CVE-2024-7691

Опубликовано: 02 сент. 2024

Источник: nvd

CVSS3: 6.1

CVSS3: 5.4

EPSS Низкий

Описание

The Flaming Forms WordPress plugin through 1.0.1 does not sanitise and escape some parameters, which could allow unauthenticated users to perform Cross-Site Scripting attacks against administrators.

Ссылки

https://wpscan.com/vulnerability/d30a3b95-5d1f-4755-8b61-19946afc51ef/
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:projectcaruso:flaming_forms:*:*:*:*:*:wordpress:*:*

Версия до 1.0.1 (включая)

EPSS

Процентиль: 67%

0.00539

Низкий

6.1 Medium

CVSS3

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-mmj5-w9ph-33wc

CVSS3: 5.4

github

больше 1 года назад

The Flaming Forms WordPress plugin through 1.0.1 does not sanitise and escape some parameters, which could allow unauthenticated users to perform Cross-Site Scripting attacks against administrators.

EPSS

Процентиль: 67%

0.00539

Низкий

6.1 Medium

CVSS3

5.4 Medium

CVSS3

Дефекты

CWE-79