exploitDog

CVE-2024-1352

Опубликовано: 09 апр. 2024

Источник: nvd

CVSS3: 6.5

CVSS3: 5.3

EPSS Низкий

Описание

The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized access & modification of data due to a missing capability check on the rtcl_import_location() rtcl_import_category() functions in all versions up to, and including, 3.0.4. This makes it possible for authenticated attackers, with subscriber-level access and above, to create terms.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:radiustheme:classified_listing:*:*:*:*:-:wordpress:*:*

Версия до 3.0.5 (исключая)

EPSS

Процентиль: 51%

0.00278

Низкий

6.5 Medium

CVSS3

5.3 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

GHSA-vjgv-q4qp-fr6p

CVSS3: 6.5

github

почти 2 года назад

The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized access & modification of data due to a missing capability check on the rtcl_import_location() rtcl_import_category() functions in all versions up to, and including, 3.0.4. This makes it possible for authenticated attackers, with subscriber-level access and above, to create terms.

EPSS

Процентиль: 51%

0.00278

Низкий

6.5 Medium

CVSS3

5.3 Medium

CVSS3

Дефекты

CWE-862