4.3
Moyenne
CVE-2024-4086 The CM Tooltip Glossary – Powerful Glossary Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in…
Description
The CM Tooltip Glossary – Powerful Glossary Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.2.11. This is due to missing or incorrect nonce validation when saving settings. This makes it possible for unauthenticated attackers to change the plugin's settings or reset them via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| CM Tooltip Glossary 4.2 | premières → 4.2.11 | Pas de correctif indiqué |
Autres CVE de CM Tooltip Glossary
Les 4 CVE de CM Tooltip Glossary →
CVE-2024-11202
Multiple plugins for WordPress are vulnerable to Reflected Cross-Site Scripting via the cminds_free_guide shortcode in…
6.1
Moyenne
CVE-2024-48041
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in…
6.5
Moyenne
CVE-2024-43149
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in…
6.5
Moyenne