Логотип exploitDog
bind:CVE-2025-1288
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-1288

Количество 2

Количество 2

nvd логотип

CVE-2025-1288

3 месяца назад

The WOOEXIM WordPress plugin through 5.0.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make an unauthenticated user vulnerable to reflected XSS via a CSRF attack.

CVSS3: 6.1
EPSS: Низкий
github логотип

GHSA-244m-98g9-4pg8

3 месяца назад

The WOOEXIM WordPress plugin through 5.0.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make an unauthenticated user vulnerable to reflected XSS via a CSRF attack.

CVSS3: 6.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2025-1288

The WOOEXIM WordPress plugin through 5.0.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make an unauthenticated user vulnerable to reflected XSS via a CSRF attack.

CVSS3: 6.1
0%
Низкий
3 месяца назад
github логотип
GHSA-244m-98g9-4pg8

The WOOEXIM WordPress plugin through 5.0.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make an unauthenticated user vulnerable to reflected XSS via a CSRF attack.

CVSS3: 6.1
0%
Низкий
3 месяца назад

Уязвимостей на страницу