Aller au contenu
en Se connecter
5.4 Moyenne

CVE-2024-6710 The Ditty WordPress plugin before 3.1.45 does not sanitise and escape some parameters, which could allow users with a…

Description

The Ditty WordPress plugin before 3.1.45 does not sanitise and escape some parameters, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks.

Produits et versions touchés

Produit Versions touchées Corrigé en
Ditty 3.1 premières → < 3.1.45 3.1.45
Ditty 3.1 premières → < 3.1.45 3.1.45

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Ditty

Les 8 CVE de Ditty →
CVE-2025-8085 The Ditty WordPress plugin before 3.1.58 lacks authorization and authentication for requests to its displayItems… 8.6 Élevée CVE-2024-13357 The Ditty WordPress plugin before 3.1.52 does not sanitise and escape some of its settings, which could allow high… 4.8 Moyenne CVE-2024-9600 The Ditty WordPress plugin before 3.1.47 does not sanitise and escape some of its settings, which could allow high… 4.8 Moyenne CVE-2024-6715 The Ditty WordPress plugin before 3.1.46 re-introduced a previously fixed security issue… 6.1 Moyenne
Suivre cette CVE