Логотип exploitDog
bind:CVE-2024-8092
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-8092

Количество 2

Количество 2

nvd логотип

CVE-2024-8092

больше 1 года назад

The Accordion Image Menu WordPress plugin through 3.1.3 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.

CVSS3: 5.4
EPSS: Низкий
github логотип

GHSA-36xh-276f-w5j9

больше 1 года назад

The Accordion Image Menu WordPress plugin through 3.1.3 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.

CVSS3: 5.4
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2024-8092

The Accordion Image Menu WordPress plugin through 3.1.3 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.

CVSS3: 5.4
0%
Низкий
больше 1 года назад
github логотип
GHSA-36xh-276f-w5j9

The Accordion Image Menu WordPress plugin through 3.1.3 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.

CVSS3: 5.4
0%
Низкий
больше 1 года назад

Уязвимостей на страницу