Aller au contenu
Se connecter
6.1 Moyenne

CVE-2024-3966 The Pray For Me WordPress plugin through 1.0.4 does not sanitise and escape some parameters, which could unauthenticated…

Description

The Pray For Me WordPress plugin through 1.0.4 does not sanitise and escape some parameters, which could unauthenticated visitors to perform Cross-Site Scripting attacks that trigger when an admin visits the Prayer Requests in the WP Admin

Produits et versions touchés

Produit Versions touchées Corrigé en
Pray For Me 1.0 premières → 1.0.4 Pas de correctif indiqué

Autres CVE de Pray For Me

Les 2 CVE de Pray For Me →
CVE-2024-3965 The Pray For Me WordPress plugin through 1.0.4 does not have CSRF check in place when updating its settings, which could… 5.4 Moyenne
Suivre cette CVE