generated content from 2025-01-09

CVELab · Jan 9, 2025 · 1d05bc4 · 1d05bc4
1 parent ff8b127
commit 1d05bc4
Show file tree

Hide file tree

Showing 47 changed files with 1,058 additions and 0 deletions.
diff --git a/mapping.csv b/mapping.csv
@@ -262741,3 +262741,49 @@ vulnerability,CVE-2023-24011,vulnerability--241f58a6-0204-4c20-ac9f-020bb4fd0894
 vulnerability,CVE-2024-10106,vulnerability--ed558949-d308-4c90-92b2-dea9d8fa3f4e
 vulnerability,CVE-2024-43176,vulnerability--3484bd39-163b-4cdf-8651-f38d311254e4
 vulnerability,CVE-2022-22491,vulnerability--1b8495c9-3854-4605-8cdb-25d5556b031d
+vulnerability,CVE-2025-22812,vulnerability--26f0d229-1de5-42e1-8816-f1b451f1881d
+vulnerability,CVE-2025-22819,vulnerability--1c128e37-c425-45f3-80fd-9ad8f5f1b4a3
+vulnerability,CVE-2025-22295,vulnerability--7fae3589-72d7-4a57-acfb-76c4799bd576
+vulnerability,CVE-2025-22345,vulnerability--1bdccd3d-ceb4-40cc-b069-fe98cbdd9c68
+vulnerability,CVE-2025-22806,vulnerability--70aa91c3-424b-4b4b-b6af-dd77571e2caf
+vulnerability,CVE-2025-22815,vulnerability--0166394a-c4d4-48ea-8408-4adb827d67cf
+vulnerability,CVE-2025-22542,vulnerability--20559751-2bfb-4e40-9e57-994e736326bf
+vulnerability,CVE-2025-22817,vulnerability--b3401485-8ac2-4b3c-935f-904101a95e43
+vulnerability,CVE-2025-22826,vulnerability--a72a1d03-8253-4d0c-b76b-9c6e9fa8b782
+vulnerability,CVE-2025-22505,vulnerability--23a9452a-76f4-4245-b422-f46ca8f37578
+vulnerability,CVE-2025-22807,vulnerability--5b382604-4db5-4ea4-a921-1fc742b2ccec
+vulnerability,CVE-2025-22808,vulnerability--168d2e67-200c-49d4-8d67-fde5d7501601
+vulnerability,CVE-2025-22813,vulnerability--63d8a60d-6b85-458a-957f-20dc5b3be2c1
+vulnerability,CVE-2025-22822,vulnerability--15b195d0-98ef-4aa6-a5c4-19ac728f02e4
+vulnerability,CVE-2025-22809,vulnerability--ec33c991-741d-497a-90d5-77b619c0c1fc
+vulnerability,CVE-2025-22802,vulnerability--2a14edaa-5903-4f9c-9fc0-bfc6b402b6ae
+vulnerability,CVE-2025-22504,vulnerability--0effcc21-e53d-4ec8-b50e-4abc1d0a7dd3
+vulnerability,CVE-2025-22811,vulnerability--546ed324-d198-48ba-bdf4-4b5da663bcee
+vulnerability,CVE-2025-22539,vulnerability--ae1cd687-4e0a-4380-8e8d-e9172b27ca3f
+vulnerability,CVE-2025-22510,vulnerability--70332504-e998-4d49-88b9-c37bde584a77
+vulnerability,CVE-2025-22537,vulnerability--3a399cf6-ad37-43d0-a467-5855215c4c51
+vulnerability,CVE-2025-22331,vulnerability--d1b52d35-6b29-49cd-8c2b-38812b8bdde3
+vulnerability,CVE-2025-22313,vulnerability--7f49c3cb-190b-4d58-8f5a-d23ea977c879
+vulnerability,CVE-2025-22814,vulnerability--1305c72b-212f-4eec-ac94-6f0946a5d86d
+vulnerability,CVE-2025-22361,vulnerability--395ee3d3-a91c-442d-b10f-f6c1b03a529a
+vulnerability,CVE-2025-22824,vulnerability--63cc96ad-f598-4f7a-9869-b86ee1086f9d
+vulnerability,CVE-2025-22508,vulnerability--4634d107-5939-4cc8-81d3-bbcc83e3e4e4
+vulnerability,CVE-2025-22540,vulnerability--8a6af666-99a5-4e92-870f-0bf6126f6880
+vulnerability,CVE-2025-22803,vulnerability--5466e571-3ff0-4634-b5bd-8bb541afb57a
+vulnerability,CVE-2025-22330,vulnerability--8309480b-ddbf-43b4-b7dd-d5e7d4418932
+vulnerability,CVE-2025-22805,vulnerability--81d293ac-b2a8-4b33-9c55-842385ff7bcb
+vulnerability,CVE-2025-22535,vulnerability--1b10dece-52a3-4862-9ad8-be6c9c7ebe46
+vulnerability,CVE-2025-22810,vulnerability--3309e246-6587-43a1-ad4c-f6278b57d676
+vulnerability,CVE-2025-22561,vulnerability--6a8228ed-d6fb-4643-9a5c-9888bb6dbc36
+vulnerability,CVE-2025-22827,vulnerability--19d35b71-539a-4128-9f63-533418098ec3
+vulnerability,CVE-2025-22823,vulnerability--5a339b2a-941b-44cf-b278-81e48fa98181
+vulnerability,CVE-2025-22821,vulnerability--92f5d2f6-3f35-4a86-aca5-c78a539fe943
+vulnerability,CVE-2025-22801,vulnerability--b4c16922-a6d6-47b3-a71b-50ef51dd1fe8
+vulnerability,CVE-2025-22820,vulnerability--1e4ad370-9e81-4c3c-81dc-970ec5c43285
+vulnerability,CVE-2025-22307,vulnerability--cb22eeb6-1d70-4295-9022-d8e4fd46e32e
+vulnerability,CVE-2025-22527,vulnerability--31958b2e-fe2c-4541-ac73-de6d96ddf0d5
+vulnerability,CVE-2025-22818,vulnerability--c00ce1fc-1d07-4bc9-81ae-ad76a8125626
+vulnerability,CVE-2025-22804,vulnerability--56d1bc59-7e2f-4859-9ab8-9a90609e9ee2
+vulnerability,CVE-2025-22594,vulnerability--4abd5e16-0fa6-4d71-b271-4da1ff84c927
+vulnerability,CVE-2025-22521,vulnerability--06baaf86-1363-46c5-9f0f-095d2e88921f
+vulnerability,CVE-2025-22595,vulnerability--86b21f9e-afaa-44f1-995b-690fa1d2b9de
diff --git a/objects/vulnerability/vulnerability--0166394a-c4d4-48ea-8408-4adb827d67cf.json b/objects/vulnerability/vulnerability--0166394a-c4d4-48ea-8408-4adb827d67cf.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--922528e4-6a47-463e-b196-6d3d17a96a32",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--0166394a-c4d4-48ea-8408-4adb827d67cf",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2025-01-09T16:25:16.492613Z",
+            "modified": "2025-01-09T16:25:16.492613Z",
+            "name": "CVE-2025-22815",
+            "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins LLC Button Block allows Stored XSS.This issue affects Button Block: from n/a through 1.1.6.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2025-22815"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--06baaf86-1363-46c5-9f0f-095d2e88921f.json b/objects/vulnerability/vulnerability--06baaf86-1363-46c5-9f0f-095d2e88921f.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--e5973f80-7d47-4609-a8e7-45316d356ee6",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--06baaf86-1363-46c5-9f0f-095d2e88921f",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2025-01-09T16:25:16.563636Z",
+            "modified": "2025-01-09T16:25:16.563636Z",
+            "name": "CVE-2025-22521",
+            "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Scott Farrell wp Hosting Performance Check allows Reflected XSS.This issue affects wp Hosting Performance Check: from n/a through 2.18.8.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2025-22521"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--0effcc21-e53d-4ec8-b50e-4abc1d0a7dd3.json b/objects/vulnerability/vulnerability--0effcc21-e53d-4ec8-b50e-4abc1d0a7dd3.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--6d7bdd3a-78c8-4469-a556-36d6aedad54e",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--0effcc21-e53d-4ec8-b50e-4abc1d0a7dd3",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2025-01-09T16:25:16.511095Z",
+            "modified": "2025-01-09T16:25:16.511095Z",
+            "name": "CVE-2025-22504",
+            "description": "Unrestricted Upload of File with Dangerous Type vulnerability in jumpdemand 4ECPS Web Forms allows Upload a Web Shell to a Web Server.This issue affects 4ECPS Web Forms: from n/a through 0.2.18.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2025-22504"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--1305c72b-212f-4eec-ac94-6f0946a5d86d.json b/objects/vulnerability/vulnerability--1305c72b-212f-4eec-ac94-6f0946a5d86d.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--712393c7-4130-4cc7-9ad0-8e8bba0f2071",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--1305c72b-212f-4eec-ac94-6f0946a5d86d",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2025-01-09T16:25:16.525305Z",
+            "modified": "2025-01-09T16:25:16.525305Z",
+            "name": "CVE-2025-22814",
+            "description": "Cross-Site Request Forgery (CSRF) vulnerability in Dylan James Zephyr Admin Theme allows Cross Site Request Forgery.This issue affects Zephyr Admin Theme: from n/a through 1.4.1.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2025-22814"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--15b195d0-98ef-4aa6-a5c4-19ac728f02e4.json b/objects/vulnerability/vulnerability--15b195d0-98ef-4aa6-a5c4-19ac728f02e4.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--3c390033-693e-4055-95fb-891ae60bbb6e",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--15b195d0-98ef-4aa6-a5c4-19ac728f02e4",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2025-01-09T16:25:16.50611Z",
+            "modified": "2025-01-09T16:25:16.50611Z",
+            "name": "CVE-2025-22822",
+            "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bishawjit Das wp custom countdown allows Stored XSS.This issue affects wp custom countdown: from n/a through 2.8.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2025-22822"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--168d2e67-200c-49d4-8d67-fde5d7501601.json b/objects/vulnerability/vulnerability--168d2e67-200c-49d4-8d67-fde5d7501601.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--5c230b1c-d6e5-4cef-b834-e045b6d4a9b0",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--168d2e67-200c-49d4-8d67-fde5d7501601",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2025-01-09T16:25:16.502129Z",
+            "modified": "2025-01-09T16:25:16.502129Z",
+            "name": "CVE-2025-22808",
+            "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Surbma Surbma | Premium WP allows DOM-Based XSS.This issue affects Surbma | Premium WP: from n/a through 9.0.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2025-22808"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--19d35b71-539a-4128-9f63-533418098ec3.json b/objects/vulnerability/vulnerability--19d35b71-539a-4128-9f63-533418098ec3.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--2908b9c1-c69b-4601-8b20-c0cdba387729",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--19d35b71-539a-4128-9f63-533418098ec3",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2025-01-09T16:25:16.544272Z",
+            "modified": "2025-01-09T16:25:16.544272Z",
+            "name": "CVE-2025-22827",
+            "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Joomag. WP Joomag allows DOM-Based XSS.This issue affects WP Joomag: from n/a through 2.5.2.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2025-22827"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--1b10dece-52a3-4862-9ad8-be6c9c7ebe46.json b/objects/vulnerability/vulnerability--1b10dece-52a3-4862-9ad8-be6c9c7ebe46.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--2812b38e-c3fe-4329-af4b-2fd7d9b13356",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--1b10dece-52a3-4862-9ad8-be6c9c7ebe46",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2025-01-09T16:25:16.539769Z",
+            "modified": "2025-01-09T16:25:16.539769Z",
+            "name": "CVE-2025-22535",
+            "description": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jonathan Kern WPListCal allows SQL Injection.This issue affects WPListCal: from n/a through 1.3.5.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2025-22535"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--1bdccd3d-ceb4-40cc-b069-fe98cbdd9c68.json b/objects/vulnerability/vulnerability--1bdccd3d-ceb4-40cc-b069-fe98cbdd9c68.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--f67d44c7-e3a7-4de3-8adb-403edfee083d",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--1bdccd3d-ceb4-40cc-b069-fe98cbdd9c68",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2025-01-09T16:25:16.47876Z",
+            "modified": "2025-01-09T16:25:16.47876Z",
+            "name": "CVE-2025-22345",
+            "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tobias Spiess TS Comfort DB allows Reflected XSS.This issue affects TS Comfort DB: from n/a through 2.0.7.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2025-22345"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--1c128e37-c425-45f3-80fd-9ad8f5f1b4a3.json b/objects/vulnerability/vulnerability--1c128e37-c425-45f3-80fd-9ad8f5f1b4a3.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--2fc73d56-cb5d-448b-8006-f994c45ab24d",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--1c128e37-c425-45f3-80fd-9ad8f5f1b4a3",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2025-01-09T16:25:16.475686Z",
+            "modified": "2025-01-09T16:25:16.475686Z",
+            "name": "CVE-2025-22819",
+            "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 4wpbari Qr Code and Barcode Scanner Reader allows Stored XSS.This issue affects Qr Code and Barcode Scanner Reader: from n/a through 1.0.0.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2025-22819"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--1e4ad370-9e81-4c3c-81dc-970ec5c43285.json b/objects/vulnerability/vulnerability--1e4ad370-9e81-4c3c-81dc-970ec5c43285.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--af32285e-b90d-4fe8-8e29-bee61de08419",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--1e4ad370-9e81-4c3c-81dc-970ec5c43285",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2025-01-09T16:25:16.55062Z",
+            "modified": "2025-01-09T16:25:16.55062Z",
+            "name": "CVE-2025-22820",
+            "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Daniel Walmsley VR Views allows Stored XSS.This issue affects VR Views: from n/a through 1.5.1.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2025-22820"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--20559751-2bfb-4e40-9e57-994e736326bf.json b/objects/vulnerability/vulnerability--20559751-2bfb-4e40-9e57-994e736326bf.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--c193b18a-19bd-49ff-9fb6-f76b6a3afa9b",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--20559751-2bfb-4e40-9e57-994e736326bf",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2025-01-09T16:25:16.494146Z",
+            "modified": "2025-01-09T16:25:16.494146Z",
+            "name": "CVE-2025-22542",
+            "description": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ofek Nakar Virtual Bot allows Blind SQL Injection.This issue affects Virtual Bot: from n/a through 1.0.0.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2025-22542"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--23a9452a-76f4-4245-b422-f46ca8f37578.json b/objects/vulnerability/vulnerability--23a9452a-76f4-4245-b422-f46ca8f37578.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--56bf4eab-b385-4d28-8d90-7b8e139df4a7",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--23a9452a-76f4-4245-b422-f46ca8f37578",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2025-01-09T16:25:16.499127Z",
+            "modified": "2025-01-09T16:25:16.499127Z",
+            "name": "CVE-2025-22505",
+            "description": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Nabaraj Chapagain NC Wishlist for Woocommerce allows SQL Injection.This issue affects NC Wishlist for Woocommerce: from n/a through 1.0.1.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2025-22505"
+                }
+            ]
+        }
+    ]
+}
diff --git a/objects/vulnerability/vulnerability--26f0d229-1de5-42e1-8816-f1b451f1881d.json b/objects/vulnerability/vulnerability--26f0d229-1de5-42e1-8816-f1b451f1881d.json
@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--4aab03fb-48f8-45bf-af2b-1d3e525e9bd6",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--26f0d229-1de5-42e1-8816-f1b451f1881d",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2025-01-09T16:25:16.466049Z",
+            "modified": "2025-01-09T16:25:16.466049Z",
+            "name": "CVE-2025-22812",
+            "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FlickDevs News Ticker Widget for Elementor allows Stored XSS.This issue affects News Ticker Widget for Elementor: from n/a through 1.3.2.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2025-22812"
+                }
+            ]
+        }
+    ]
+}