Browse all 4 CVE security advisories affecting baden03. AI-powered Chinese analysis, POCs, and references for each vulnerability.
baden03 primarily operates in software development with a focus on web applications and network services. Historically, this actor has been associated with multiple remote code execution vulnerabilities, cross-site scripting flaws, and privilege escalation weaknesses across various systems. Security researchers note that baden03's activities often involve exploiting input validation failures and misconfigured access controls. While no major public incidents have been directly attributed to this actor, their CVE history demonstrates a pattern of targeting common web technologies and APIs. The vulnerabilities attributed to baden03 typically stem from insufficient sanitization of user inputs and improper privilege management, highlighting ongoing challenges in secure coding practices.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2024-4095 | Collapse-O-Matic <= 1.8.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode — Collapse-O-MaticCWE-79 | 6.4 | Medium | 2024-06-15 |
| CVE-2024-4783 | jQuery T(-) Countdown Widget <= 2.3.25 - Authenticated (Contributor+) Stored Cross-Site Scripting via tminus Shortcode — jQuery T(-) Countdown WidgetCWE-79 | 6.4 | Medium | 2024-05-23 |
| CVE-2024-3671 | Print-O-Matic <= 2.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode — Print-O-MaticCWE-79 | 6.4 | Medium | 2024-05-22 |
| CVE-2023-7030 | Collapse-O-Matic <= 1.8.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode — Collapse-O-MaticCWE-79 | 6.4 | Medium | 2024-05-02 |
This page lists every published CVE security advisory associated with baden03. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.