PT-2023-24637 · Unknown · Rakib Hasan Dynamic Qr Code Generator
CVSS v3.1
7.1
Alta
| Vetor | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
Rakib Hasan Dynamic QR Code Generator plugin versions 0.0.0 through 0.0.5
Description
The issue is related to an Unauth. Reflected Cross-Site Scripting (XSS) vulnerability. This means that an attacker can inject malicious scripts into the website, potentially allowing them to steal user data or take control of the user's session.
Recommendations
For versions 0.0.0 through 0.0.5, update to a version higher than 0.0.5 to resolve the issue.
At the moment, there is no information about other mitigation measures.
Exploit
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Rakib Hasan Dynamic Qr Code Generator