CVE-2024-7817

Misiek Photo Album <= 1.4.3 - Album Deletion via CSRF

CVSS 6.5 MEDIUMEPSS 0.2%CWE-352

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 6.5EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

12 set 2024Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

The Misiek Photo Album WordPress plugin through 1.4.3 does not have CSRF checks in some places, which could allow attackers to make logged in users delete arbitrary albums via a CSRF attack

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Produtos afetados

Unknown · Misiek Photo Album

Referências

https://wpscan.com/vulnerability/ab09e5a3-f5ea-479f-be2d-366f8707775e/