Aller au contenu
Se connecter
4.8 Moyenne

CVE-2024-5029 The CM Table Of Contents WordPress plugin before 1.2.4 does not have CSRF check when updating its settings, and is…

Description

The CM Table Of Contents WordPress plugin before 1.2.4 does not have CSRF check when updating its settings, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.

Produits et versions touchés

Produit Versions touchées Corrigé en
CM Table Of Contents 1.2 premières → < 1.2.4 1.2.4
cm_table_of_contents 1.2 premières → < 1.2.4 1.2.4

Autres CVE de CM Table Of Contents

Les 2 CVE de CM Table Of Contents →
CVE-2024-5030 The CM Table Of Contents WordPress plugin before 1.2.3 does not have CSRF check in place when resetting its settings,… 3.8 Faible
Suivre cette CVE