6.5
Moyenne
CVE-2024-38720 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in EazyDocs…
Description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in EazyDocs eazydocs allows Stored XSS.This issue affects EazyDocs: from n/a through 2.5.0.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| EazyDocs 2.5 | premières → 2.5.0 | Pas de correctif indiqué |
Autres CVE de EazyDocs
Les 5 CVE de EazyDocs →
CVE-2023-47648
Missing Authorization vulnerability in Spider Themes EazyDocs eazydocs allows Exploiting Incorrectly Configured Access…
7.5
Élevée
CVE-2024-54376
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…
7.5
Élevée
CVE-2024-38721
Missing Authorization vulnerability in spider-themes EazyDocs allows Exploiting Incorrectly Configured Access Control…
7.1
Élevée
CVE-2024-3999
The EazyDocs WordPress plugin before 2.5.0 does not sanitise and escape some of its settings, which could allow high…
4.8
Moyenne