Publish Advisories

GHSA-76ff-4qhm-jx5q
GHSA-7q9j-33vm-8375
GHSA-8383-gf95-58m6
GHSA-g2x5-hh22-qjw5
GHSA-xm8g-3cm4-4x8x

advisories/unreviewed/2025/05/GHSA-76ff-4qhm-jx5q/GHSA-76ff-4qhm-jx5q.json

@@ -0,0 +1,44 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-76ff-4qhm-jx5q",
+  "modified": "2025-05-23T06:30:31Z",
+  "published": "2025-05-23T06:30:30Z",
+  "aliases": [
+    "CVE-2025-4594"
+  ],
+  "details": "The Tournamatch plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'trn-ladder-registration-button' shortcode in all versions up to, and including, 4.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4594"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/tournamatch/tags/4.6.1/includes/shortcodes/class-shortcodes.php#L273"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3295681/tournamatch/trunk/includes/shortcodes/class-shortcodes.php"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/fc912831-bbdd-4f8f-a620-47e41b1b731d?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-23T04:15:33Z"
+  }
+}

advisories/unreviewed/2025/05/GHSA-7q9j-33vm-8375/GHSA-7q9j-33vm-8375.json

@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-7q9j-33vm-8375",
+  "modified": "2025-05-23T06:30:30Z",
+  "published": "2025-05-23T06:30:30Z",
+  "aliases": [
+    "CVE-2025-48708"
+  ],
+  "details": "gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript through 10.05.0 lacks argument sanitization for the # case.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-48708"
+    },
+    {
+      "type": "WEB",
+      "url": "https://bugs.ghostscript.com/show_bug.cgi?id=708446"
+    },
+    {
+      "type": "WEB",
+      "url": "https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=b587663c623b4462f9e78686a31fd880207303ee"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-212"
+    ],
+    "severity": "LOW",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-23T04:15:32Z"
+  }
+}

advisories/unreviewed/2025/05/GHSA-8383-gf95-58m6/GHSA-8383-gf95-58m6.json

@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-8383-gf95-58m6",
+  "modified": "2025-05-23T06:30:31Z",
+  "published": "2025-05-23T06:30:31Z",
+  "aliases": [
+    "CVE-2025-48695"
+  ],
+  "details": "An issue was discovered in CyberDAVA before 1.1.20. A privilege escalation vulnerability allows a low-privileged user to escalate their privilege by abusing the following API due to the lack of access control: /api/v2/users/user/<user id>/role/ROLE/<Target role> (admin access can be achieved).",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-48695"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/michaelcheung-research/Vulnerability-Disclosure/blob/main/CVE-2025-CyberDava1/README.md?plain=1"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.cyberdava.com"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-266"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-23T05:15:25Z"
+  }
+}

advisories/unreviewed/2025/05/GHSA-g2x5-hh22-qjw5/GHSA-g2x5-hh22-qjw5.json

@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-g2x5-hh22-qjw5",
+  "modified": "2025-05-23T06:30:30Z",
+  "published": "2025-05-23T06:30:30Z",
+  "aliases": [
+    "CVE-2025-48701"
+  ],
+  "details": "openDCIM through 23.04 allows SQL injection in people_depts.php because prepared statements are not used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-48701"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/opendcim/openDCIM/issues/1601"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-23T04:15:29Z"
+  }
+}

advisories/unreviewed/2025/05/GHSA-xm8g-3cm4-4x8x/GHSA-xm8g-3cm4-4x8x.json

@@ -30,7 +30,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-36"
+      "CWE-36",
+      "CWE-99"
     ],
     "severity": "HIGH",
     "github_reviewed": false,