c7e12c47f19da; https://huntr.dev/bounties/9af1c35e-3f74-4c93-a241-e8be01335ec7; https://github.com/ptrofimov/beanstalk_console/commit/e351c8260ec1d3718d9e475ee57c7e12c47f19da
CVE: CVE-2021-38172
Published: 2022-02-05
Description: perM 0.4.0 has a Buffer Overflow related to strncpy. (Debian initially fixed this in 0.4.0-7.)
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=993019; https://lists.debian.org/debian-med/2021/08/msg00016.html; https://packages.qa.debian.org/p/perm.html
CVE: CVE-2022-0502
Published: 2022-02-06
Description: Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/livehelperchat/livehelperchat/commit/d3b107aaa8ec10816acc762d60e7321079c21706; https://huntr.dev/bounties/34f2aa30-de7f-432a-8749-b43d2774140f; https://github.com/livehelperchat/livehelperchat/commit/d3b107aaa8ec10816acc762d60e7321079c21706
CVE: CVE-2022-23206
Published: 2022-02-06
Description: In Apache Traffic Control Traffic Ops prior to 6.1.0 or 5.1.6, an unprivileged user who can reach Traffic Ops over HTTPS can send a specially-crafted POST request to /user/login/oauth to scan a port of a server that Traffic Ops can reach.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918, CWE-918
References: https://lists.apache.org/thread/lsrd2mqj29vrvwsh8g0d560vvz8n126f; https://lists.apache.org/thread/lsrd2mqj29vrvwsh8g0d560vvz8n126f
CVE: CVE-2007-20001
Published: 2022-02-06
Description: A flaw was found in StarWind iSCSI target. An attacker could script standard iSCSI Initiator operation(s) to exhaust the StarWind service socket, which could lead to denial of service. This affects iSCSI SAN (Windows Native) Version 3.2.2 build 2007-02-20.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://www.starwindsoftware.com/security/sw-20[PII_REDACTED]/; https://www.starwindsoftware.com/security/sw-20[PII_REDACTED]/
CVE: CVE-2013-20004
Published: 2022-02-06
Description: A flaw was found in StarWind iSCSI target. StarWind service does not limit client connections and allocates memory on each connection attempt. An attacker could create a denial of service state by trying to connect a non-existent target multiple times. This affects iSCSI SAN (Windows Native) Version 6.0, build 2013-01-16.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-400
References: https://www.starwindsoftware.com/security/sw-20[PII_REDACTED]/; https://www.starwindsoftware.com/security/sw-20[PII_REDACTED]/
CVE: CVE-2021-39280
Published: 2022-02-06
Description: Certain Korenix JetWave devices allow authenticated users to execute arbitrary code as root via /syscmd.asp. This affects 2212X before 1.9.1, 2212S before 1.9.1, 2212G before 1.8, 3220 V3 before 1.5.1, 3420 V3 before 1.5.1, and 2311 through 2022-01-31.
CVSS Score: 8.8 (HIGH)
References: http://packetstormsecurity.com/files/165875/Korenix-Technology-JetWave-CSRF-Command-Injection-Missing-Authentication.html; https://www.korenix.com/en/product/search.aspx?kw=JetWave; http://packetstormsecurity.com/files/165875/Korenix-Technology-JetWave-CSRF-Command-Injection-Missing-Authentication.html
CVE: CVE-2021-41816
Published: 2022-02-06
Description: CGI.escape_html in Ruby before 2.7.5 and 3.x before 3.0.3 has an integer overflow and resultant buffer overflow via a long string on platforms (such as Windows) where size_t and long have different numbers of bytes. This also affects the CGI gem before 0.3.1 for Ruby.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://hackerone.com/reports/1328463; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IUXQCH6FRKANCVZO2Q7D2SQX33FP3KWN/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UTOJGS5IEFDK3UOO7IY4OTTFGHGLSWZF/
CVE: CVE-2022-22831
Published: 2022-02-06
Description: An issue was discovered in Servisnet Tessa 0.0.2. An attacker can add a new sysadmin user via a manipulation of the Authorization HTTP header.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://packetstormsecurity.com/files/165863/Servisnet-Tessa-Authentication-Bypass.html; http://www.servisnet.com.tr/en/page/products; https://www.exploit-db.com/exploits/50714
CVE: CVE-2022-22832
Published: 2022-02-06
Description: An issue was discovered in Servisnet Tessa 0.0.2. Authorization data is available via an unauthenticated /data-service/users/ request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-639
References: http://packetstormsecurity.com/files/165873/Servisnet-Tessa-Privilege-Escalation.html; http://www.servisnet.com.tr/en/page/products; https://www.exploit-db.com/exploits/50712
CVE: CVE-2022-24551
Published: 2022-02-06
Description: A flaw was found in StarWind Stack. The endpoint for setting a new password doesn’t check the current username and old password. An attacker could reset any local user password (including system/administrator user) using any available user This affects StarWind SAN and NAS v0.2 build 1633.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: https://www.starwindsoftware.com/security/sw-20[PII_REDACTED]/; https://www.starwindsoftware.com/security/sw-20[PII_REDACTED]/; https://www.starwindsoftware.com/security/sw-20[PII_REDACTED]/
CVE: CVE-2022-24552
Published: 2022-02-06
Description: A flaw was found in the REST API in StarWind Stack. REST command, which manipulates a virtual disk, doesn’t check input parameters. Some of them go directly to bash as part of a script. An attacker with non-root user access can inject arbitrary data into the command that will be executed with root privileges. This affects StarWind SAN and NAS v0.2 build 1633.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://www.starwindsoftware.com/security/sw-20[PII_REDACTED]/; https://www.starwindsoftware.com/security/sw-20[PII_REDACTED]/
CVE: CVE-2022-22833
Published: 2022-02-06
Description: An issue was discovered in Servisnet Tessa 0.0.2. An attacker can obtain sensitive information via a /js/app.js request.
CVSS Score: 7.5 (HIGH)
References: http://packetstormsecurity.com/files/165867/Servisnet-Tessa-MQTT-Credential-Disclosure.html; http://www.servisnet.com.tr/en/page/products; https://pentest.com.tr/exploits/Servisnet-Tessa-MQTT-Credentials-Dump-Unauthenticated.html
CVE: CVE-2022-22680
Published: 2022-02-07
Description: Exposure of sensitive information to an unauthorized actor vulnerability in Web Server in Synology DiskStation Manager (DSM) before 7.0.1-42218-2 allows remote attackers to obtain sensitive information via unspecified vectors.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://www.synology.com/security/advisory/Synology_SA_22_01; https://www.synology.com/security/advisory/Synology_SA_22_01
CVE: CVE-2021-43925
Published: 2022-02-07
Description: Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Log Management functionality in Synology DiskStation Manager (DSM) before 7.0.1-42218-2 allows remote attackers to inject SQL commands via unspecified vectors.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://www.synology.com/security/advisory/Synology_SA_22_01; https://www.synology.com/security/advisory/Synology_SA_22_01
CVE: CVE-2021-43926
Published: 2022-02-07
Description: Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Log Management functionality in Synology DiskStation Manager (DSM) before 7.0.1-42218-2 allows remote attackers to inject SQL commands via unspecified vectors.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://www.synology.com/security/advisory/Synology_SA_22_01; https://www.synology.com/security/advisory/Synology_SA_22_01
CVE: CVE-2021-43927
Published: 2022-02-07
Description: Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Security Management functionality in Synology DiskStation Manager (DSM) before 7.0.1-42218-2 allows remote attackers to inject SQL commands via unspecified vectors.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://www.synology.com/security/advisory/Synology_SA_22_01; https://www.synology.com/security/advisory/Synology_SA_22_01
CVE: CVE-2021-43928
Published: 2022-02-07
Description: Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in mail sending and receiving component in Synology Mail Station before 20[PII_REDACTED]5 allows remote authenticated users to execute arbitrary commands via unspecified vectors.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://www.synology.com/security/advisory/Synology_SA_21_28; https://www.synology.com/security/advisory/Synology_SA_21_28
CVE: CVE-2021-43929
Published: 2022-02-07
Description: Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in work flow management in Synology DiskStation Manager (DSM) before 7.0.1-42218-2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-74, CWE-79
References: https://www.synology.com/security/advisory/Synology_SA_22_01; https://www.synology.com/security/advisory/Synology_SA_22_01
CVE: CVE-2022-22679
Published: 2022-02-07
Description: Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in support service management in Synology DiskStation Manager (DSM) before 7.0.1-42218-2 allows remote authenticated users to write arbitrary files via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://www.synology.com/security/advisory/Synology_SA_22_01; https://www.synology.com/security/advisory/Synology_SA_22_01
CVE: CVE-2022-23184
Published: 2022-02-07
Description: In affected Octopus Server versions when the server HTTP and HTTPS bindings are configured to localhost, Octopus Server will allow open redirects.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://advisories.octopus.com/post/2022/sa2022-02/; https://advisories.octopus.com/post/2022/sa2022-02/
CVE: CVE-2022-0473
Published: 2022-02-07
Description: OTRS administrators can configure dynamic field and inject malicious JavaScript code in the error message of the regular expression check. When used in the agent interface, malicious code might be exectued in the browser. This issue affects: OTRS AG OTRS 7.0.x version: 7.0.31 and prior versions.
CVSS Score: 3.8 (LOW)
CWE: CWE-79, CWE-79
References: https://otrs.com/release-notes/otrs-security-advisory-2022-01/; https://otrs.com/release-notes/otrs-security-advisory-2022-01/
CVE: CVE-2022-0474
Published: 2022-02-07
Description: Full list of recipients from customer users in a contact field could be disclosed in notification emails event when the notification is set to be sent to each recipient individually. This issue affects: OTRS AG OTRSCustomContactFields 8.0.x version: 8.0.11 and prior versions.
CVSS Score: 2.4 (LOW)
CWE: CWE-200, CWE-200
References: https://otrs.com/release-notes/otrs-security-advisory-2022-02/; https://otrs.com/release-notes/otrs-security-advisory-2022-02/
CVE: CVE-2022-23320
Published: 2022-02-07
Description: XMPie uStore 12.3.7244.0 allows for administrators to generate reports based on raw SQL queries. Since the application ships with default administrative credentials, an attacker may authenticate into the application and exfiltrate sensitive information from the database.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://xmpie.com; https://www.linkedin.com/feed/update/urn:li:activity:[PII_REDACTED]450887681?commentUrn=urn%3Ali%3Acomment%3A%28activity%3A[PII_REDACTED]450887681%2C[PII_REDACTED]354192896%29; https://www.triaxiomsecurity.com/xmpie-ustore-vulnerabilities-discovered/
CVE: CVE-2021-46359
Published: 2022-02-07
Description: FISCO-BCOS release-3.0.0-rc2 contains a denial of service vulnerability. Some transactions may not be committed successfully, and malicious users may use this to achieve double-spending attacks.
CVSS Score: 7.5 (HIGH)
References: https://github.com/FISCO-BCOS/FISCO-BCOS/issues/2124; https://github.com/FISCO-BCOS/FISCO-BCOS/issues/2124
CVE: CVE-2021-46389
Published: 2022-02-07
Description: IIPImage High Resolution Streaming Image Server prior to commit 882925b295a80ec992063deffc2a3b0d803c3195 is affected by an integer overflow in iipsrv.fcgi through malformed HTTP query parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://github.com/ruven/iipsrv/commit/4ed59265fbbd636dc2fbbf325f8ea37ed300a6d9; https://github.com/ruven/iipsrv/commit/882925b295a80ec992063deffc2a3b0d803c3195; https://github.com/ruven/iipsrv/commit/4ed59265fbbd636dc2fbbf325f8ea37ed300a6d9
CVE: CVE-2021-24839
Published: 2022-02-07
Description: The SupportCandy WordPress plugin before 2.2.5 does not have authorisation and CSRF checks in its wpsc_tickets AJAX action, which could allow unauthenticated users to call it and delete arbitrary tickets via the set_delete_permanently_bulk_ticket setting_action. Other actions may be affected as well.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862, CWE-862
References: https://wpscan.com/vulnerability/5e6e63c2-2675-4b8d-9b94-c16c525a1a0e; https://wpscan.com/vulnerability/5e6e63c2-2675-4b8d-9b94-c16c525a1a0e
CVE: CVE-2021-24843
Published: 2022-02-07
Description: The SupportCandy WordPress plugin before 2.2.7 does not have CRSF check in its wpsc_tickets AJAX action, which could allow attackers to make a logged in admin call it and delete arbitrary tickets via the set_delete_permanently_bulk_ticket setting_action.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://wpscan.com/vulnerability/b71f53d7-6b9e-458c-8754-576ad2a52f7d; https://wpscan.com/vulnerability/b71f53d7-6b9e-458c-8754-576ad2a52f7d
CVE: CVE-2021-24878
Published: 2022-02-07
Description: The SupportCandy WordPress plugin before 2.2.7 does not sanitise and escape the query string before outputting it back in pages with the [wpsc_create_ticket] shortcode embed, leading to a Reflected Cross-Site Scripting issue
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/d2f1fd60-5e5e-4e38-9559-ba2d14ae37bf; https://wpscan.com/vulnerability/d2f1fd60-5e5e-4e38-9559-ba2d14ae37bf
CVE: CVE-2021-24879
Published: 2022-02-07
Description: The SupportCandy WordPress plugin before 2.2.7 does not have CSRF check in the wpsc_tickets AJAX action, nor has any sanitisation or escaping in some of the filter fields which could allow attackers to make a logged in user having access to the ticket lists dashboard set an arbitrary filter (stored in their cookies) with an XSS payload in it.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://wpscan.com/vulnerability/6dfb4f61-c8cb-40ad-812f-139482be0fb4; https://wpscan.com/vulnerability/6dfb4f61-c8cb-40ad-812f-139482be0fb4
CVE: CVE-2021-24880
Published: 2022-02-07
Description: The SupportCandy WordPress plugin before 2.2.7 does not validate and escape the page attribute of its shortcode, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/09[PII_REDACTED]-4d4f-9450-6f2c2ba058a0; https://wpscan.com/vulnerability/09[PII_REDACTED]-4d4f-9450-6f2c2ba058a0
CVE: CVE-2021-24928
Published: 2022-02-07
Description: The Rearrange Woocommerce Products WordPress plugin before 3.0.8 does not have proper access controls in the save_all_order AJAX action, nor validation and escaping when inserting user data in SQL statement, leading to an SQL injection, and allowing any authenticated user, such as subscriber, to modify arbitrary post content (for example with an XSS payload), as well as exfiltrate any data by copying it to another post.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://wpscan.com/vulnerability/3762a77c-b8c9-428f-877c-bbfd7958e7be; https://wpscan.com/vulnerability/3762a77c-b8c9-428f-877c-bbfd7958e7be
CVE: CVE-2021-24947
Published: 2022-02-07
Description: The RVM WordPress plugin before 6.4.2 does not have proper authorisation, CSRF checks and validation of the rvm_upload_regions_file_path parameter in the rvm_import_regions AJAX action, allowing any authenticated user, such as subscriber, to read arbitrary files on the web server
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863, CWE-352, CWE-434
References: https://wpscan.com/vulnerability/c6bb12b1-6961-40bd-9110-edfa9ee41a18; https://wpscan.com/vulnerability/c6bb12b1-6961-40bd-9110-edfa9ee41a18
CVE: CVE-2021-24993
Published: 2022-02-07
Description: The Ultimate Product Catalog WordPress plugin before 5.0.26 does not have authorisation and CSRF checks in some AJAX actions, which could allow any authenticated users, such as subscriber to call them and add arbitrary products, or change the plugin's settings for example
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862, CWE-352
References: https://plugins.trac.wordpress.org/changeset/2650578; https://wpscan.com/vulnerability/514416fa-d915-4953-bf1b-6dbf40b4d7e5; https://plugins.trac.wordpress.org/changeset/2650578
CVE: CVE-2021-25004
Published: 2022-02-07
Description: The SEUR Oficial WordPress plugin before 1.7.2 creates a PHP file with a random name when installed, even though it is used for support purposes, it allows to download any file from the web server without restriction after knowing the URL and a password than an administrator can see in the plugin settings page.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-552, CWE-552
References: https://wpscan.com/vulnerability/cfbc2b43-b8f8-4bcb-a3d3-39d217afa530; https://wpscan.com/vulnerability/cfbc2b43-b8f8-4bcb-a3d3-39d217afa530
CVE: CVE-2021-25029
Published: 2022-02-07
Description: The CLUEVO LMS, E-Learning Platform WordPress plugin before 1.8.1 does not sanitise and escape Course's module, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/723d0d07-c48b-4fe3-9fb2-7dae3c7d3cfb; https://wpscan.com/vulnerability/723d0d07-c48b-4fe3-9fb2-7dae3c7d3cfb
CVE: CVE-2021-25077
Published: 2022-02-07
Description: The Store Toolkit for WooCommerce WordPress plugin before 2.3.2 does not sanitise and escape the tab parameter before outputting it back in an admin page in an error message, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset/2654503; https://wpscan.com/vulnerability/53868650-aba0-4d07-89d2-a998bb0ee5f6; https://plugins.trac.wordpress.org/changeset/2654503
CVE: CVE-2021-25084
Published: 2022-02-07
Description: The Advanced Cron Manager WordPress plugin before 2.4.2 and Advanced Cron Manager Pro WordPress plugin before 2.5.3 do not have authorisation checks in some of their AJAX actions, allowing any authenticated users, such as subscriber to call them and add or remove events as well as schedules for example
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://wpscan.com/vulnerability/7c5c602f-499f-431b-80bc-507053984a06; https://wpscan.com/vulnerability/7c5c602f-499f-431b-80bc-507053984a06
CVE: CVE-2021-25095
Published: 2022-02-07
Description: The IP2Location Country Blocker WordPress plugin before 2.26.5 does not have authorisation and CSRF checks in the ip2location_country_blocker_save_rules AJAX action, allowing any authenticated users, such as subscriber to call it and block arbitrary country, or block all of them at once, preventing users from accessing the frontend.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352, CWE-862, CWE-352, CWE-862
References: https://plugins.trac.wordpress.org/changeset/2652469; https://wpscan.com/vulnerability/cbfa7211-ac1f-4cf2-bd79-ebce2fc4baa1; https://plugins.trac.wordpress.org/changeset/2652469