PT-2023-14546 · Unknown · Yannick Lefebvre Community Events
CVSS v3.1
4.8
Média
| Vetor | AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Yannick Lefebvre Community Events plugin versions <= 1.4.8
Description
The issue is related to a Stored Cross-Site Scripting vulnerability that requires authentication with admin+ privileges.
Recommendations
For versions <= 1.4.8, update to a version greater than 1.4.8 to resolve the issue.
At the moment, there is no information about other specific mitigation measures for this vulnerability.
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Yannick Lefebvre Community Events