CVE-2021-24730CWE-352CWE-862

CVE-2021-24730: falha em Logo Showcase with Slick Slider – Logo…

Logo Showcase with Slick Slider < 1.2.5 - Subscriber+ Arbitrary Media Title/Description/Alt Text/URL Update

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Logo Showcase with Slick Slider – Logo Carousel, Logo Slider & Logo Grid

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 0.3%
The Logo Showcase with Slick Slider WordPress plugin before 1.2.5 does not have CSRF and authorisation checks in the lswss_save_attachment_data AJAX action, allowing any authenticated users, such as Subscriber, to change title, description, alt text, and URL of arbitrary uploaded media.
Produtos afetados
Unknown · Logo Showcase with Slick Slider – Logo Carousel, Logo Slider & Logo Grid
CVEs relacionadas — Logo Showcase with Slick Slider – Logo…

No mesmo produto, das mais perigosas para as menos.

CVE-2021-24729—Logo Showcase with Slick Slider < 1.2.4 - Author+ Stored Cross Site ScriptingEPSS 0.6%CVE-2021-24913—Logo Showcase with Slick Slider < 2.0.1 - Arbitrary Media Title/Description/Alt Text/URL Update via CSRFEPSS 0.5%