PT-2024-30417

CVE-2024-43255

·

تاريخ النشر

2024-08-26

·

تاريخ التحديث

2024-09-17

الوصف من

CVSS 3.1
7.1
عالية
المقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions MyBookTable Bookstore versions 3.3.9 and earlier
Description The issue is a Cross-Site Request Forgery (CSRF) vulnerability that allows Cross-Site Scripting (XSS) in the MyBookTable Bookstore plugin for WordPress. Users are advised to upgrade to the latest version to mitigate risks.
Recommendations For MyBookTable Bookstore versions 3.3.9 and earlier, upgrade to the latest version to resolve the issue. As a temporary workaround, consider restricting access to the plugin until the issue is resolved.
قابلية الاستغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾