From de61db4a2776231002438aeaa98f2d375303d6f8 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Wed, 8 May 2024 12:31:59 +0000 Subject: [PATCH] Publish Advisories GHSA-36fq-6c6v-89gr GHSA-4jgh-ccrr-4j7m GHSA-5448-w7jg-46r7 GHSA-5chv-gxjv-3g37 GHSA-7265-32xx-ffhx GHSA-8hff-rh3f-34cf GHSA-977m-qww6-wq3m GHSA-9r24-p34x-4vw4 GHSA-9w2f-jxpx-pgrg GHSA-cmhw-5vpw-rf3m GHSA-f5m7-q8r9-6vjc GHSA-h792-8vm9-jc6v GHSA-j475-m78p-24gm GHSA-j7mf-5rmr-fgp9 GHSA-p3gf-2fvj-hmp2 GHSA-p3vf-x6xc-g2vh GHSA-p739-4cwq-2f8j GHSA-rfgj-8gwg-qp4f GHSA-rjfr-66h4-5wqf GHSA-v863-wq9j-pjg4 GHSA-wpgr-gpcm-6xw3 GHSA-wq56-88x3-qc5r GHSA-x24r-c8j9-5ghx --- .../GHSA-36fq-6c6v-89gr.json | 38 ++++++++++++++ .../GHSA-4jgh-ccrr-4j7m.json | 38 ++++++++++++++ .../GHSA-5448-w7jg-46r7.json | 38 ++++++++++++++ .../GHSA-5chv-gxjv-3g37.json | 50 +++++++++++++++++++ .../GHSA-7265-32xx-ffhx.json | 38 ++++++++++++++ .../GHSA-8hff-rh3f-34cf.json | 38 ++++++++++++++ .../GHSA-977m-qww6-wq3m.json | 42 ++++++++++++++++ .../GHSA-9r24-p34x-4vw4.json | 38 ++++++++++++++ .../GHSA-9w2f-jxpx-pgrg.json | 38 ++++++++++++++ .../GHSA-cmhw-5vpw-rf3m.json | 42 ++++++++++++++++ .../GHSA-f5m7-q8r9-6vjc.json | 38 ++++++++++++++ .../GHSA-h792-8vm9-jc6v.json | 38 ++++++++++++++ .../GHSA-j475-m78p-24gm.json | 38 ++++++++++++++ .../GHSA-j7mf-5rmr-fgp9.json | 38 ++++++++++++++ .../GHSA-p3gf-2fvj-hmp2.json | 38 ++++++++++++++ .../GHSA-p3vf-x6xc-g2vh.json | 38 ++++++++++++++ .../GHSA-p739-4cwq-2f8j.json | 38 ++++++++++++++ .../GHSA-rfgj-8gwg-qp4f.json | 38 ++++++++++++++ .../GHSA-rjfr-66h4-5wqf.json | 38 ++++++++++++++ .../GHSA-v863-wq9j-pjg4.json | 38 ++++++++++++++ .../GHSA-wpgr-gpcm-6xw3.json | 38 ++++++++++++++ .../GHSA-wq56-88x3-qc5r.json | 38 ++++++++++++++ .../GHSA-x24r-c8j9-5ghx.json | 38 ++++++++++++++ 23 files changed, 894 insertions(+) create mode 100644 advisories/unreviewed/2024/05/GHSA-36fq-6c6v-89gr/GHSA-36fq-6c6v-89gr.json create mode 100644 advisories/unreviewed/2024/05/GHSA-4jgh-ccrr-4j7m/GHSA-4jgh-ccrr-4j7m.json create mode 100644 advisories/unreviewed/2024/05/GHSA-5448-w7jg-46r7/GHSA-5448-w7jg-46r7.json create mode 100644 advisories/unreviewed/2024/05/GHSA-5chv-gxjv-3g37/GHSA-5chv-gxjv-3g37.json create mode 100644 advisories/unreviewed/2024/05/GHSA-7265-32xx-ffhx/GHSA-7265-32xx-ffhx.json create mode 100644 advisories/unreviewed/2024/05/GHSA-8hff-rh3f-34cf/GHSA-8hff-rh3f-34cf.json create mode 100644 advisories/unreviewed/2024/05/GHSA-977m-qww6-wq3m/GHSA-977m-qww6-wq3m.json create mode 100644 advisories/unreviewed/2024/05/GHSA-9r24-p34x-4vw4/GHSA-9r24-p34x-4vw4.json create mode 100644 advisories/unreviewed/2024/05/GHSA-9w2f-jxpx-pgrg/GHSA-9w2f-jxpx-pgrg.json create mode 100644 advisories/unreviewed/2024/05/GHSA-cmhw-5vpw-rf3m/GHSA-cmhw-5vpw-rf3m.json create mode 100644 advisories/unreviewed/2024/05/GHSA-f5m7-q8r9-6vjc/GHSA-f5m7-q8r9-6vjc.json create mode 100644 advisories/unreviewed/2024/05/GHSA-h792-8vm9-jc6v/GHSA-h792-8vm9-jc6v.json create mode 100644 advisories/unreviewed/2024/05/GHSA-j475-m78p-24gm/GHSA-j475-m78p-24gm.json create mode 100644 advisories/unreviewed/2024/05/GHSA-j7mf-5rmr-fgp9/GHSA-j7mf-5rmr-fgp9.json create mode 100644 advisories/unreviewed/2024/05/GHSA-p3gf-2fvj-hmp2/GHSA-p3gf-2fvj-hmp2.json create mode 100644 advisories/unreviewed/2024/05/GHSA-p3vf-x6xc-g2vh/GHSA-p3vf-x6xc-g2vh.json create mode 100644 advisories/unreviewed/2024/05/GHSA-p739-4cwq-2f8j/GHSA-p739-4cwq-2f8j.json create mode 100644 advisories/unreviewed/2024/05/GHSA-rfgj-8gwg-qp4f/GHSA-rfgj-8gwg-qp4f.json create mode 100644 advisories/unreviewed/2024/05/GHSA-rjfr-66h4-5wqf/GHSA-rjfr-66h4-5wqf.json create mode 100644 advisories/unreviewed/2024/05/GHSA-v863-wq9j-pjg4/GHSA-v863-wq9j-pjg4.json create mode 100644 advisories/unreviewed/2024/05/GHSA-wpgr-gpcm-6xw3/GHSA-wpgr-gpcm-6xw3.json create mode 100644 advisories/unreviewed/2024/05/GHSA-wq56-88x3-qc5r/GHSA-wq56-88x3-qc5r.json create mode 100644 advisories/unreviewed/2024/05/GHSA-x24r-c8j9-5ghx/GHSA-x24r-c8j9-5ghx.json diff --git a/advisories/unreviewed/2024/05/GHSA-36fq-6c6v-89gr/GHSA-36fq-6c6v-89gr.json b/advisories/unreviewed/2024/05/GHSA-36fq-6c6v-89gr/GHSA-36fq-6c6v-89gr.json new file mode 100644 index 00000000000..496540c6b40 --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-36fq-6c6v-89gr/GHSA-36fq-6c6v-89gr.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-36fq-6c6v-89gr", + "modified": "2024-05-08T12:30:34Z", + "published": "2024-05-08T12:30:34Z", + "aliases": [ + "CVE-2024-34553" + ], + "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Select-Themes Stockholm Core allows Reflected XSS.This issue affects Stockholm Core: from n/a through 2.4.1.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34553" + }, + { + "type": "WEB", + "url": "https://patchstack.com/database/vulnerability/stockholm-core/wordpress-stockholm-core-plugin-2-4-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-08T12:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/05/GHSA-4jgh-ccrr-4j7m/GHSA-4jgh-ccrr-4j7m.json b/advisories/unreviewed/2024/05/GHSA-4jgh-ccrr-4j7m/GHSA-4jgh-ccrr-4j7m.json new file mode 100644 index 00000000000..621daf45a11 --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-4jgh-ccrr-4j7m/GHSA-4jgh-ccrr-4j7m.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-4jgh-ccrr-4j7m", + "modified": "2024-05-08T12:30:33Z", + "published": "2024-05-08T12:30:32Z", + "aliases": [ + "CVE-2024-34571" + ], + "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGrill Himalayas allows Stored XSS.This issue affects Himalayas: from n/a through 1.3.0.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34571" + }, + { + "type": "WEB", + "url": "https://patchstack.com/database/vulnerability/himalayas/wordpress-himalayas-theme-1-3-0-cross-site-scripting-xss-vulnerability?_s_id=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-08T10:15:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/05/GHSA-5448-w7jg-46r7/GHSA-5448-w7jg-46r7.json b/advisories/unreviewed/2024/05/GHSA-5448-w7jg-46r7/GHSA-5448-w7jg-46r7.json new file mode 100644 index 00000000000..2374befce53 --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-5448-w7jg-46r7/GHSA-5448-w7jg-46r7.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-5448-w7jg-46r7", + "modified": "2024-05-08T12:30:33Z", + "published": "2024-05-08T12:30:33Z", + "aliases": [ + "CVE-2024-34568" + ], + "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeqx LetterPress allows Stored XSS.This issue affects LetterPress: from n/a through 1.2.1.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34568" + }, + { + "type": "WEB", + "url": "https://patchstack.com/database/vulnerability/letterpress/wordpress-letterpress-newsletter-plugin-1-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-08T11:15:25Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/05/GHSA-5chv-gxjv-3g37/GHSA-5chv-gxjv-3g37.json b/advisories/unreviewed/2024/05/GHSA-5chv-gxjv-3g37/GHSA-5chv-gxjv-3g37.json new file mode 100644 index 00000000000..0d376b635d8 --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-5chv-gxjv-3g37/GHSA-5chv-gxjv-3g37.json @@ -0,0 +1,50 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-5chv-gxjv-3g37", + "modified": "2024-05-08T12:30:34Z", + "published": "2024-05-08T12:30:34Z", + "aliases": [ + "CVE-2024-4644" + ], + "details": "A vulnerability has been found in SourceCodester Prison Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /Employee/changepassword.php. The manipulation of the argument txtold_password/txtnew_password/txtconfirm_password leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263488.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4644" + }, + { + "type": "WEB", + "url": "https://github.com/yylmm/CVE/blob/main/Prison%20Management%20System/xss3.md" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.263488" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.263488" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.330021" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-08T12:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/05/GHSA-7265-32xx-ffhx/GHSA-7265-32xx-ffhx.json b/advisories/unreviewed/2024/05/GHSA-7265-32xx-ffhx/GHSA-7265-32xx-ffhx.json new file mode 100644 index 00000000000..8aa2044b508 --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-7265-32xx-ffhx/GHSA-7265-32xx-ffhx.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-7265-32xx-ffhx", + "modified": "2024-05-08T12:30:34Z", + "published": "2024-05-08T12:30:34Z", + "aliases": [ + "CVE-2024-34560" + ], + "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GOMO gee Search Plus allows Stored XSS.This issue affects gee Search Plus: from n/a through 1.4.4.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34560" + }, + { + "type": "WEB", + "url": "https://patchstack.com/database/vulnerability/gsearch-plus/wordpress-gee-search-plus-plugin-1-4-4-cross-site-scripting-xss-vulnerability?_s_id=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-08T12:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/05/GHSA-8hff-rh3f-34cf/GHSA-8hff-rh3f-34cf.json b/advisories/unreviewed/2024/05/GHSA-8hff-rh3f-34cf/GHSA-8hff-rh3f-34cf.json new file mode 100644 index 00000000000..6fbb805faaa --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-8hff-rh3f-34cf/GHSA-8hff-rh3f-34cf.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-8hff-rh3f-34cf", + "modified": "2024-05-08T12:30:34Z", + "published": "2024-05-08T12:30:34Z", + "aliases": [ + "CVE-2024-34558" + ], + "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 WOLF allows Stored XSS.This issue affects WOLF: from n/a through 1.0.8.2.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34558" + }, + { + "type": "WEB", + "url": "https://patchstack.com/database/vulnerability/bulk-editor/wordpress-wolf-wordpress-posts-bulk-editor-and-manager-professional-plugin-1-0-8-2-cross-site-scripting-xss-vulnerability?_s_id=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-08T12:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/05/GHSA-977m-qww6-wq3m/GHSA-977m-qww6-wq3m.json b/advisories/unreviewed/2024/05/GHSA-977m-qww6-wq3m/GHSA-977m-qww6-wq3m.json new file mode 100644 index 00000000000..09ec1637035 --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-977m-qww6-wq3m/GHSA-977m-qww6-wq3m.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-977m-qww6-wq3m", + "modified": "2024-05-08T12:30:33Z", + "published": "2024-05-08T12:30:33Z", + "aliases": [ + "CVE-2024-4135" + ], + "details": "The WP Latest Posts plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.0.7. This is due to the plugin allowing users to execute an action that does not properly validate a user-supplied value prior to using that value in a call to do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4135" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset/3081119/wp-latest-posts" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/57d90ba7-b655-4655-981c-548ff96c3bb7?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-08T10:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/05/GHSA-9r24-p34x-4vw4/GHSA-9r24-p34x-4vw4.json b/advisories/unreviewed/2024/05/GHSA-9r24-p34x-4vw4/GHSA-9r24-p34x-4vw4.json new file mode 100644 index 00000000000..6271abd3a60 --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-9r24-p34x-4vw4/GHSA-9r24-p34x-4vw4.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-9r24-p34x-4vw4", + "modified": "2024-05-08T12:30:34Z", + "published": "2024-05-08T12:30:34Z", + "aliases": [ + "CVE-2024-34547" + ], + "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noor alam Magical Addons For Elementor allows Stored XSS.This issue affects Magical Addons For Elementor: from n/a through 1.1.34.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34547" + }, + { + "type": "WEB", + "url": "https://patchstack.com/database/vulnerability/magical-addons-for-elementor/wordpress-magical-addons-for-elementor-header-footer-builder-free-elementor-widgets-elementor-templates-library-plugin-1-1-34-cross-site-scripting-xss-vulnerability?_s_id=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-08T12:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/05/GHSA-9w2f-jxpx-pgrg/GHSA-9w2f-jxpx-pgrg.json b/advisories/unreviewed/2024/05/GHSA-9w2f-jxpx-pgrg/GHSA-9w2f-jxpx-pgrg.json new file mode 100644 index 00000000000..748184f2afa --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-9w2f-jxpx-pgrg/GHSA-9w2f-jxpx-pgrg.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-9w2f-jxpx-pgrg", + "modified": "2024-05-08T12:30:33Z", + "published": "2024-05-08T12:30:33Z", + "aliases": [ + "CVE-2024-34570" + ], + "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xpro Xpro Elementor Addons allows Stored XSS.This issue affects Xpro Elementor Addons: from n/a through 1.4.3.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34570" + }, + { + "type": "WEB", + "url": "https://patchstack.com/database/vulnerability/xpro-elementor-addons/wordpress-xpro-elementor-addons-plugin-1-4-3-cross-site-scripting-xss-vulnerability?_s_id=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-08T11:15:25Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/05/GHSA-cmhw-5vpw-rf3m/GHSA-cmhw-5vpw-rf3m.json b/advisories/unreviewed/2024/05/GHSA-cmhw-5vpw-rf3m/GHSA-cmhw-5vpw-rf3m.json new file mode 100644 index 00000000000..f5996de4e70 --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-cmhw-5vpw-rf3m/GHSA-cmhw-5vpw-rf3m.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-cmhw-5vpw-rf3m", + "modified": "2024-05-08T12:30:33Z", + "published": "2024-05-08T12:30:33Z", + "aliases": [ + "CVE-2024-4281" + ], + "details": "The Link Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'link-library' shortcode in all versions up to, and including, 7.6.11 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4281" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset/3081532/link-library" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/30c9c4b9-6905-4d8a-bc55-5cd6f6201d25?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-08T10:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/05/GHSA-f5m7-q8r9-6vjc/GHSA-f5m7-q8r9-6vjc.json b/advisories/unreviewed/2024/05/GHSA-f5m7-q8r9-6vjc/GHSA-f5m7-q8r9-6vjc.json new file mode 100644 index 00000000000..f6fe0ef0262 --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-f5m7-q8r9-6vjc/GHSA-f5m7-q8r9-6vjc.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-f5m7-q8r9-6vjc", + "modified": "2024-05-08T12:30:34Z", + "published": "2024-05-08T12:30:34Z", + "aliases": [ + "CVE-2024-34561" + ], + "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Creative interactive media 3D FlipBook, PDF Viewer, PDF Embedder – Real 3D FlipBook WordPress Plugin allows Stored XSS.This issue affects 3D FlipBook, PDF Viewer, PDF Embedder – Real 3D FlipBook WordPress Plugin: from n/a through 3.71.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34561" + }, + { + "type": "WEB", + "url": "https://patchstack.com/database/vulnerability/real3d-flipbook-lite/wordpress-real3d-flipbook-pdf-viewer-lite-plugin-3-71-cross-site-scripting-xss-vulnerability?_s_id=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-08T12:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/05/GHSA-h792-8vm9-jc6v/GHSA-h792-8vm9-jc6v.json b/advisories/unreviewed/2024/05/GHSA-h792-8vm9-jc6v/GHSA-h792-8vm9-jc6v.json new file mode 100644 index 00000000000..e20f698d488 --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-h792-8vm9-jc6v/GHSA-h792-8vm9-jc6v.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-h792-8vm9-jc6v", + "modified": "2024-05-08T12:30:33Z", + "published": "2024-05-08T12:30:33Z", + "aliases": [ + "CVE-2024-34569" + ], + "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Katie Seaborn Zotpress allows Stored XSS.This issue affects Zotpress: from n/a through 7.3.9.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34569" + }, + { + "type": "WEB", + "url": "https://patchstack.com/database/vulnerability/zotpress/wordpress-zotpress-plugin-7-3-9-cross-site-scripting-xss-vulnerability?_s_id=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-08T11:15:25Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/05/GHSA-j475-m78p-24gm/GHSA-j475-m78p-24gm.json b/advisories/unreviewed/2024/05/GHSA-j475-m78p-24gm/GHSA-j475-m78p-24gm.json new file mode 100644 index 00000000000..dc0bc67d1a5 --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-j475-m78p-24gm/GHSA-j475-m78p-24gm.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-j475-m78p-24gm", + "modified": "2024-05-08T12:30:33Z", + "published": "2024-05-08T12:30:33Z", + "aliases": [ + "CVE-2024-34572" + ], + "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemePrix Fancy Elementor Flipbox fancy-elementor-flipbox allows Stored XSS.This issue affects Fancy Elementor Flipbox: from n/a through 2.4.2.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34572" + }, + { + "type": "WEB", + "url": "https://patchstack.com/database/vulnerability/fancy-elementor-flipbox/wordpress-fancy-elementor-flipbox-plugin-2-4-2-cross-site-scripting-xss-vulnerability?_s_id=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-08T10:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/05/GHSA-j7mf-5rmr-fgp9/GHSA-j7mf-5rmr-fgp9.json b/advisories/unreviewed/2024/05/GHSA-j7mf-5rmr-fgp9/GHSA-j7mf-5rmr-fgp9.json new file mode 100644 index 00000000000..b5347f34def --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-j7mf-5rmr-fgp9/GHSA-j7mf-5rmr-fgp9.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-j7mf-5rmr-fgp9", + "modified": "2024-05-08T12:30:33Z", + "published": "2024-05-08T12:30:33Z", + "aliases": [ + "CVE-2024-34566" + ], + "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Johan van der Wijk Content Blocks (Custom Post Widget) allows Stored XSS.This issue affects Content Blocks (Custom Post Widget): from n/a through 3.3.0.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34566" + }, + { + "type": "WEB", + "url": "https://patchstack.com/database/vulnerability/custom-post-widget/wordpress-content-blocks-custom-post-widget-plugin-3-3-0-cross-site-scripting-xss-vulnerability?_s_id=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-08T11:15:24Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/05/GHSA-p3gf-2fvj-hmp2/GHSA-p3gf-2fvj-hmp2.json b/advisories/unreviewed/2024/05/GHSA-p3gf-2fvj-hmp2/GHSA-p3gf-2fvj-hmp2.json new file mode 100644 index 00000000000..81d6b6e2da1 --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-p3gf-2fvj-hmp2/GHSA-p3gf-2fvj-hmp2.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-p3gf-2fvj-hmp2", + "modified": "2024-05-08T12:30:33Z", + "published": "2024-05-08T12:30:33Z", + "aliases": [ + "CVE-2024-3507" + ], + "details": "Improper privilege management vulnerability in Lunar software that affects versions 6.0.2 through 6.6.0. This vulnerability allows an attacker to perform a secondary process injection into the Lunar application and abuse those rights to access sensitive user information.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3507" + }, + { + "type": "WEB", + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-vulnerability-lunar" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-269" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-08T11:15:25Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/05/GHSA-p3vf-x6xc-g2vh/GHSA-p3vf-x6xc-g2vh.json b/advisories/unreviewed/2024/05/GHSA-p3vf-x6xc-g2vh/GHSA-p3vf-x6xc-g2vh.json new file mode 100644 index 00000000000..6685caebf13 --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-p3vf-x6xc-g2vh/GHSA-p3vf-x6xc-g2vh.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-p3vf-x6xc-g2vh", + "modified": "2024-05-08T12:30:33Z", + "published": "2024-05-08T12:30:33Z", + "aliases": [ + "CVE-2024-34563" + ], + "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GoldAddons Gold Addons for Elementor allows Stored XSS.This issue affects Gold Addons for Elementor: from n/a through 1.2.9.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34563" + }, + { + "type": "WEB", + "url": "https://patchstack.com/database/vulnerability/gold-addons-for-elementor/wordpress-gold-addons-for-elementor-plugin-1-2-9-cross-site-scripting-xss-vulnerability?_s_id=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-08T11:15:24Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/05/GHSA-p739-4cwq-2f8j/GHSA-p739-4cwq-2f8j.json b/advisories/unreviewed/2024/05/GHSA-p739-4cwq-2f8j/GHSA-p739-4cwq-2f8j.json new file mode 100644 index 00000000000..564713beceb --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-p739-4cwq-2f8j/GHSA-p739-4cwq-2f8j.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-p739-4cwq-2f8j", + "modified": "2024-05-08T12:30:33Z", + "published": "2024-05-08T12:30:33Z", + "aliases": [ + "CVE-2024-34564" + ], + "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LogicHunt Inc. Counter Up allows Stored XSS.This issue affects Counter Up: from n/a through 2.2.1.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34564" + }, + { + "type": "WEB", + "url": "https://patchstack.com/database/vulnerability/wp-counter-up/wordpress-counter-up-plugin-2-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-08T11:15:24Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/05/GHSA-rfgj-8gwg-qp4f/GHSA-rfgj-8gwg-qp4f.json b/advisories/unreviewed/2024/05/GHSA-rfgj-8gwg-qp4f/GHSA-rfgj-8gwg-qp4f.json new file mode 100644 index 00000000000..95e18139157 --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-rfgj-8gwg-qp4f/GHSA-rfgj-8gwg-qp4f.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-rfgj-8gwg-qp4f", + "modified": "2024-05-08T12:30:33Z", + "published": "2024-05-08T12:30:33Z", + "aliases": [ + "CVE-2022-40218" + ], + "details": "Missing Authorization vulnerability in ThemeHunk Advance WordPress Search Plugin.This issue affects Advance WordPress Search Plugin: from n/a through 1.1.4.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-40218" + }, + { + "type": "WEB", + "url": "https://patchstack.com/database/vulnerability/th-advance-product-search/wordpress-th-advance-product-search-plugin-1-1-4-unauthenticated-plugin-settings-change-vulnerability?_s_id=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-862" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-08T12:15:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/05/GHSA-rjfr-66h4-5wqf/GHSA-rjfr-66h4-5wqf.json b/advisories/unreviewed/2024/05/GHSA-rjfr-66h4-5wqf/GHSA-rjfr-66h4-5wqf.json new file mode 100644 index 00000000000..7916784614e --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-rjfr-66h4-5wqf/GHSA-rjfr-66h4-5wqf.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-rjfr-66h4-5wqf", + "modified": "2024-05-08T12:30:33Z", + "published": "2024-05-08T12:30:33Z", + "aliases": [ + "CVE-2024-34562" + ], + "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Moveaddons Move Addons for Elementor allows Stored XSS.This issue affects Move Addons for Elementor: from n/a through 1.3.0.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34562" + }, + { + "type": "WEB", + "url": "https://patchstack.com/database/vulnerability/move-addons/wordpress-move-addons-for-elementor-plugin-1-3-0-cross-site-scripting-xss-vulnerability?_s_id=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-08T11:15:24Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/05/GHSA-v863-wq9j-pjg4/GHSA-v863-wq9j-pjg4.json b/advisories/unreviewed/2024/05/GHSA-v863-wq9j-pjg4/GHSA-v863-wq9j-pjg4.json new file mode 100644 index 00000000000..953631f0e3c --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-v863-wq9j-pjg4/GHSA-v863-wq9j-pjg4.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-v863-wq9j-pjg4", + "modified": "2024-05-08T12:30:34Z", + "published": "2024-05-08T12:30:34Z", + "aliases": [ + "CVE-2024-34548" + ], + "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themesgrove WidgetKit allows Stored XSS.This issue affects WidgetKit: from n/a through 2.4.8.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34548" + }, + { + "type": "WEB", + "url": "https://patchstack.com/database/vulnerability/widgetkit-for-elementor/wordpress-all-in-one-addons-for-elementor-widgetkit-plugin-2-4-8-cross-site-scripting-xss-vulnerability?_s_id=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-08T12:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/05/GHSA-wpgr-gpcm-6xw3/GHSA-wpgr-gpcm-6xw3.json b/advisories/unreviewed/2024/05/GHSA-wpgr-gpcm-6xw3/GHSA-wpgr-gpcm-6xw3.json new file mode 100644 index 00000000000..ce88f6de170 --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-wpgr-gpcm-6xw3/GHSA-wpgr-gpcm-6xw3.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-wpgr-gpcm-6xw3", + "modified": "2024-05-08T12:30:33Z", + "published": "2024-05-08T12:30:33Z", + "aliases": [ + "CVE-2024-34414" + ], + "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nobita allows Stored XSS.This issue affects raindrops: from n/a through 1.600.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34414" + }, + { + "type": "WEB", + "url": "https://patchstack.com/database/vulnerability/raindrops/wordpress-raindrops-theme-1-600-cross-site-scripting-xss-vulnerability?_s_id=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-08T12:15:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/05/GHSA-wq56-88x3-qc5r/GHSA-wq56-88x3-qc5r.json b/advisories/unreviewed/2024/05/GHSA-wq56-88x3-qc5r/GHSA-wq56-88x3-qc5r.json new file mode 100644 index 00000000000..b45e2f20e54 --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-wq56-88x3-qc5r/GHSA-wq56-88x3-qc5r.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-wq56-88x3-qc5r", + "modified": "2024-05-08T12:30:34Z", + "published": "2024-05-08T12:30:34Z", + "aliases": [ + "CVE-2024-34546" + ], + "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HabibCoder Sticky Social Link allows Stored XSS.This issue affects Sticky Social Link: from n/a through 1.0.0.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34546" + }, + { + "type": "WEB", + "url": "https://patchstack.com/database/vulnerability/sticky-social-link/wordpress-sticky-social-link-plugin-1-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-08T12:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/05/GHSA-x24r-c8j9-5ghx/GHSA-x24r-c8j9-5ghx.json b/advisories/unreviewed/2024/05/GHSA-x24r-c8j9-5ghx/GHSA-x24r-c8j9-5ghx.json new file mode 100644 index 00000000000..267700f33f8 --- /dev/null +++ b/advisories/unreviewed/2024/05/GHSA-x24r-c8j9-5ghx/GHSA-x24r-c8j9-5ghx.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-x24r-c8j9-5ghx", + "modified": "2024-05-08T12:30:33Z", + "published": "2024-05-08T12:30:33Z", + "aliases": [ + "CVE-2024-34565" + ], + "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Debug Info allows Stored XSS.This issue affects Debug Info: from n/a through 1.3.10.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34565" + }, + { + "type": "WEB", + "url": "https://patchstack.com/database/vulnerability/debug-info/wordpress-debug-info-plugin-1-3-10-cross-site-scripting-xss-vulnerability?_s_id=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-05-08T11:15:24Z" + } +} \ No newline at end of file