Aller au contenu
Se connecter
4.8 Moyenne

CVE-2024-3999 The EazyDocs WordPress plugin before 2.5.0 does not sanitise and escape some of its settings, which could allow high…

Description

The EazyDocs WordPress plugin before 2.5.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)

Produits et versions touchés

Produit Versions touchées Corrigé en
EazyDocs 2.5 premières → < 2.5.0 2.5.0
EazyDocs 2.5 premières → < 2.5.0 2.5.0

Autres CVE de EazyDocs

Les 4 CVE de EazyDocs →
CVE-2024-0248 The EazyDocs WordPress plugin before 2.4.0 re-introduced CVE-2023-6029… 4.3 Moyenne CVE-2023-6029 The EazyDocs WordPress plugin before 2.3.6 does not have authorization and CSRF checks when handling documents and… 7.5 Élevée CVE-2023-6035 The EazyDocs WordPress plugin before 2.3.4 does not properly sanitize and escape "data" parameter before using it in… Non notée
Suivre cette CVE