PT-2023-22251 · Plainware · Plainware Shiftcontroller Employee Shift Scheduling

Thiennv

·

CVE-2023-29424

·

Publicado

2023-06-26

·

Atualizado

2023-06-30

CVSS v3.1

7.1

Alta

VetorAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions Plainware ShiftController Employee Shift Scheduling plugin versions <= 4.9.23
Description The issue is related to a Stored Cross-Site Scripting (XSS) vulnerability that requires authentication with admin+ privileges. This vulnerability affects the Plainware ShiftController Employee Shift Scheduling plugin.
Recommendations For versions <= 4.9.23, update to a version higher than 4.9.23 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2023-29424

Produtos afetados

Plainware Shiftcontroller Employee Shift Scheduling