CVE-2024-7649 in Opal Membership Plugin정보

요약

\~에 의해 MITRE • 2024. 08. 12.

The Opal Membership plugin for WordPress is vulnerable to Stored Cross-Site Scripting via checkout form fields in all versions up to, and including, 1.2.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

예약하다

2024. 08. 09.

공개

2024. 08. 12.

모더레이션

수락

항목

VDB-274106

CPE

준비됨

CWE

CWE-79 (확인됨)

CVSS

4.3 (VulDB)

EPSS

0.00490

KEV

아니요

활동

매우 낮음

부문

Hostingprovider

출처

MITRE	https://www.cve.org/CVERecord?id=CVE-2024-7649
NVD	https://nvd.nist.gov/vuln/detail/CVE-2024-7649
CVE Details	https://www.cvedetails.com/cve/CVE-2024-7649/

◂ 이전 개요 다음 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!