Aller au contenu
Se connecter
6.3 Moyenne

CVE-2024-10262 The The Drop Shadow Boxes plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and…

Description

The The Drop Shadow Boxes plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.7.14. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for authenticated attackers, with Subscriber-level access and above, to execute arbitrary shortcodes.

Produits et versions touchés

Produit Versions touchées Corrigé en
Drop Shadow Boxes 1.7 premières → 1.7.14 Pas de correctif indiqué

Autres CVE de Drop Shadow Boxes

Les 3 CVE de Drop Shadow Boxes →
CVE-2022-4974 The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request… 6.3 Moyenne CVE-2023-5469 The Drop Shadow Boxes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'dropshadowbox' shortcode in… 6.4 Moyenne
Suivre cette CVE