Aller au contenu
Se connecter
4.8 Moyenne

CVE-2023-5932 The Travelpayouts: All Travel Brands in One Place WordPress plugin before 1.1.14 does not sanitise and escape a…

Description

The Travelpayouts: All Travel Brands in One Place WordPress plugin before 1.1.14 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

Produits et versions touchés

Produit Versions touchées Corrigé en
Travelpayouts: All Travel Brands in One Place 1.1 premières → < 1.1.14 1.1.14

Autres CVE de Travelpayouts: All Travel Brands in One Place

Les 3 CVE de Travelpayouts: All Travel Brands in One Place →
CVE-2023-5934 The Travelpayouts: All Travel Brands in One Place WordPress plugin before 1.1.13 does not have CSRF check in place… 7.3 Élevée CVE-2024-0337 The Travelpayouts: All Travel Brands in One Place WordPress plugin through 1.1.15 is vulnerable to Open Redirect due… 6.1 Moyenne
Suivre cette CVE