Advisory Database Sync

github · Nov 9, 2024 · d07b74e · d07b74e
1 parent 2cb888b
commit d07b74e
Show file tree

Hide file tree

Showing 62 changed files with 2,368 additions and 0 deletions.
diff --git a/advisories/unreviewed/2024/11/GHSA-2m2h-p645-jchp/GHSA-2m2h-p645-jchp.json b/advisories/unreviewed/2024/11/GHSA-2m2h-p645-jchp/GHSA-2m2h-p645-jchp.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2m2h-p645-jchp",
+  "modified": "2024-11-09T15:32:34Z",
+  "published": "2024-11-09T15:32:34Z",
+  "aliases": [
+    "CVE-2024-51618"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in DuoGeek Custom Admin Menu allows Stored XSS.This issue affects Custom Admin Menu: from n/a through 1.0.0.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-51618"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/custom-admin-menu/wordpress-custom-admin-menu-plugin-1-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-11-09T14:15:15Z"
+  }
+}
diff --git a/advisories/unreviewed/2024/11/GHSA-2rw3-qjj7-c6qf/GHSA-2rw3-qjj7-c6qf.json b/advisories/unreviewed/2024/11/GHSA-2rw3-qjj7-c6qf/GHSA-2rw3-qjj7-c6qf.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2rw3-qjj7-c6qf",
+  "modified": "2024-11-09T15:32:34Z",
+  "published": "2024-11-09T15:32:34Z",
+  "aliases": [
+    "CVE-2024-51704"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Hanusek imPress allows Reflected XSS.This issue affects imPress: from n/a through 0.1.4.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-51704"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/wp-js-impress/wordpress-impress-plugin-0-1-4-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-11-09T13:15:09Z"
+  }
+}
diff --git a/advisories/unreviewed/2024/11/GHSA-3724-jcfq-mvfc/GHSA-3724-jcfq-mvfc.json b/advisories/unreviewed/2024/11/GHSA-3724-jcfq-mvfc/GHSA-3724-jcfq-mvfc.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-3724-jcfq-mvfc",
+  "modified": "2024-11-09T15:32:34Z",
+  "published": "2024-11-09T15:32:34Z",
+  "aliases": [
+    "CVE-2024-51611"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Miguel Peixe WP Feature Box allows Stored XSS.This issue affects WP Feature Box: from n/a through 0.1.3.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-51611"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/wp-feature-box/wordpress-wp-feature-box-plugin-0-1-3-stored-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-11-09T14:15:14Z"
+  }
+}
diff --git a/advisories/unreviewed/2024/11/GHSA-3jc7-4mrh-p737/GHSA-3jc7-4mrh-p737.json b/advisories/unreviewed/2024/11/GHSA-3jc7-4mrh-p737/GHSA-3jc7-4mrh-p737.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-3jc7-4mrh-p737",
+  "modified": "2024-11-09T15:32:34Z",
+  "published": "2024-11-09T15:32:34Z",
+  "aliases": [
+    "CVE-2024-51587"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Softfirm Definitive Addons for Elementor allows Stored XSS.This issue affects Definitive Addons for Elementor: from n/a through 1.5.16.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-51587"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/definitive-addons-for-elementor/wordpress-definitive-addons-for-elementor-plugin-1-5-16-stored-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-11-09T15:15:04Z"
+  }
+}
diff --git a/advisories/unreviewed/2024/11/GHSA-3qm5-69j8-vpx9/GHSA-3qm5-69j8-vpx9.json b/advisories/unreviewed/2024/11/GHSA-3qm5-69j8-vpx9/GHSA-3qm5-69j8-vpx9.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-3qm5-69j8-vpx9",
+  "modified": "2024-11-09T15:32:34Z",
+  "published": "2024-11-09T15:32:34Z",
+  "aliases": [
+    "CVE-2024-51698"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Luis Rock Master Bar allows Reflected XSS.This issue affects Master Bar: from n/a through 1.0.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-51698"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/master-bar/wordpress-master-bar-plugin-1-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-11-09T13:15:08Z"
+  }
+}
diff --git a/advisories/unreviewed/2024/11/GHSA-4247-fw2x-jv5v/GHSA-4247-fw2x-jv5v.json b/advisories/unreviewed/2024/11/GHSA-4247-fw2x-jv5v/GHSA-4247-fw2x-jv5v.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-4247-fw2x-jv5v",
+  "modified": "2024-11-09T15:32:34Z",
+  "published": "2024-11-09T15:32:34Z",
+  "aliases": [
+    "CVE-2024-51629"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in MetricThemes Header Footer Composer for Elementor allows DOM-Based XSS.This issue affects Header Footer Composer for Elementor: from n/a through 1.0.4.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-51629"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/header-footer-composer/wordpress-header-footer-composer-for-elementor-plugin-1-0-4-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-11-09T14:15:16Z"
+  }
+}
diff --git a/advisories/unreviewed/2024/11/GHSA-448h-w6gr-56f4/GHSA-448h-w6gr-56f4.json b/advisories/unreviewed/2024/11/GHSA-448h-w6gr-56f4/GHSA-448h-w6gr-56f4.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-448h-w6gr-56f4",
+  "modified": "2024-11-09T15:32:34Z",
+  "published": "2024-11-09T15:32:34Z",
+  "aliases": [
+    "CVE-2024-51612"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Ken Charity Reftagger Shortcode allows Stored XSS.This issue affects Reftagger Shortcode: from n/a through 1.1.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-51612"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/reftagger-shortcode/wordpress-reftagger-shortcode-plugin-1-1-stored-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-11-09T14:15:14Z"
+  }
+}
diff --git a/advisories/unreviewed/2024/11/GHSA-4625-58qr-4wp5/GHSA-4625-58qr-4wp5.json b/advisories/unreviewed/2024/11/GHSA-4625-58qr-4wp5/GHSA-4625-58qr-4wp5.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-4625-58qr-4wp5",
+  "modified": "2024-11-09T15:32:34Z",
+  "published": "2024-11-09T15:32:34Z",
+  "aliases": [
+    "CVE-2024-51695"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Fabrica Fabrica Synced Pattern Instances allows Reflected XSS.This issue affects Fabrica Synced Pattern Instances: from n/a through 1.0.8.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-51695"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/fabrica-reusable-block-instances/wordpress-fabrica-synced-pattern-instances-plugin-1-0-8-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-11-09T13:15:07Z"
+  }
+}
diff --git a/advisories/unreviewed/2024/11/GHSA-4998-4cwm-v6xh/GHSA-4998-4cwm-v6xh.json b/advisories/unreviewed/2024/11/GHSA-4998-4cwm-v6xh/GHSA-4998-4cwm-v6xh.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-4998-4cwm-v6xh",
+  "modified": "2024-11-09T15:32:32Z",
+  "published": "2024-11-09T15:32:32Z",
+  "aliases": [
+    "CVE-2024-51670"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Stored XSS.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.7.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-51670"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/js-support-ticket/wordpress-js-help-desk-plugin-2-8-7-stored-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-11-09T13:15:05Z"
+  }
+}
diff --git a/advisories/unreviewed/2024/11/GHSA-4g8r-fg9v-3p5j/GHSA-4g8r-fg9v-3p5j.json b/advisories/unreviewed/2024/11/GHSA-4g8r-fg9v-3p5j/GHSA-4g8r-fg9v-3p5j.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-4g8r-fg9v-3p5j",
+  "modified": "2024-11-09T15:32:34Z",
+  "published": "2024-11-09T15:32:34Z",
+  "aliases": [
+    "CVE-2024-51591"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in wpgrids Slicko allows DOM-Based XSS.This issue affects Slicko: from n/a through 1.2.0.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-51591"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/vulnerability/slicko-for-elementor/wordpress-slicko-plugin-1-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-11-09T15:15:05Z"
+  }
+}