PT-2021-16000
CVE-2021-24477
·
تاريخ النشر
2021-08-02
·
تاريخ التحديث
2021-09-21
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Migrate Users WordPress plugin versions prior to 1.1.2 is not specified, however, the plugin through 1.0.1 is affected.
Description
The issue is related to a Stored Cross-Site Scripting problem. This occurs because the Delimiter option is not properly sanitised or escaped before being outputted on a page. Additionally, the plugin lacks a CSRF check when saving its options, making it possible for the issue to be exploited through a CSRF attack.
Recommendations
For Migrate Users WordPress plugin versions through 1.0.1, update to a version that addresses the Stored Cross-Site Scripting issue and implements a CSRF check.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾