Non évaluée

reCAPTCHA Jetpack <= 0.2.2 - Stored XSS via CSRF

CVE-2024-3941 Première détection SecPulse May 10, 2024

Description d'origine La description telle que publiée par la source (souvent en anglais).

The reCAPTCHA Jetpack WordPress plugin through 0.2.2 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged-in admin add Stored XSS payloads via a CSRF attack.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory github.com
advisory nvd.nist.gov
report wpscan.com

Faits clés

Gravité: Non évaluée
Publication: May 10, 2024
Première détection SecPulse: May 10, 2024

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:04