exploitDog

CVE-2025-31401

Опубликовано: 09 апр. 2025

Источник: nvd

CVSS3: 7.1

EPSS Низкий

Описание

Cross-Site Request Forgery (CSRF) vulnerability in mmetrodw MMX – Make Me Christmas allows Stored XSS. This issue affects MMX – Make Me Christmas: from n/a through 1.0.0.

Ссылки

https://patchstack.com/database/wordpress/plugin/mmx-make-me-christmas/vulnerability/wordpress-mmx-make-me-christmas-plugin-1-0-0-csrf-to-stored-xss-vulnerability?_s_id=cve

EPSS

Процентиль: 24%

0.0008

Низкий

7.1 High

CVSS3

Дефекты

CWE-352

Связанные уязвимости

GHSA-c44j-83ph-xfxg

CVSS3: 7.1

github

10 месяцев назад

Cross-Site Request Forgery (CSRF) vulnerability in mmetrodw MMX – Make Me Christmas allows Stored XSS. This issue affects MMX – Make Me Christmas: from n/a through 1.0.0.

EPSS

Процентиль: 24%

0.0008

Низкий

7.1 High

CVSS3

Дефекты

CWE-352