LDAP Injection in Liderahenk, TÜBİTAK BİLGEM's centralized Linux management platform, enables unauthenticated remote attackers to manipulate LDAP queries and extract sensitive directory data - including user accounts, credentials, and organizational attributes - from the underlying directory service. Affected versions span 3.4.0 through 3.5.4. No public exploit code or CISA KEV listing has been identified at the time of analysis, though the low-complexity unauthenticated attack vector makes this accessible to a wide range of threat actors targeting Turkish public sector infrastructure.
WebAuthn user verification bypass in Spring Security exposes applications to authentication circumvention when a distributed HTTP session store is in use. Affected versions span Spring Security 6.4.x through 7.1.0, meaning a broad range of enterprise Spring Boot applications leveraging passwordless/FIDO2 authentication are at risk. An unauthenticated remote attacker with the ability to manipulate the WebAuthn ceremony flow can bypass the user verification check - potentially authenticating as a legitimate user - with no public exploit identified at time of analysis.
Reflected Cross-Site Scripting in LimeSurvey Community Edition 7.0.5+260623 allows a remote unauthenticated attacker to execute arbitrary JavaScript in the browser of an authenticated user by crafting a malicious URL targeting the user activation confirmation endpoint. The `action` query parameter is inserted unsanitized into a hidden HTML input attribute, enabling attribute context breakout and script injection. No public exploit has been identified at time of analysis; the issue was disclosed by Fluid Attacks.
OS command injection in Dell Cloud Disaster Recovery versions 20.2 and prior allows a high-privileged remote attacker to execute arbitrary operating system commands via the product's REST API, resulting in full system compromise. The vulnerability is rooted in insufficient sanitization of special characters within API inputs (CWE-78) and is reachable over the network without user interaction. No public exploit code or active exploitation has been identified at time of analysis; Dell has released a security advisory (DSA-2026-353) addressing the issue.
Privilege escalation in OpenZFS on Linux allows any unprivileged local user to perform root-restricted ZFS pool operations - including pool creation, import, destruction, event log access, and fault injection via zinject - by exploiting a flaw in ioctl authorization that incorrectly treats CAP_SYS_ADMIN held within a user-created unprivileged namespace as equivalent to real host-level root privilege. The vulnerability requires only that the user can open /dev/zfs and that the kernel permits unprivileged user namespace creation, a configuration that is enabled by default on most modern Linux distributions. No public exploit has been identified at time of analysis, and the OpenZFS project has released patched versions 2.2.11, 2.3.9, and 2.4.4 addressing all affected branches.
Out-of-bounds hardware I/O reads in the Linux kernel's fbdev framebuffer subsystem allow low-privileged local users to read memory beyond valid hardware bounds, with high confidentiality and availability impact. The flaw in fb_io_read() stems from pointer desynchronization after a partial copy_to_user() transfer: the hardware source pointer advances by the full original chunk size while count is only decremented by successfully copied bytes, causing subsequent loop iterations to read from incorrect, over-advanced offsets. No public exploit or CISA KEV listing exists at time of analysis; patches are available across multiple stable kernel branches.
Stored Cross-Site Scripting in WP Fastest Cache (WordPress plugin, all versions through 1.5.0) allows unauthenticated remote attackers to inject persistent JavaScript by supplying a crafted HTTP Host header that the plugin writes into shared page-cache files, which are then served to all subsequent visitors. Exploitation requires two co-present non-default conditions: the Polylang or Polylang Pro multilingual plugin must be installed and active, and the 'Combine JS' option must be enabled in WP Fastest Cache settings, both of which activate the vulnerable Host-header-to-URL code path in js-utilities.php. No public exploit code or CISA KEV listing has been identified at time of analysis.
Stored Cross-Site Scripting in the Formidable Forms WordPress plugin through version 6.33.1 enables unauthenticated attackers to inject persistent malicious scripts that execute automatically in the WordPress admin interface. The attack exploits the plugin's frm_user_id parameter: by forging it to match an administrator's user ID - obtainable from the public WordPress REST API - the attacker routes input through the permissive wp_kses_post() filter rather than strict sanitization, allowing the payload to survive storage intact. The plugin's own admin JavaScript then decodes and executes the payload automatically on page load, requiring no explicit admin interaction beyond normal panel navigation. No public exploit code or CISA KEV listing was identified at time of analysis.
Stored cross-site scripting in LimeSurvey Community Edition 7.0.5 allows an authenticated low-privileged user with survey creation rights to persist malicious JavaScript via the survey quota message field, which executes in the browser of any user who subsequently views that quota. The CVSS 4.0 score of 7.2 reflects high confidentiality and integrity impact on the vulnerable system (VC:H/VI:H), with realistic escalation to administrator-level session compromise if an admin reviews attacker-controlled quota messages. No public exploit code has been identified and this CVE is not listed in CISA KEV at time of analysis.
Team deletion in Midday's tRPC API grants destructive Owner-equivalent authority to any authenticated Member due to a missing role check in `apps/api/src/trpc/routers/team.ts`. The `team-access` authorization helper confirms team membership but never validates whether the caller holds the `owner` role, despite that check being correctly implemented in adjacent member-removal and member-update procedures within the same router. Any invited team member - receiving the `Member` role by default - can delete the entire team and all scoped records, and additionally trigger a background cleanup job that exercises stored bank-connection OAuth tokens against connected financial providers. No public exploit identified at time of analysis; no CISA KEV listing.
Missing authorization on DROP MATERIALIZED VIEW in StarRocks allows any authenticated account to permanently delete legacy synchronous materialized views across all databases, regardless of grants. The flaw exists because `AuthorizerStmtVisitor.visitDropMaterializedViewStatement` exits early without invoking the Authorizer; the authorization branch executes only when the resolved object is a modern `MaterializedView`, not when it is a legacy synchronous view stored as a rollup index on an `OlapTable`. Versions through 4.0.13 are affected per the VulnCheck advisory, and no public exploit has been identified at time of analysis.
Frappe's REST API before v15.115.0 contains an access control bypass (CWE-863) that allows any low-privileged authenticated user to read fields from Linked DocType records outside their permitted scope. When a document is fetched via the REST API, the framework resolves Link field references to other DocTypes but inconsistently re-applies the linked DocType's own permission rules, enabling horizontal data leakage across role boundaries. No confirmed active exploitation or public exploit code has been identified, but the low attack complexity and network-accessible vector create meaningful data exfiltration risk in multi-role or multi-tenant Frappe/ERPNext deployments.
Server-side request forgery in OneUptime's webhook delivery subsystem allows an authenticated project member to bypass the SSRF protection filter by supplying an IPv4-mapped IPv6 address literal such as [::ffff:127.0.0.1], directing the server to connect to loopback services, private network ranges, or cloud metadata endpoints. All OneUptime versions prior to 12.0.7 are affected; the underlying HTTP client treats the mapped form as the embedded IPv4 address, and the webhook response is returned to the attacker. No public exploit has been identified at time of analysis, but the bypass technique is well-documented in SSRF filter evasion literature and requires no special tooling.
OpenStack Keystone before 29.0.3 allows any authenticated user holding role:reader on any project to enumerate all role assignments across any domain in the cloud by exploiting a type-confusion bug in the GET /v3/role_assignments endpoint. The attack supplies a domain ID as scope.project.id with include_subtree, triggering a null domain_id policy check that passes unconditionally for all callers because domains are internally modeled as projects with domain_id=null. With include_names, the response discloses the names and home-domain IDs of every user, group, project, and role across the targeted domain - and the well-known 'default' domain constant works against every deployment bootstrapped with keystone-manage bootstrap, requiring no prior reconnaissance. No public exploit code has been identified at time of analysis, and the flaw is not listed in CISA KEV.
Incorrect authorization in SeaweedFS S3 API's PutObjectAcl handler allows an authenticated low-privilege S3 principal to overwrite objects outside their permission scope. Versions prior to 4.40 compute the write-back directory from the bucket root rather than the actual parent directory of the nested key, meaning a principal scoped to `allowed/protected.txt` silently overwrites `protected.txt` at the bucket root - clobbering its content, metadata, owner, and ACL. No public exploit code identified at time of analysis, and this CVE is not listed in CISA KEV.
Man-in-the-middle interception in CTFd v3.7.6, a widely-used Capture The Flag competition platform, exposes high-confidentiality data to adjacent-network attackers with no authentication required. Rooted in CWE-300 (Channel Accessible by Non-Endpoint), the flaw allows an attacker sharing the same network segment to intercept communications, capturing sensitive data such as session tokens or credentials, with limited integrity modification also possible. No active exploitation is confirmed - EPSS sits at 0.15% (4th percentile) and no CISA KEV listing exists - but the attack surface is acutely relevant in live CTF event environments where competitors and organizers routinely share the same LAN or Wi-Fi.
Data corruption in the Linux kernel's XFS exchange-range subsystem allows a low-privileged local attacker to trigger incorrect reflink inode flag clearing, causing subsequent writes to bypass Copy-on-Write protection on shared extents. Affected are Linux kernel versions prior to 6.12.105, 7.1.10, and 7.2 on systems using XFS volumes with reflink support enabled. No public exploit or CISA KEV listing exists at time of analysis, but the low-complexity local vector and high integrity/confidentiality impact make this a meaningful priority for XFS-heavy enterprise deployments such as RHEL-based systems where XFS is the default filesystem.
Path traversal in Mage AI through version 0.9.79 allows any authenticated Viewer-role user to read arbitrary files accessible to the server process by supplying absolute paths to the browser-items API endpoint. The BrowserItemResource class in mage_ai/api/resources/BrowserItemResource.py omits the containment check that sibling classes FileContentResource and FileResource both apply, and the role-based access control enforcement that would otherwise restrict this route is disabled by default. No public exploit or CISA KEV listing has been identified at time of analysis, but the low privilege bar and default-off RBAC enforcement make this a meaningful risk for any multi-user Mage AI deployment.
Memory leak in the Linux kernel s390/vfio_ccw subsystem enables a guest VM user to exhaust host kernel memory by submitting crafted channel programs that trigger cp_init() failure paths, leaving ccwchain segments unfreed. Affected deployments are IBM s390 (mainframe) KVM hosts that have vfio channel command word (CCW) device passthrough configured, making the attack surface highly specific. No public exploit has been identified and the vulnerability is not listed in the CISA KEV catalog; CVSS 7.1 with S:C reflects the guest-to-host cross-boundary availability impact.
Error propagation failure in the Linux kernel's XFS realtime filesystem subsystem corrupts filesystem state during xfs_growfs operations. The function xfs_rtginode_ensure() silently discards all non-ENOENT errors returned by xfs_rtginode_load(), leaving the realtime group inode pointer unset while growfs proceeds as though load succeeded - producing a null pointer dereference, kernel panic, or realtime subvolume metadata corruption. Patch commits targeting Linux 6.18.46, 7.1.10, and 7.2 are available via kernel.org stable branches; no public exploit or CISA KEV listing exists at time of analysis.
The SpacemiT K3 clock driver in the Linux kernel fails to mark the HDMA clock as CLK_IS_CRITICAL, allowing the kernel's Common Clock Framework to gate it during power management. On SpacemiT K3 SoCs running an X100 RISC-V core, this produces an irrecoverable system hang whenever TCM-dependent operations - such as page fault handling triggered by vector instructions - are attempted while the HDMA clock is inactive. No public exploit has been identified at time of analysis and exposure is strictly bounded to SpacemiT K3 hardware; upstream fix commits are confirmed available for affected stable branches.
LDAP injection in Apache APISIX's ldap-auth plugin allows a caller holding valid credentials for any LDAP directory entry to authenticate to the gateway as a different consumer - including entries outside the subtree the plugin was configured to restrict access to. Affected versions span 2.11.0 through 3.17.0, covering several years of releases. No public exploit code or active exploitation has been identified at time of analysis, but the primitive (credential-bearing lateral identity escalation at the API gateway layer) is high-value in multi-tenant or zero-trust deployments.
Response poisoning in Apache APISIX 2.12.0 through 3.17.0 enables remote attackers to manipulate the gateway's serverless plugin routes so that victims receive attacker-chosen content or other authenticated users' API responses. The root cause is inconsistent HTTP request boundary interpretation - the defining characteristic of HTTP Request/Response Smuggling - applied within APISIX's serverless plugin execution pipeline. No public exploit has been identified at time of analysis, and vendor-released patch version 3.18.0 is available.
Mailbox initialization in Trusted Firmware-M (TF-M) versions 2 through 2.3.0 on PSOC64 and RP2350 platforms fails to validate a pointer supplied by non-secure world code, allowing a low-privileged attacker with physical access to supply a crafted pointer that crosses the TrustZone-M hardware security boundary. Successful exploitation yields full read, write, and denial-of-service capability over the Secure Processing Environment (SPE), collapsing the hardware-enforced isolation TF-M is designed to guarantee - including potential exposure of cryptographic keys, attestation credentials, and secure boot state. No public exploit code exists and this vulnerability is absent from the CISA KEV catalog; the physical attack vector and high complexity substantially constrain opportunistic exploitation, but the full C/I/A scope change makes targeted supply-chain or insider-threat scenarios consequential.
Privilege escalation in FreeBSD's tty subsystem allows a local unprivileged user to gain elevated privileges by exploiting a race condition in the TIOCSCTTY ioctl handler. The handler fails to revalidate terminal state after a lock-drop sequence, enabling a concurrently destroyed terminal to be incorrectly linked to the attacker's session. No public exploit code has been identified at time of analysis, but vendor-confirmed patches exist for all affected release lines (15.0-RELEASE, 15.1-RELEASE, and 14.4-RELEASE).
Stored cross-site scripting in FiftyOne (all versions before v1.21.0) allows a dataset contributor to execute arbitrary JavaScript in the browser of any user who opens a poisoned dataset and hovers over a field with a malicious description. The payload persists in the dataset schema across exports, publications, and shares, giving it a supply-chain propagation vector common in ML/data-science workflows. When the script fires, it runs in the FiftyOne application origin, where it can leverage the open-source server's unauthenticated media route to read arbitrary local files from the victim's machine and interact with dataset and operator APIs as the authenticated user. No public exploit identified at time of analysis; a vendor-released patch exists in v1.21.0.
Missing authentication on a specific API endpoint in CAYIN CMS-WS and CMS-SE allows unauthenticated remote attackers to retrieve media file lists, resulting in partial information disclosure. All versions of both products are affected per CPE data, and the vulnerability requires no credentials, no user interaction, and no special network position - only HTTP reachability to the CMS instance. No public exploit code or CISA KEV listing has been identified at time of analysis, and the confidentiality impact is limited to media asset enumeration rather than credential or configuration exposure.
Path traversal in ZLMediaKit's downloadFile API allows an authenticated operator holding the API secret to read files from sibling directories outside the configured root, because the root path is built without a trailing separator and the confinement check is a bare prefix comparison. The flaw is isolated to server/WebApi.cpp and does not affect the standard static file server in src/Http/HttpFileManager.cpp. No patch version has been confirmed and no public exploit has been identified at time of analysis, but because the reference container runs as root, a secret-holding attacker can read arbitrary host filesystem content.
TCP window throttling in NLnet Labs NSD allows any unauthenticated remote attacker to crash individual serve child processes by deliberately shrinking the TCP receive window to near-zero after issuing a DNS query over TCP, triggering an integer underflow (CWE-191). By repeating this pattern continuously, the attacker can deny all TCP-based DNS service from the affected NSD instance. No public exploit code has been identified at time of analysis, and the CVSS 4.0 score of 6.9 reflects moderate availability impact with zero confidentiality or integrity exposure.
Missing authentication on Spring Cloud Config Server's /monitor endpoint lets remote attackers submit unvalidated webhook requests, forcing configuration-refresh events without any credentials. It affects Spring Cloud Config 3.x through 3.1.14, 4.0.0-4.2.8, 4.3.0-4.3.4, and 5.0.0-5.0.4, and is exploitable only when the spring-cloud-config-monitor component is enabled. No public exploit identified at time of analysis; EPSS is low (0.28%, 20th percentile) and CISA SSVC rates exploitation as none and technical impact as only partial, tempering the vendor's 9.8 rating.
User enumeration via observable response discrepancy in Automatisch through v0.15.0 allows any unauthenticated remote caller to determine whether an email address holds an account. The forgot-password endpoint returns HTTP 404 for unregistered addresses and HTTP 204 for registered ones, with no rate limiting on the route, making automated bulk enumeration of account holders trivially achievable. No public exploit code or CISA KEV listing has been identified, though the zero-barrier exploitation conditions (unauthenticated, network-reachable, low complexity) make this a practical reconnaissance primitive for targeted phishing or credential-stuffing campaigns.
Cross-site request forgery in Nagios Core (before 4.5.13) and Nagios XI (before 2026R1.5) allows an attacker to execute arbitrary Nagios commands on behalf of an authenticated user by exploiting a bypass in the double-submit cookie CSRF protection implemented in cmd.cgi. When the Cookie header is absent in a POST request, the server's CSRF check can be satisfied simply by supplying matching NagFormId and nagFormId values in the POST body - a condition entirely within the attacker's control. No confirmed active exploitation (not in CISA KEV) and no public exploit code identified at time of analysis, though the technique is well-understood and the bypass mechanism is straightforward to reproduce.
Cross-site request forgery in Nagios Core before 4.5.12 enables remote attackers to execute arbitrary monitoring commands by tricking an authenticated administrator into visiting a malicious page. The flaw in cmd.cgi stems from a logic inversion: the CSRF protection mechanism treats an absent NagFormId cookie as a passing check rather than a failing one, rendering the protection entirely ineffective. The CVSS 4.0 vector (VI:H, UI:A) confirms real integrity risk - an attacker can issue commands under a victim session - though user interaction is required and no public exploit or CISA KEV listing exists at time of analysis.
Path traversal in RustDesk's macOS clipboard file-paste feature allows a remote session peer to write files outside the intended target directory by supplying crafted file descriptor names containing parent-directory components or absolute paths. Versions 1.3.9 through 1.4.9 on macOS are affected; exploitation requires an active RustDesk session and passive victim interaction (initiating a clipboard paste). No public exploit code and no CISA KEV listing have been identified at time of analysis; a vendor fix is available via commit 6f1eb164.
Credential exposure in Veeam Backup & Replication occurs when guest OS processing operations write privileged account credentials to a support log file in cleartext, leaving them recoverable by any local user with read permissions on that log. Documented via HackerOne and Veeam KB4902, this CWE-532 information disclosure flaw affects all tracked versions per CPE data. No public exploit code has been identified at time of analysis, and the vulnerability does not appear in the CISA KEV catalog.
GitLab CE/EE allows any authenticated user to cause denial of service against background job processing due to missing object count limits, affecting all versions from 12.8 through pre-19.3.1. The CVSS vector (PR:L, AV:N, A:H) confirms low-privilege network-accessible exploitation with full availability impact on Sidekiq-backed async processing, including CI/CD pipelines and repository operations. No public exploit code has been identified and this vulnerability is not listed in CISA KEV at time of analysis.
Unbounded regular expression evaluation in Weblate prior to 2026.7 allows any authenticated user holding the built-in 'Edit source' role to induce sustained CPU exhaustion by storing a catastrophically-backtracking pattern in a source string's quality-check flags. Both the RegexCheck and PlaceholderCheck mechanisms compile user-supplied expressions at validation time but execute them without any runtime timeout, so a single malicious flag edit can pin server CPU indefinitely by re-triggering evaluation across every linked translation unit in the same request. No public exploit code exists and the issue is not listed in CISA KEV, but the low complexity and clear role-based attack path make it a credible internal or supply-chain threat for multi-contributor Weblate deployments.
Spring AMQP's optional message decompression feature allows any principal with queue publish access to crash the consumer JVM by sending a single crafted ~1 MB compressed message. Affected versions span the 2.4.x, 3.2.x, 4.0.x, and 4.1.0 release lines, making this a broad supply-chain concern for Spring-based Java messaging infrastructure. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog, but the low attack complexity and high availability impact warrant prompt remediation in any environment where queue publish access is shared or externally reachable.
SQL injection in Dell PowerProtect Cyber Recovery versions 20.2 and prior enables a low-privileged remote attacker to extract sensitive information from the underlying database. The CVSS vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) confirms network-accessible exploitation requiring only a standard user account, with high confidentiality impact and no user interaction needed. No public exploit code or CISA KEV listing has been identified at time of analysis, though the low complexity and low privilege bar make this a meaningful risk for environments running affected versions.
Denial-of-service and minor integrity impact in Oracle Java SE 7u511 allows unauthenticated remote attackers to crash or hang the JVM via the 2D graphics rendering component, exploitable across multiple network protocols with no authentication or user interaction required. The attack surface is broadened by the component's exposure through APIs consumed by web services, sandboxed Java Web Start applications, and sandboxed Java applets loading untrusted code. No public exploit code has been identified and the vulnerability is not listed in the CISA KEV catalog at time of analysis, though the low exploitation complexity means automated scanning is feasible.
Sort validation bypass in Spring Data JPA allows remote, unauthenticated attackers to submit crafted payloads through untrusted sort parameters, circumventing the library's built-in Sort validation and potentially injecting malicious ordering expressions into the underlying JPA query layer. Affected versions span four release trains from 3.0.0 through 4.1.0, placing a large fraction of Spring Boot applications at risk where dynamic sorting is exposed to user-controlled input. No public exploit has been identified at time of analysis and the vulnerability is not listed in CISA KEV, but the 'Authentication Bypass' tag suggests practical risk may exceed what the CVSS 4.8 score implies.
Uncontrolled memory allocation in Spring Integration's RFC6587SyslogDeserializer allows any network-reachable, low-privileged syslog sender to supply an arbitrarily large octet count, causing the TCP inbound adapter to allocate an unbounded byte array and potentially read across RFC 6587 message frame boundaries. Affected release lines span 5.5.x through 7.1.0. No public exploit code has been identified and the vulnerability is absent from CISA KEV, but the low attack complexity and low privilege requirement make exploitation straightforward for any entity permitted to deliver syslog messages to the adapter.
Authorization bypass in Dell PowerProtect One versions 20.1.0.0 and below allows a remote low-privileged attacker to manipulate user-controlled keys and bypass object-level authorization checks, resulting in unauthorized data tampering. The vulnerability is classified as CWE-639 (Authorization Bypass Through User-Controlled Key), an IDOR-class flaw where the application trusts client-supplied identifiers without server-side authorization validation. No public exploit code has been identified at time of analysis, and this vulnerability is not listed in the CISA KEV catalog.
Cache poisoning in Dell PowerProtect One versions 20.1.0.0 and below exposes environments to integrity violations via an insufficiently trustworthy component (CWE-1357), allowing a remote unauthenticated attacker to inject malicious data into the system cache when user interaction occurs. The CVSS vector (AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N) scores 5.3 Medium, with high attack complexity and mandatory user interaction substantially constraining real-world exploitability despite the network-accessible entry point. No public exploit code and no CISA KEV listing have been identified at time of analysis, indicating no confirmed active exploitation.
Broken access control in ThingsBoard Professional Edition 4.21 and below allows authenticated customer-tier users to manipulate API parameters in the Alarms comments endpoint to forge or overwrite system-generated alarm comments. Because customer accounts are low-privileged by design, the ability to impersonate system messages and overwrite system-owned data constitutes vertical privilege escalation with direct integrity impact on alarm audit trails. No public exploit code exists and the EPSS score of 0.15% (5th percentile) indicates low exploitation probability, but the flaw is easily reproducible by any valid customer credential on an unpatched instance.
AES/CBC encryption in Spring Security's AesBytesEncryptor silently degrades to a null (all-zero) initialization vector when applications use the two-argument constructor or pass a null IV generator with CBC mode selected, completely undermining the semantic security of any data encrypted through this code path. Affected versions span Spring Security 5.7.0 through 7.1.0, covering multiple active release lines used extensively in Java and Spring Boot enterprise applications. No public exploit code has been identified at time of analysis, but the CVSS confidentiality impact is rated High and exploitation requires only low-privilege access to any application instantiating the vulnerable encryptor pattern.
libjpeg-turbo 3.2.0's PNG loader triggers an integer division-by-zero crash when tj3LoadImage12() or tj3LoadImage16() processes a valid indexed-color PNG image bearing a non-gray palette under the default pixel format. The fault occurs inside alloc_sarray(), generating a SIGFPE that terminates any application relying on those APIs to handle externally supplied images. No public exploit code has been identified and EPSS sits at 0.14% (4th percentile), but the crash is reproducible with a standards-compliant PNG file, making any network-facing image-ingestion service a realistic denial-of-service target.
Stored cross-site scripting in the Betheme theme for WordPress (all versions through 28.4) allows authenticated attackers holding contributor-level access or higher to inject persistent malicious scripts into pages via unsanitized attributes of the 'icon_box_2' shortcode. The injected payload executes in the browser of any user who subsequently loads the affected page, including administrators, enabling session hijacking or privilege escalation. No public exploit code has been identified and the vulnerability carries no CISA KEV listing at time of analysis, but the low access barrier in multi-author WordPress environments elevates practical risk.
Stored Cross-Site Scripting in the Gutenverse FSE blocks plugin for WordPress (all versions through 4.0.2) enables authenticated attackers holding Contributor-level accounts or higher to embed persistent malicious JavaScript into page content via multiple vulnerable block types. Because the injected payload executes automatically in any visitor's browser session, the attack surface extends beyond the contributing user to all site visitors and administrators who load the affected pages. Exploitation requires no public exploit kit - the attack is straightforward for any party who can author content on the target WordPress site, and the CVSS scope change (S:C) reflects the cross-context browser impact.
Stored Cross-Site Scripting in the Reviews and Rating - Google Reviews WordPress plugin (all versions through 5.10) allows authenticated Contributors to inject arbitrary JavaScript via the wp_display() shortcode handler's unsanitized html_tags parameter. The malicious script persists server-side and executes in the browsers of any users who subsequently load the affected page, enabling session hijacking, credential theft, or unauthorized actions under the victim's identity. No confirmed active exploitation or public exploit code has been identified at time of analysis; the primary risk driver is the low privilege bar required - Contributor-level access - which is commonly available on multi-author or open-registration WordPress sites.