diff --git a/advisories/unreviewed/2024/11/GHSA-36q8-mfw8-2m98/GHSA-36q8-mfw8-2m98.json b/advisories/unreviewed/2024/11/GHSA-36q8-mfw8-2m98/GHSA-36q8-mfw8-2m98.json new file mode 100644 index 00000000000..638daef3bde --- /dev/null +++ b/advisories/unreviewed/2024/11/GHSA-36q8-mfw8-2m98/GHSA-36q8-mfw8-2m98.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-36q8-mfw8-2m98", + "modified": "2024-11-06T06:30:31Z", + "published": "2024-11-06T06:30:31Z", + "aliases": [ + "CVE-2024-7879" + ], + "details": "The WP ULike WordPress plugin before 4.7.5 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7879" + }, + { + "type": "WEB", + "url": "https://wpscan.com/vulnerability/5ad1c40a-5e13-40b6-8652-c23a1f39abc2" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-11-06T06:15:03Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/11/GHSA-qx29-vw3w-p54v/GHSA-qx29-vw3w-p54v.json b/advisories/unreviewed/2024/11/GHSA-qx29-vw3w-p54v/GHSA-qx29-vw3w-p54v.json new file mode 100644 index 00000000000..4da8a2057d1 --- /dev/null +++ b/advisories/unreviewed/2024/11/GHSA-qx29-vw3w-p54v/GHSA-qx29-vw3w-p54v.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-qx29-vw3w-p54v", + "modified": "2024-11-06T06:30:31Z", + "published": "2024-11-06T06:30:31Z", + "aliases": [ + "CVE-2024-9934" + ], + "details": "The Wp-ImageZoom WordPress plugin through 1.1.0 does not sanitise and escape some parameters before outputting them back in a page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9934" + }, + { + "type": "WEB", + "url": "https://wpscan.com/vulnerability/53e640a7-833e-40de-93d4-acea28aff5a5" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-11-06T06:15:03Z" + } +} \ No newline at end of file