exploitDog

CVE-2024-2844

Опубликовано: 29 мар. 2024

Источник: nvd

CVSS3: 4.3

EPSS Низкий

Описание

The Easy Appointments plugin for WordPress is vulnerable to unauthorized modification of data due to insufficient user validation on the ajax_cancel_appointment() function in all versions up to, and including, 3.11.18. This makes it possible for unauthenticated attackers to cancel other users orders.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:easy-appointments:easy_appointments:*:*:*:*:*:wordpress:*:*

Версия до 3.11.19 (исключая)

EPSS

Процентиль: 25%

0.00086

Низкий

4.3 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

GHSA-2vp3-qj4j-9chv

CVSS3: 4.3

github

почти 2 года назад

The Easy Appointments plugin for WordPress is vulnerable to unauthorized modification of data due to insufficient user validation on the ajax_cancel_appointment() function in all versions up to, and including, 3.11.18. This makes it possible for unauthenticated attackers to cancel other users orders.

EPSS

Процентиль: 25%

0.00086

Низкий

4.3 Medium

CVSS3

Дефекты

CWE-862