CVE-2024-8243 in Plugin Upgrade Time Out Plugin

摘要

由 MITRE • 2025-04-09

The WordPress/Plugin Upgrade Time Out Plugin WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• 负责: WPScan
• 预定: 2024-08-27
• 披露: 2025-04-09
• 管理: 已接受
• 条目: VDB-304106
• CPE: 准备好
• CWE: CWE-352 (已确认)
• CVSS: 4.3 (VulDB)
• EPSS: 0.00146
• KEV: 否
• 活动: 非常低
• 部门: Hostingprovider

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-8243
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-8243
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-8243/