PT-2023-10298 · WordPress · Wds Multisite Aggregate Plugin
CVE-2015-10120
·
Publicado
2023-07-10
·
Atualizado
2024-05-17
CVSS v2.0
4.0
Média
| Vetor | AV:N/AC:L/Au:S/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
WDS Multisite Aggregate Plugin versions up to 1.0.0
Description
A problematic issue was found in the WDS Multisite Aggregate Plugin, affecting the
update options function of the file includes/WDS Multisite Aggregate Options.php. This issue leads to cross-site scripting and can be exploited remotely.Recommendations
For WDS Multisite Aggregate Plugin versions up to 1.0.0, upgrade to version 1.0.1 to address this issue. As a temporary workaround, consider restricting access to the
update options function of the includes/WDS Multisite Aggregate Options.php file until the upgrade is applied.Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Wds Multisite Aggregate Plugin