CVE-2024-27278 in opTimelinePlugin

Riassunto

di MITRE • 06/03/2024

OpenPNE Plugin "opTimelinePlugin" 1.2.11 and earlier contains a cross-site scripting vulnerability. On the site which uses the affected product, when a user configures the profile with some malicious contents, an arbitrary script may be executed on the web browsers of other users.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Prenotare: 22/02/2024
• Divulgazione: 06/03/2024
• Moderazione: accettato
• Voce: VDB-255851
• CPE: pronto
• CWE: CWE-79 (confermato)
• CVSS: 5.4 (NVD)
• EPSS: 0.00340
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-27278
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-27278
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-27278/