CVE Catalog

A vulnerability allowing arbitrary file uploads has been identified in the WPBookit plugin for WordPress, affecting versions through 1.6.9. The issue arises from inadequate file type validation in the 'WPB_Profile_controller::handle_image_upload' function. This vulnerability enables unauthenticated attackers to upload arbitrary files to the affected site's server, potentially leading to remote code execution.

A vulnerability in Nuxt's webpack and rspack builders allows for source code theft during development. This issue affects Nuxt versions 3.0.0 through 3.15.12 for webpack and versions 3.12.2 through 3.152 for rspack. The vulnerability arises because script requests are not restricted by the same origin policy, enabling attackers to inject malicious scripts that can be executed in the context of the victim's application. By exploiting this flaw, an attacker can access the application's source code through the injected script.

A CORS vulnerability has been identified in Nuxt versions 3.8.1 prior to 3.15.3, allowing any website to send requests to the Nuxt development server and read the responses. This issue arises from default CORS settings that permit all origins to access the server. As a result, malicious websites could potentially steal source code from applications running on the affected Nuxt version.

A heap-based buffer overflow vulnerability has been identified in the Sungrow WiNet-SV200.001.00.P027 firmware and earlier versions. This vulnerability arises from inadequate bounds checking of the MQTT message content, which could be exploited to cause a buffer overflow. Such an overflow could lead to a denial-of-service condition or allow for remote code execution on the affected device.

A stack-based buffer overflow vulnerability has been identified in the SunGrow WiNet-SV200.001.00.P027 firmware and earlier versions. The issue arises during the decryption of MQTT messages, where the code responsible for parsing certain TLV fields lacks adequate bounds checks. This vulnerability could be exploited to cause a denial-of-service condition or to execute arbitrary code remotely.

A stack-based buffer overflow vulnerability has been identified in Sungrow WiNet-S version WINET-SV200.001.00.P027 and earlier. This vulnerability arises from inadequate bounds checking of MQTT topics, which can be exploited when the device processes MQTT messages. The flaw could lead to a denial-of-service condition or allow for remote code execution on the affected device.

A stack-based buffer overflow vulnerability has been identified in Sungrow WiNet-SV200.001.00.P027 and earlier versions. The issue arises when the firmware copies timestamps from MQTT messages without properly checking the buffer size, potentially leading to memory corruption.

A vulnerability exists in Sungrow WiNet-S version WINET-SV200.001.00.P027 and earlier, due to hardcoded MQTT credentials that enable attackers to send arbitrary commands to any connected inverter. Additionally, the absence of TLS for broker verification allows for impersonation of the MQTT broker, exposing communications to potential man-in-the-middle attacks at the TCP/IP level.

A vulnerability exists in Sungrow WiNet-S version WINET-SV200.001.00.P027 and earlier, due to a hardcoded password in the WiNet WebUI. This password can be used to decrypt firmware update files, which are otherwise encrypted. The presence of this hardcoded password could potentially be exploited to manipulate the firmware update process.

A vulnerability has been identified in Microsoft Edge (Chromium-based) that involves user interface misrepresentation of critical information. This flaw allows an unauthorized attacker to perform spoofing over a network. The vulnerability exists in Microsoft Edge versions through 132.0.2957.127.

A cross-site scripting (XSS) vulnerability has been identified in CampCodes School Management Software version 1.0. The issue arises from an unknown function in the file '/notice-list' within the Notice Board component. Manipulating the 'Notice' argument allows for the injection of malicious scripts, which can be executed remotely. This vulnerability has been publicly disclosed and is exploitable.

A stored cross-site scripting vulnerability has been identified in Dcat-Admin version 2.2.1-beta. This issue arises from an unknown processing of the file '/admin/auth/roles' within the Roles Page component. The vulnerability allows for the injection of malicious scripts, which can be executed in the context of the user.

A cross-site scripting (XSS) vulnerability has been identified in Fumiao OpenCMS version 2.2. The issue arises in the Add Model Management Page, specifically within the admin/model/addOrUpdate file. The vulnerability is triggered by manipulating the 模板前缀 argument, allowing for remote exploitation.

A critical vulnerability has been identified in Rise Group Rise Mode Temp CPU version 2.1, specifically within the CRYPTBASE.dll library. This vulnerability involves an untrusted search path in the Startup component, which could potentially be exploited locally.

A cross-site scripting (XSS) vulnerability has been identified in JoeyBling Bootplus versions prior to commit 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. The issue arises from the application's failure to properly sanitize input on the admin/sys/admin.html page, allowing attackers to inject malicious JavaScript. This vulnerability can be exploited remotely.

A stored cross-site scripting vulnerability has been identified in InnoShop versions through 0.3.8. This issue allows attackers to upload malicious SVG files that can execute JavaScript, potentially leading to the theft of cookies from users, including those of administrators.

A SQL injection vulnerability has been identified in Go-CMS version 1.1.10. This vulnerability allows remote attackers to execute arbitrary code by sending a crafted payload. The issue arises when exporting user or role data, as the application improperly concatenates IDs into SQL queries, creating an opportunity for injection.

A persistent cross-site scripting vulnerability has been identified in NodeBB version 3.11.0. This vulnerability allows remote attackers to store arbitrary scripts in the 'about me' section of user profiles, which are executed when the profile is viewed by others.

A vulnerability exists in the HL7 FHIR IG Publisher prior to version 1.8.9, where the IG Publisher CLI can unintentionally expose GitHub usernames and credentials. This occurs in continuous integration (CI) environments when the tool uses Git commands to fetch the repository URL. If the repository is cloned using a credentials-based URL, the full URL, including sensitive information, is incorporated into the generated Implementation Guide. This issue does not affect users who clone public repositories without credentials, such as those utilizing the auto-ig-build CI infrastructure.

An open redirect vulnerability has been identified in JoeyBling Bootplus versions prior to commit 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. The issue arises in the qrCode function of the QrCodeController.java file, where the text parameter is not properly validated. This lack of restriction allows attackers to create QR codes that direct users to malicious URLs. The vulnerability can be exploited remotely.

A resource consumption vulnerability has been identified in JoeyBling Bootplus versions through commit 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. The issue arises in the qrCode method of the QrCodeController.java file, where the width and height parameters are not properly restricted. This lack of validation can lead to excessive resource usage, causing a denial-of-service condition. The vulnerability can be exploited remotely.

A path traversal vulnerability has been identified in JoeyBling Bootplus versions up to commit 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. The issue arises in the file 'src/main/java/io/github/controller/SysFileController.java', where the download method fails to properly validate the 'name' parameter. This lack of input sanitization allows for the manipulation of file paths, enabling remote attackers to download arbitrary files from the server.

A vulnerability allowing XML external entity (XXE) injection has been identified in the HL7 FHIR IG Publisher tool, in versions prior to 1.7.4. This issue arises from XSLT transformations that can be manipulated with a malicious XML file containing a harmful DTD tag. The exploitation of this vulnerability could lead to the disclosure of data from the host system. This issue is particularly concerning in scenarios where the FHIR IG Publisher is used in an environment that accepts XML submissions from external clients.

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the WordPress Roi Calculator plugin, specifically in versions through 1.0. This vulnerability allows for Stored Cross-Site Scripting (XSS) attacks. The issue arises because the plugin does not properly validate requests, enabling attackers to trick users with higher privileges into performing actions that could inject malicious scripts into the site.

A stored cross-site scripting vulnerability has been identified in the WordPress PDF Invoices for WooCommerce plugin, specifically in versions through 4.6.0. This issue arises from improper input neutralization during web page generation, allowing malicious actors to inject scripts that are executed when users visit the site.

A missing authorization vulnerability has been identified in the Kadence WP Gutenberg Blocks plugin, specifically in versions through 3.3.1. This vulnerability allows exploitation of improperly configured access control, potentially enabling users with lower privileges to perform actions reserved for higher privileged users.

A missing authorization vulnerability has been identified in the GoDaddy CoBlocks WordPress plugin, specifically in versions through 3.1.13. This vulnerability allows unprivileged users to exploit incorrectly configured access control security levels, potentially leading to unauthorized actions or access.

A broken access control vulnerability has been identified in the ExactMetrics WordPress plugin, specifically in versions through 8.1.0. This vulnerability arises from missing authorization checks, which can be exploited by users with lower privileges to perform actions reserved for higher privileged users.

A stored cross-site scripting vulnerability has been identified in the Popup Maker WordPress plugin, affecting versions through 1.20.2. This issue allows attackers to inject malicious scripts that are executed when users visit the site.

A Cross-Site Request Forgery (CSRF) vulnerability exists in the FluentSMTP WordPress plugin, specifically in versions through 2.2.80. This vulnerability allows attackers to trick users with higher privileges into performing actions they did not intend to.

A Cross-Site Request Forgery (CSRF) vulnerability exists in the NowButtons.com Call Now Button plugin for WordPress, specifically in versions through 1.4.13. This vulnerability allows attackers to trick users with higher privileges into performing actions they did not intend to.

A missing authorization vulnerability has been identified in the Metaphor Creations Post Duplicator plugin, affecting versions through 2.35. This vulnerability allows exploitation of improperly configured access control security levels, potentially enabling unprivileged users to perform actions reserved for higher privileges.

A local file inclusion vulnerability has been identified in the AddonMaster Post Grid Master plugin, affecting versions through 3.4.12. This vulnerability arises from improper control of filenames in include or require statements, allowing PHP remote file inclusion.

A DOM-based cross-site scripting vulnerability has been identified in the BookingPress WordPress plugin, specifically in versions through 1.1.25. This issue allows for improper neutralization of input during web page generation, enabling the injection of malicious scripts that could be executed when users visit the affected site.

A stored cross-site scripting vulnerability has been identified in the IP2Location Download IP2Location Country Blocker plugin for WordPress, affecting versions through 2.38.3. This vulnerability arises from improper input sanitization during web page generation, allowing malicious scripts to be injected and executed when users visit the affected site.

A cross-site scripting (XSS) vulnerability has been identified in the Rextheme WP VR plugin, affecting versions through 8.5.14. This issue allows for DOM-based XSS, where malicious scripts can be injected and executed in the context of the user's browser.

A stored cross-site scripting vulnerability has been identified in the ElementInvader Addons for Elementor plugin, affecting versions through 1.3.3. This vulnerability allows attackers to inject malicious scripts that are executed when users visit the affected site.

A blind SQL injection vulnerability has been identified in the WordPress Bug Library plugin, affecting versions through 2.1.4. This vulnerability arises from improper neutralization of special elements used in SQL commands, allowing malicious actors to interact with the database and potentially steal information.

A stored cross-site scripting vulnerability has been identified in the CodePeople Contact Form Email plugin, affecting versions through 1.3.52. This issue arises from improper input sanitization during web page generation, allowing malicious scripts to be injected and executed when users visit the site.

A stored cross-site scripting vulnerability has been identified in the HT Contact Form 7 WordPress plugin, affecting versions through 1.2.1. This vulnerability arises from improper input sanitization during web page generation, allowing malicious scripts to be injected and executed when users visit the site.

A missing authorization vulnerability has been identified in the Thim Elementor Kit WordPress plugin, specifically in versions through 1.2.8. This vulnerability allows exploitation of improperly configured access control, potentially enabling users to perform actions reserved for higher privileges.

A Cross-Site Request Forgery (CSRF) vulnerability exists in the WordPress Side Menu Lite plugin, affecting versions through 5.3.1. This vulnerability allows attackers to trick users with higher privileges into performing actions they did not intend to.

A stored cross-site scripting vulnerability has been identified in the CodePeople Booking Calendar Contact Form plugin, affecting versions through 1.2.55. This vulnerability arises from improper input sanitization during web page generation, allowing malicious scripts to be injected and executed when users visit the affected site.

A stored cross-site scripting vulnerability has been identified in the WordPress FAQ Builder AYS plugin, affecting versions through 1.7.3. This issue arises from improper input sanitization during web page generation, allowing malicious scripts to be injected and executed when users visit the affected site.

A stored cross-site scripting vulnerability has been identified in the Easy YouTube Gallery plugin by Aleksandar Urošević, affecting versions through 1.0.4. This vulnerability allows for the injection of malicious scripts that could be executed when users visit the affected site.

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Wow-Company Sticky Buttons WordPress plugin, affecting versions through 4.1.1. This vulnerability allows attackers to trick users with higher privileges into performing actions they did not intend to.

A stored cross-site scripting vulnerability has been identified in the WordPress Widget Countdown plugin, affecting versions through 2.7.1. This issue arises from improper input sanitization during web page generation, allowing malicious scripts to be injected and executed when users visit the affected site.

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Wow-Company Modal Window plugin for WordPress, affecting versions through 6.1.4. This vulnerability allows attackers to trick users with higher privileges into performing actions they did not intend to.

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Wow-Company Herd Effects WordPress plugin, affecting versions through 6.2.1. This vulnerability allows attackers to trick users with higher privileges into performing actions they did not intend to.

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Wow-Company Counter Box WordPress plugin, affecting versions through 2.0.5. This vulnerability allows attackers to trick users with higher privileges into performing actions they did not intend to.