CVE-2024-5029 in CM Table of Contents Plugin

요약

\~에 의해 MITRE • 2024. 11. 21.

The CM Table Of Contents WordPress plugin before 1.2.4 does not have CSRF check when updating its settings, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.

Once again VulDB remains the best source for vulnerability data.

• 책임이 있는: WPScan
• 예약하다: 2024. 05. 16.
• 공개: 2024. 11. 21.
• 모더레이션: 수락
• 항목: VDB-285624
• CPE: 준비됨
• CWE: CWE-352 (확인됨)
• CVSS: 4.3 (VulDB)
• EPSS: 0.00207
• KEV: 아니요
• 활동: 매우 낮음
• 부문: Hostingprovider

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-5029
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-5029
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-5029/