CVE Vulnerability Catalog

The Eventin plugin for WordPress (up to version 4.1.22) is vulnerable to Local File Inclusion via the 'event_layout' parameter. Authenticated attackers with contributor-level access or above can include and execute arbitrary .php files on the server. The etn_manage_event capability is assigned to Contributors by default, meaning any Contributor-level user can set the malicious event_layout value via the REST API without any additional configuration.

The Eventin plugin for WordPress (up to version 4.1.22) is vulnerable to Local File Inclusion via the 'event_layout' parameter. Authenticated attackers with custom-level access or above can include and execute arbitrary .php files on the server, potentially leading to bypassing access controls, obtaining sensitive data, or code execution if .php files can be uploaded and included.

The Contact Form to DB by BestWebSoft plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the cntctfrm_contact_dropdown parameter in all versions up to and including 1.7.5 due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to inject arbitrary web scripts that execute when a user accesses an injected page. The payload executes in the context of an administrator's browser session when they visit the message manager page, potentially compromising administrator-level sessions.

Use-after-free in ANGLE in Google Chrome on Windows prior to 153.0.8010.36. A remote attacker who compromised the renderer process could potentially execute arbitrary code outside the sandbox via a crafted HTML page.

Incorrect authorization in Views in Google Chrome on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page.

Use after free in WebPackaging in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page.

Type confusion in XML in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Severity is medium.

Use-after-free in Views in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via UI Interaction. Severity is high.

Use-after-free in Cast in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. Severity is critical.

Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. (Severity: Medium)

Incorrect reference resolution in Storage in Google Chrome on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Severity: Low)

Use-after-free in DevTools in Google Chrome before 153.0.8010.36. A remote attacker leveraging social engineering could execute arbitrary code inside the sandbox via a crafted HTML page.

Improper initialization in Views in Google Chrome on Windows before 153.0.8010.36. A remote attacker who had compromised the renderer process and leveraged social engineering could potentially execute arbitrary code outside the sandbox via a crafted HTML page.

Type confusion in V8 in Google Chrome before 153.0.8010.36. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.

Improper certificate validation in FedCM in Google Chrome before 153.0.8010.36. A remote attacker leveraging social engineering could bypass web origin policy via crafted network traffic.

Missing authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36. A remote attacker who compromised the renderer process could bypass site isolation via a crafted HTML page.

Out-of-bounds read in ANGLE in Google Chrome prior to 153.0.8010.36. A remote attacker who compromised the renderer process could potentially execute arbitrary code outside the sandbox via a crafted HTML page.

Race condition in V8 in Google Chrome prior to 153.0.8010.36. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.

Use after free in Chromecast in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Severity: Medium.

Use-after-free in V8 in Google Chrome before 153.0.8010.36. A remote attacker could exploit a crafted HTML page to execute arbitrary code inside the sandbox.