exploitDog

CVE-2024-49304

Опубликовано: 17 окт. 2024

Источник: nvd

CVSS3: 5.4

EPSS Низкий

Описание

Cross-Site Request Forgery (CSRF) vulnerability in PINPOINT.WORLD Pinpoint Booking System allows Stored XSS.This issue affects Pinpoint Booking System: from n/a through 2.9.9.5.1.

Ссылки

https://patchstack.com/database/vulnerability/booking-system/wordpress-pinpoint-booking-system-plugin-2-9-9-5-1-cross-site-scripting-xss-vulnerability?_s_id=cve

EPSS

Процентиль: 33%

0.00131

Низкий

5.4 Medium

CVSS3

Дефекты

CWE-352

Связанные уязвимости

GHSA-crff-rm75-2v37

CVSS3: 5.4

github

больше 1 года назад

Cross-Site Request Forgery (CSRF) vulnerability in PINPOINT.WORLD Pinpoint Booking System allows Stored XSS.This issue affects Pinpoint Booking System: from n/a through 2.9.9.5.1.

EPSS

Процентиль: 33%

0.00131

Низкий

5.4 Medium

CVSS3

Дефекты

CWE-352