CVE-2024-7649 in Opal Membership Plugin情報

要約

〜によって MITRE • 2024年08月12日

The Opal Membership plugin for WordPress is vulnerable to Stored Cross-Site Scripting via checkout form fields in all versions up to, and including, 1.2.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

予約する

2024年08月09日

公開

2024年08月12日

モデレーション

承諾済み

エントリ

VDB-274106

CPE

準備完了

CWE

CWE-79 (確認済み)

CVSS

4.3 (VulDB)

EPSS

0.00490

KEV

いいえ

アクティビティ

非常低い

セクター

Hostingprovider

ソース

MITRE	https://www.cve.org/CVERecord?id=CVE-2024-7649
NVD	https://nvd.nist.gov/vuln/detail/CVE-2024-7649
CVE Details	https://www.cvedetails.com/cve/CVE-2024-7649/

◂ 前概要次 ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!