CVE-2024-1745

Testimonial Slider < 2.3.7 - Author+ Settings Update

CVSS 4.3 MEDIUMEPSS 0.4%

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 4.3EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

26 mar 2024Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

The Testimonial Slider WordPress plugin before 2.3.7 does not properly ensure that a user has the necessary capabilities to edit certain sensitive Testimonial Slider WordPress plugin before 2.3.7 settings, making it possible for users with at least the Author role to edit them.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Produtos afetados

Unknown · Testimonial Slider

Referências

https://wpscan.com/vulnerability/b63bbfeb-d6f7-4c33-8824-b86d64d3f598/