PT-2024-38608
CVE-2024-7822
·
تاريخ النشر
2024-09-11
·
تاريخ التحديث
2024-09-27
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
The Quick Code WordPress plugin through 1.0
Description
The issue is related to the lack of CSRF check in some places, and missing sanitisation as well as escaping in the Quick Code WordPress plugin. This could allow attackers to make logged-in admins add Stored XSS payloads via a CSRF attack.
Recommendations
For The Quick Code WordPress plugin through 1.0, consider updating to a version that includes proper CSRF checks and sanitisation to prevent exploitation. As a temporary workaround, restrict access to sensitive areas of the plugin to minimize the risk of Stored XSS payloads being added.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾