CVE-2024-4757

Logo Manager For Enamad <= 0.7.0 - Stored XSS via CSRF

CVSS 8.1 HIGHEPSS 0.5%

Vexday Risk Score

21Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 8.1EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

25 jun 2024Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

The Logo Manager For Enamad WordPress plugin through 0.7.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Produtos afetados

Unknown · Logo Manager For Enamad

Referências

https://wpscan.com/vulnerability/b54b55e0-b184-4c90-ba94-feda0997bf2a/