CVE-2024-4757

Logo Manager For Enamad <= 0.7.0 - Stored XSS via CSRF

CVSS 8.1 HIGHEPSS 0.5%

The Logo Manager For Enamad WordPress plugin through 0.7.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Produtos afetados

Unknown · Logo Manager For Enamad

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://wpscan.com/vulnerability/b54b55e0-b184-4c90-ba94-feda0997bf2a/