PT-2014-8839 · Creative Mind · Cm Download Manager
CVE-2014-9129
·
Publicado
2014-12-05
·
Atualizado
2023-02-02
CVSS v2.0
6.8
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
CreativeMinds CM Downloads Manager plugin versions prior to 2.0.7
Description
A cross-site request forgery (CSRF) issue allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks. This is achieved via the
addons title parameter in the "CMDM admin settings" page to "wp-admin/admin.php".Recommendations
For versions prior to 2.0.7, update to version 2.0.7 or later to resolve the issue.
Exploit
Correção
CSRF
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Cm Download Manager