Skip to content
Sign in
7.1 High

CVE-2024-13057 The Dyn Business Panel WordPress plugin through 1.0.0 does not have CSRF check in some places, and is missing…

Description

The Dyn Business Panel WordPress plugin through 1.0.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.

Affected products and versions

Product Affected versions Fixed in
Dyn Business Panel 1.0 earliest → 1.0.0 No fix stated

Other CVEs of Dyn Business Panel

The 3 CVEs of Dyn Business Panel →
CVE-2024-13056 The Dyn Business Panel WordPress plugin through 1.0.0 does not sanitise and escape a parameter before outputting it back… 7.1 High CVE-2024-13055 The Dyn Business Panel WordPress plugin through 1.0.0 does not sanitise and escape a parameter before outputting it back… 7.1 High
Track this CVE