# CVEs published 2024-05-25

12 CVEs were published on May 25, 2024: 0 critical, 1 high. Days are UTC.

- [CVE-2024-5350](https://cve.now/CVE-2024-5350.md): anji-plus AJ-Report pageList sql injection (CVSS 5.3, anji-plus AJ-Report)
- [CVE-2024-5340](https://cve.now/CVE-2024-5340.md): Ruijie RG-UAC sub\_commit.php os command injection (CVSS 5.1, Ruijie RG-UAC)
- [CVE-2024-30056](https://cve.now/CVE-2024-30056.md): Microsoft Edge (Chromium-based) Information Disclosure Vulnerability (CVSS 7.1, Microsoft Edge)
- [CVE-2024-5339](https://cve.now/CVE-2024-5339.md): Ruijie RG-UAC online\_check.php os command injection (CVSS 5.1, Ruijie RG-UAC)
- [CVE-2024-5338](https://cve.now/CVE-2024-5338.md): Ruijie RG-UAC online.php os command injection (CVSS 5.1, Ruijie RG-UAC)
- [CVE-2024-5337](https://cve.now/CVE-2024-5337.md): Ruijie RG-UAC user\_commit.php os command injection (CVSS 5.1, Ruijie RG-UAC)
- [CVE-2024-5336](https://cve.now/CVE-2024-5336.md): Ruijie RG-UAC vlan\_add\_commit.php addVlan os command injection (CVSS 5.1, Ruijie RG-UAC)
- [CVE-2024-4045](https://cve.now/CVE-2024-4045.md): Popup Builder by OptinMonster – WordPress Popups for Optins, Email Newsletters and Lead Generation \<= 2.16.1 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, smub Popup Builder & Popup Maker for WordPress – OptinMonst…)
- [CVE-2024-5218](https://cve.now/CVE-2024-5218.md): Reviews and Rating – Google Reviews \<= 5.2 - Authenticated (Author+) Stored Cross-Site Scripting (CVSS 6.4, designextreme Reviews and Rating – Google Reviews)
- [CVE-2024-4858](https://cve.now/CVE-2024-4858.md): Testimonial Carousel For Elementor \<= 10.2.0 - Missing Authorization to Limited Setting Update (CVSS 5.3, uapp Testimonial Carousel For Elementor)
- [CVE-2024-5229](https://cve.now/CVE-2024-5229.md): Primary Addon for Elementor \<= 1.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widget (CVSS 6.4, nicheaddons Primary Addon for Elementor)
- [CVE-2024-5220](https://cve.now/CVE-2024-5220.md): ND Shortcodes \<= 7.5 - Authenticated (Author+) Stored Cross-Site Scripting (CVSS 6.4, nicdark ND Shortcodes)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-05-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.