rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-24455 Tutor LMS < 1.9.2 - Authenticated Stored Cross-Site Scripting (XSS)
The Tutor LMS – eLearning and online course solution WordPress plugin before 1.9.2 did not escape the Summary field of Announcements (when outputting it in an attribute), which can be created by users as low as Tutor Instructor. This lead to a Stored Cross-Site Scripting issue, which is triggered when viewing the Announcements list, and could result in privilege escalation when viewed by an admin.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Unknown
product: Tutor LMS – eLearning and online course solution
Credits: lang: en
value: Phu Tran from techlabcorp.com
Published: 2021-08-02T10:32:01.000Z
CVE-2021-24456 Quiz Maker < 6.2.0.9 - Multiple Authenticated Blind SQL Injections
The Quiz Maker WordPress plugin before 6.2.0.9 did not properly sanitise and escape the order and orderby parameters before using them in SQL statements, leading to SQL injection issues in the admin dashboard
Problem types: cwe_id: CWE-89
description: CWE-89 SQL Injection
Affected products: vendor: Ays Pro
product: Quiz Maker
Credits: lang: en
value: To Quang Duong
Published: 2021-08-02T10:32:02.000Z
CVE-2021-24457 Portfolio Responsive Gallery < 1.1.8 - Authenticated Blind SQL Injections
The get_portfolios() and get_portfolio_attributes() functions in the class-portfolio-responsive-gallery-list-table.php and class-portfolio-responsive-gallery-attributes-list-table.php files of the Portfolio Responsive Gallery WordPress plugin before 1.1.8 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard
Problem types: cwe_id: CWE-89
description: CWE-89 SQL Injection
Affected products: vendor: Ays Pro
product: Portfolio Responsive Gallery
Credits: lang: en
value: To Quang Duong
Published: 2021-08-02T10:32:03.000Z
CVE-2021-24458 Popup box < 2.3.4 - Authenticated Blind SQL Injections
The get_ays_popupboxes() and get_popup_categories() functions of the Popup box WordPress plugin before 2.3.4 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard
Problem types: cwe_id: CWE-89
description: CWE-89 SQL Injection
Affected products: vendor: Ays Pro
product: Popup box
Credits: lang: en
value: To Quang Duong
Published: 2021-08-02T10:32:03.000Z
CVE-2021-24459 Survey Maker < 1.5.6 - Authenticated Blind SQL Injections
The get_results() and get_items() functions in the Survey Maker WordPress plugin before 1.5.6 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard
Problem types: cwe_id: CWE-89
description: CWE-89 SQL Injection
Affected products: vendor: Ays Pro
product: Survey Maker
Credits: lang: en
value: To Quang Duong
Published: 2021-08-02T10:32:04.000Z
CVE-2021-24460 Popup Like box - Page Plugin < 3.5.3 - Authenticated Blind SQL Injections
The get_fb_likeboxes() function in the Popup Like box – Page Plugin WordPress plugin before 3.5.3 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard
Problem types: cwe_id: CWE-89
description: CWE-89 SQL Injection
Affected products: vendor: Ays Pro
product: Popup Like box – Page Plugin
Credits: lang: en
value: To Quang Duong
Published: 2021-08-02T10:32:06.000Z
CVE-2021-24461 FAQ Builder < 1.3.6 - Authenticated Blind SQL Injections
The get_faqs() function in the FAQ Builder AYS WordPress plugin before 1.3.6 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard
Problem types: cwe_id: CWE-89
description: CWE-89 SQL Injection
Affected products: vendor: Ays Pro
product: FAQ Builder AYS
Credits: lang: en
value: To Quang Duong
Published: 2021-08-02T10:32:07.000Z
CVE-2021-24462 Photo Gallery by Ays - Responsive Image Gallery < 4.4.4 - Authenticated Blind SQL Injections
The get_gallery_categories() and get_galleries() functions in the Photo Gallery by Ays – Responsive Image Gallery WordPress plugin before 4.4.4 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard
Problem types: cwe_id: CWE-89
description: CWE-89 SQL Injection
Affected products: vendor: Ays Pro
product: Photo Gallery by Ays – Responsive Image Gallery
Credits: lang: en
value: To Quang Duong
Published: 2021-08-02T10:32:08.000Z
CVE-2021-24463 Image Slider by Ays - Responsive Slider and Carousel < 2.5.0 - Authenticated Blind SQL Injection
The get_sliders() function in the Image Slider by Ays- Responsive Slider and Carousel WordPress plugin before 2.5.0 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard
Problem types: cwe_id: CWE-89
description: CWE-89 SQL Injection
Affected products: vendor: Ays Pro
product: Image Slider by Ays- Responsive Slider and Carousel
Credits: lang: en
value: To Quang Duong
Published: 2021-08-02T10:32:09.000Z
CVE-2021-24464 YouTube Embed, Playlist and Popup < 2.3.9 - Contributor+ Stored XSS
The YouTube Embed, Playlist and Popup by WpDevArt WordPress plugin before 2.3.9 did not escape, validate or sanitise some of its shortcode options, available to users with a role as low as Contributor, leading to an authenticated Stored Cross-Site Scripting issue.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Unknown
product: YouTube Embed, Playlist and Popup by WpDevArt
Credits: lang: en
value: apple502j
Published: 2021-08-02T10:32:10.000Z
CVE-2021-24465 Meow Gallery < 4.1.9 - Contributor+ SQL Injection
The Meow Gallery WordPress plugin before 4.1.9 does not sanitise, validate or escape the ids attribute of its gallery shortcode (available for users as low as Contributor) before using it in an SQL statement, leading to an authenticated SQL Injection issue. The injection also allows the returned values to be manipulated in a way that could lead to data disclosure and arbitrary objects to be deserialized.
Problem types: cwe_id: CWE-89
description: CWE-89 SQL Injection
Affected products: vendor: Unknown
product: Meow Gallery (+ Gallery Block)
Credits: lang: en
value: apple502j
Published: 2021-10-04T11:20:15.000Z
CVE-2021-24466 Verse-O-Matic <= 4.1.1 - CSRF to Stored XSS
The Verse-O-Matic WordPress plugin through 4.1.1 does not have any CSRF checks in place, allowing attackers to make logged in administrators do unwanted actions, such as add/edit/delete arbitrary verses and change the settings. Due to the lack of sanitisation in the settings and verses, this could also lead to Stored Cross-Site Scripting issues
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
cwe_id: CWE-352
description: CWE-352 Cross-Site Request Forgery (CSRF)
Affected products: vendor: Unknown
product: Verse-O-Matic
Credits: lang: en
value: Ajay Sandipan Thorbole
Published: 2021-08-16T10:48:21.000Z
CVE-2021-24467 Leaflet Map < 3.0.0 - Arbitrary Settings Update via CSRF Leading to Stored XSS
The Leaflet Map WordPress plugin before 3.0.0 does not verify the CSRF nonce when saving its settings, which allows attackers to make a logged in admin update the settings via a Cross-Site Request Forgery attack. This could lead to Cross-Site Scripting issues by either changing the URL of the JavaScript library being used, or using malicious attributions which will be executed in all page with an embed map from the plugin
Problem types: cwe_id: CWE-352
description: CWE-352 Cross-Site Request Forgery (CSRF)
cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Unknown
product: Leaflet Map
Credits: lang: en
value: apple502j
Published: 2021-08-09T10:04:05.000Z
CVE-2021-24468 Leaflet Map < 3.0.0 - Contributor+ Stored XSS
The Leaflet Map WordPress plugin before 3.0.0 does not escape some shortcode attributes before they are used in JavaScript code or HTML, which could allow users with a role as low as Contributors to exploit stored XSS issues
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Unknown
product: Leaflet Map
Credits: lang: en
value: apple502j
Published: 2021-08-02T10:32:11.000Z
CVE-2021-24470 Yada Wiki < 3.4.1 - Contributor+ Stored XSS
The Yada Wiki WordPress plugin before 3.4.1 did not sanitise, validate or escape the anchor attribute of its shortcode, leading to a Stored Cross-Site Scripting issue
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Unknown
product: Yada Wiki
Credits: lang: en
value: apple502j
Published: 2021-08-02T10:32:12.000Z
CVE-2021-24471 YouTube Embed < 5.2.2 - Contributor+ Stored XSS
The YouTube Embed WordPress plugin before 5.2.2 does not validate, escape or sanitise some of its shortcode attributes, leading to Stored XSS issues by 1. using w, h, controls, cc_lang, color, language, start, stop, or style parameter of youtube shortcode, 2. by using style, class, rel, target, width, height, or alt parameter of youtube_thumb shortcode, or 3. by embedding a video whose title or description contains XSS payload (if API key is configured).
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Unknown
product: YouTube Embed
Credits: lang: en
value: apple502j
Published: 2021-08-16T10:48:22.000Z
CVE-2021-24472 Onair2 < 3.9.9.2 & KenthaRadio < 2.0.2 - Unauthenticated RFI and SSRF
The OnAir2 WordPress theme before 3.9.9.2 and QT KenthaRadio WordPress plugin before 2.0.2 have exposed proxy functionality to unauthenticated users, sending requests to this proxy functionality will have the web server fetch and display the content from any URI, this would allow for SSRF (Server Side Request Forgery) and RFI (Remote File Inclusion) vulnerabilities on the website.
Problem types: cwe_id: CWE-918
description: CWE-918 Server-Side Request Forgery (SSRF)
Affected products: vendor: QantumThemes
product: QT KenthaRadio
vendor: QantumThemes
product: OnAir2
Credits: lang: en
value: Andreas Klöbl
Published: 2021-08-02T10:32:13.000Z
CVE-2021-24473 User Profile Picture < 2.6.0 - Arbitrary User Picture Change/Deletion via IDOR
The User Profile Picture WordPress plugin before 2.6.0 was affected by an IDOR issue, allowing users with the upload_image capability (by default author and above) to change and delete the profile pictures of other users (including those with higher roles).
Problem types: cwe_id: CWE-639
description: CWE-639 Authorization Bypass Through User-Controlled Key
Affected products: vendor: Unknown
product: User Profile Picture
Credits: lang: en
value: apple502j
Published: 2021-08-02T10:32:14.000Z
CVE-2021-24474 Awesome Weather Widget <= 3.0.2 - Reflected Cross-site Scripting (XSS)
The Awesome Weather Widget WordPress plugin through 3.0.2 does not sanitize the id parameter of its awesome_weather_refresh AJAX action, leading to an unauthenticated Reflected Cross-Site Scripting (XSS) Vulnerability.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Unknown
product: Awesome Weather Widget
Credits: lang: en
value: Truoc Phan
Published: 2021-08-02T10:32:15.000Z
CVE-2021-24476 Steam Group Viewer <= 2.1 - Authenticated Stored Cross-Site Scripting (XSS)
The Steam Group Viewer WordPress plugin through 2.1 does not sanitise or escape its "Steam Group Address" settings before outputting it in the page, leading to an authenticated Stored Cross-Site Scripting issue
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Unknown
product: Steam Group Viewer
Credits: lang: en
value: kishore hariram
Published: 2021-08-02T10:32:16.000Z
CVE-2021-24477 Migrate Users <= 1.0.1 - CSRF to Stored Cross-Site Scripting (XSS)
The Migrate Users WordPress plugin through 1.0.1 does not sanitise or escape its Delimiter option before outputting in a page, leading to a Stored Cross-Site Scripting issue. Furthermore, the plugin does not have CSRF check in place when saving its options, allowing the issue to be exploited via a CSRF attack.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
cwe_id: CWE-352
description: CWE-352 Cross-Site Request Forgery (CSRF)
Affected products: vendor: Unknown
product: Migrate Users
Credits: lang: en
value: ABISHEIK M
Published: 2021-08-02T10:32:17.000Z
CVE-2021-24478 Bookshelf <= 2.0.4 - Authenticated Stored Cross-Site Scripting (XSS)
The Bookshelf WordPress plugin through 2.0.4 does not sanitise or escape its "Paypal email address" setting before outputting it in the page, leading to an authenticated Stored Cross-Site Scripting issue
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Unknown
product: Bookshelf
Credits: lang: en
value: ABISHEIK M
Published: 2021-08-02T10:32:18.000Z
CVE-2021-24479 DrawBlog <= 0.90 - Authenticated Stored Cross-Site Scripting (XSS)
The DrawBlog WordPress plugin through 0.90 does not sanitise or validate some of its settings before outputting them back in the page, leading to an authenticated stored Cross-Site Scripting issue
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Unknown
product: DrawBlog
Credits: lang: en
value: ABISHEIK M
Published: 2021-08-02T10:32:19.000Z
CVE-2021-24480 Event Geek <= 2.5.2 - Stored Cross-site Scripting (XSS)
The Event Geek WordPress plugin through 2.5.2 does not sanitise or escape its "Use your own " setting before outputting it in the page, leading to an authenticated (admin+) stored Cross-Site Scripting issue
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Unknown
product: Event Geek
Credits: lang: en
value: ABISHEIK M
Published: 2021-08-02T10:32:20.000Z
CVE-2021-24481 Any Hostname <= 1.0.6 - Authenticated Stored Cross-Site Scripting (XSS)
The Any Hostname WordPress plugin through 1.0.6 does not sanitise or escape its "Allowed hosts" setting, leading to an authenticated stored XSS issue as high privilege users are able to set XSS payloads in it
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Unknown
product: Any Hostname
Credits: lang: en
value: ABISHEIK M
Published: 2021-08-02T10:32:21.000Z
CVE-2021-24482 Related Posts for WordPress <= 2.0.4 - Authenticated Stored XSS & XFS
The Related Posts for WordPress plugin through 2.0.4 does not sanitise its heading_text and CSS settings, allowing high privilege users (admin) to set XSS payloads in them, leading to Stored Cross-Site Scripting issues.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Unknown
product: Related Posts for WordPress
Credits: lang: en
value: m0ze
Published: 2021-07-19T10:53:19.000Z
CVE-2021-24483 Poll Maker < 3.2.1 - Authenticated Blind SQL Injections
The get_poll_categories(), get_polls() and get_reports() functions in the Poll Maker WordPress plugin before 3.2.1 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard
Problem types: cwe_id: CWE-89
description: CWE-89 SQL Injection
Affected products: vendor: Ays Pro
product: Poll Maker
Credits: lang: en
value: To Quang Duong
Published: 2021-08-02T10:32:22.000Z
CVE-2021-24484 Secure Copy Content Protection and Content Locking < 2.6.7 - Authenticated Blind SQL Injections
The get_reports() function in the Secure Copy Content Protection and Content Locking WordPress plugin before 2.6.7 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard
Problem types: cwe_id: CWE-89
description: CWE-89 SQL Injection
Affected products: vendor: Ays Pro
product: Secure Copy Content Protection and Content Locking
Credits: lang: en
value: To Quang Duong
Published: 2021-08-02T10:32:23.000Z
CVE-2021-24485 Special Text Boxes < 5.9.110 - Admin+ Stored Cross-Site Scripting
The Special Text Boxes WordPress plugin before 5.9.110 does not sanitise or escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Unknown
product: Special Text Boxes
Credits: lang: en
value: Akash Rajendra Patil
Published: 2021-10-25T13:20:35.000Z
CVE-2021-24486 Simple Social Media Share Buttons < 3.2.3 - Contributor+ Stored XSS
The Simple Social Media Share Buttons – Social Sharing for Everyone WordPress plugin before 3.2.3 did not escape the align and like_button_size parameters of its SSB shortcode, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Unknown
product: Simple Social Media Share Buttons – Social Sharing for Everyone
Credits: lang: en
value: apple502j
Published: 2021-08-23T11:09:56.000Z
CVE-2021-24487 St Daily Tip <= 4.7 - CSRF to Stored Cross-Site Scripting
The St-Daily-Tip WordPress plugin through 4.7 does not have any CSRF check in place when saving its 'Default Text to Display if no tips' setting, and was also lacking sanitisation as well as escaping before outputting it the page. This could allow attacker to make logged in administrators set a malicious payload in it, leading to a Stored Cross-Site Scripting issue
Problem types: cwe_id: CWE-352
description: CWE-352 Cross-Site Request Forgery (CSRF)
cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Unknown
product: St-Daily-Tip
Credits: lang: en
value: Akash Rajendra Patil
Published: 2021-10-25T13:20:36.000Z
CVE-2021-24488 Post Grid < 2.1.8 - Reflected Cross-Site Scripting (XSS)
The slider import search feature and tab parameter of the Post Grid WordPress plugin before 2.1.8 settings are not properly sanitised before being output back in the pages, leading to Reflected Cross-Site Scripting issues
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Unknown
product: Post Grid
Credits: lang: en
value: 0xB9
Published: 2021-08-02T10:32:25.000Z
CVE-2021-24489 Request a Quote < 2.3.9 - Admin+ Stored Cross-Site Scripting
The Request a Quote WordPress plugin before 2.3.9 does not sanitise, validate or escape some of its settings in the admin dashboard, leading to authenticated Stored Cross-Site Scripting issues even when the unfiltered_html capability is disallowed.
Problem types: description: CWE-79 Cross-Site Scripting (XSS)
Affected products: vendor: Unknown
product: Request a Quote
default_status: unaffected
Credits: lang: en
value: WPScan
Published: 2021-10-25T13:20:38.000Z
CVE-2021-24490 Email Artillery <= 4.1 - Arbitrary File Upload
The Email Artillery (MASS EMAIL) WordPress plugin through 4.1 does not properly check the uploaded files from the Import Emails feature, allowing arbitrary files to be uploaded. Furthermore, the plugin is also lacking any CSRF check, allowing such issue to be exploited via a CSRF attack as well. However, due to the presence of a .htaccess, denying access to everything in the folder the file is uploaded to, the malicious uploaded file will only be accessible on Web Servers such as Nginx/IIS
Problem types: cwe_id: CWE-434
description: CWE-434 Unrestricted Upload of File with Dangerous Type
cwe_id: CWE-352
description: CWE-352 Cross-Site Request Forgery (CSRF)
Affected products: vendor: Unknown
product: Email Artillery (MASS EMAIL)
Credits: lang: en
value: Jin Huang
Published: 2021-09-13T17:56:16.000Z
CVE-2021-24491 Fileviewer <= 2.2 - Arbitrary File Upload/Deletion via CSRF
The Fileviewer WordPress plugin through 2.2 does not have CSRF checks in place when performing actions such as upload and delete files. As a result, attackers could make a logged in administrator delete and upload arbitrary files via a CSRF attack
Problem types: cwe_id: CWE-352
description: CWE-352 Cross-Site Request Forgery (CSRF)
Affected products: vendor: Unknown
product: Fileviewer
Credits: lang: en
value: Jin Huang
Published: 2021-09-13T17:56:17.000Z
CVE-2021-24492 Handsome Testimonials & Reviews < 2.1.1 - Authenticated (Subscriber+) SQL Injection
The hndtst_action_instance_callback AJAX call of the Handsome Testimonials & Reviews WordPress plugin before 2.1.1, available to any authenticated users, does not sanitise, validate or escape the hndtst_previewShortcodeInstanceId POST parameter before using it in a SQL statement, leading to an SQL Injection issue.
Problem types: cwe_id: CWE-89
description: CWE-89 SQL Injection
Affected products: vendor: Unknown
product: Handsome Testimonials & Reviews
Credits: lang: en
value: Shreya Pohekar of Codevigilant Project
Published: 2021-08-02T10:32:26.000Z
CVE-2021-24493 Shopp eCommerce <= 1.4 - Unauthenticated Arbitrary File Upload
The shopp_upload_file AJAX action of the Shopp WordPress plugin through 1.4, available to both unauthenticated and authenticated user does not have any security measure in place to prevent upload of malicious files, such as PHP, allowing unauthenticated users to upload arbitrary files and leading to RCE
Problem types: cwe_id: CWE-434
description: CWE-434 Unrestricted Upload of File with Dangerous Type
Affected products: vendor: Unknown
product: Shopp
Credits: lang: en
value: Fellipe Oliveira (h3v0x)
Published: 2021-09-13T17:56:19.000Z
CVE-2021-24494 WP Offload SES Lite < 1.4.5 - Stored Cross-Site Scripting (XSS)
The WP Offload SES Lite WordPress plugin before 1.4.5 did not escape some of the fields in the Activity page of the admin dashboard, such as the email's id, subject and recipient, which could lead to Stored Cross-Site Scripting issues when an attacker can control any of these fields, like the subject when filling a contact form for example. The XSS will be executed in the context of a logged in admin viewing the Activity tab of the plugin.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Delicious Brains
product: WP Offload SES Lite
Credits: lang: en
value: Ionut Morosan
Published: 2021-07-06T11:03:35.000Z
CVE-2021-24495 Marmoset Viewer < 1.9.3 - Reflected Cross Site Scripting
The Marmoset Viewer WordPress plugin before 1.9.3 does not property sanitize, validate or escape the 'id' parameter before outputting back in the page, leading to a reflected Cross-Site Scripting issue.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Unknown
product: Marmoset Viewer
Credits: lang: en
value: John Jackson
Published: 2021-08-09T10:04:06.000Z
CVE-2021-24496 Community Event < 1.4.8 - Reflected Cross-Site Scripting (XSS)
The Community Events WordPress plugin before 1.4.8 does not sanitise, validate or escape its importrowscount and successimportcount GET parameters before outputting them back in an admin page, leading to a reflected Cross-Site Scripting issue which will be executed in the context of a logged in administrator
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Unknown
product: Community Events
Credits: lang: en
value: iohex
Published: 2021-08-02T10:32:27.000Z