Skip to content
Sign in
6.1 Medium

CVE-2024-6017 The Music Request Manager WordPress plugin through 1.3 does not have CSRF check in some places, and is missing…

Description

The Music Request Manager WordPress plugin through 1.3 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack

Affected products and versions

Product Affected versions Fixed in
Music Request Manager 1.3 earliest → 1.3 No fix stated
music_request_manager 1.3 earliest → 1.3 No fix stated

Other CVEs of Music Request Manager

The 3 CVEs of Music Request Manager →
CVE-2024-6018 The Music Request Manager WordPress plugin through 1.3 does not escape the $_SERVER['REQUEST_URI'] parameter before… 6.1 Medium CVE-2024-6019 The Music Request Manager WordPress plugin through 1.3 does not sanitise and escape incoming music requests, which could… 6.1 Medium
Track this CVE