PT-2024-30417

CVE-2024-43255

·

Published

2024-08-26

·

Updated

2024-09-17

Description by

CVSS 3.1
7.1
High
MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions MyBookTable Bookstore versions 3.3.9 and earlier
Description The issue is a Cross-Site Request Forgery (CSRF) vulnerability that allows Cross-Site Scripting (XSS) in the MyBookTable Bookstore plugin for WordPress. Users are advised to upgrade to the latest version to mitigate risks.
Recommendations For MyBookTable Bookstore versions 3.3.9 and earlier, upgrade to the latest version to resolve the issue. As a temporary workaround, consider restricting access to the plugin until the issue is resolved.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')
CWE-352: Cross-Site Request Forgery (CSRF)
Related identifiers
CVE-2024-43255
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com