Логотип exploitDog
bind:CVE-2024-8095
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-8095

Количество 2

Количество 2

nvd логотип

CVE-2024-8095

9 месяцев назад

The BabelZ WordPress plugin through 1.1.5 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.

CVSS3: 6.1
EPSS: Низкий
github логотип

GHSA-pvrm-g69c-c84r

9 месяцев назад

The BabelZ WordPress plugin through 1.1.5 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.

CVSS3: 6.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2024-8095

The BabelZ WordPress plugin through 1.1.5 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.

CVSS3: 6.1
0%
Низкий
9 месяцев назад
github логотип
GHSA-pvrm-g69c-c84r

The BabelZ WordPress plugin through 1.1.5 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.

CVSS3: 6.1
0%
Низкий
9 месяцев назад

Уязвимостей на страницу