CVE-2024-43304highCWE-79

CVE-2024-43304: falha de alta gravidade em Cool Plugins Cryptocurrency Widgets – Price…

WordPress Cryptocurrency Widgets plugin <= 2.8.0 - Reflected Cross Site Scripting (XSS) vulnerability

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Cryptocurrency Widgets – Price Ticker & Coins List

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.1epss 0.3%
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Cool Plugins Cryptocurrency Widgets – Price Ticker & Coins List allows Reflected XSS.This issue affects Cryptocurrency Widgets – Price Ticker & Coins List: from n/a through 2.8.0.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Produtos afetados
Cool Plugins · Cryptocurrency Widgets – Price Ticker & Coins List
CVEs relacionadas — Cool Plugins Cryptocurrency Widgets – Price…

No mesmo produto, das mais perigosas para as menos.

CVE-2023-36681MEDIUMWordPress Cryptocurrency Widgets – Price Ticker & Coins List plugin <= 2.6.2 - Broken Access Control vulnerabilityEPSS 0.9%CVE-2024-27953MEDIUMWordPress Cryptocurrency Widgets – Price Ticker & Coins List Plugin <= 2.6.8 is vulnerable to Broken Access ControlEPSS 0.4%