Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-8761

Опубликовано: 17 сент. 2024
Источник: nvd
CVSS3: 7.2
CVSS3: 6.1
EPSS Низкий

Описание

The Share This Image plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 2.03. This is due to insufficient validation on the redirect url supplied via the link parameter. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:wp-unit:share_this_image:*:*:*:*:*:wordpress:*:*
Версия до 2.04 (исключая)

EPSS

Процентиль: 48%
0.00254
Низкий

7.2 High

CVSS3

6.1 Medium

CVSS3

Дефекты

CWE-601

Связанные уязвимости

CVSS3: 7.2
github
больше 1 года назад

The Share This Image plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 2.03. This is due to insufficient validation on the redirect url supplied via the link parameter. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action.

EPSS

Процентиль: 48%
0.00254
Низкий

7.2 High

CVSS3

6.1 Medium

CVSS3

Дефекты

CWE-601