Aller au contenu
en Se connecter
5.4 Moyenne

CVE-2024-3058 The ENL Newsletter WordPress plugin through 1.0.1 does not have CSRF check in some places, and is missing sanitisation…

Description

The ENL Newsletter WordPress plugin through 1.0.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack

Produits et versions touchés

Produit Versions touchées Corrigé en
ENL Newsletter 1.0 premières → 1.0.1 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de ENL Newsletter

Les 3 CVE de ENL Newsletter →
CVE-2024-3060 The ENL Newsletter WordPress plugin through 1.0.1 does not sanitize and escape a parameter before using it in a SQL… 4.5 Moyenne CVE-2024-3059 The ENL Newsletter WordPress plugin through 1.0.1 does not have CSRF checks in some places, which could allow… 5.7 Moyenne
Suivre cette CVE