Lucene search

PatchstackCVE-2024-23510

HistoryMar 27, 2024 - 2:15 p.m.

CVE-2024-23510

2024-03-2714:15:09

CWE-352

Patchstack

web.nvd.nist.gov

csrf

martyn chamberlin

don't muck my markup

vulnerability

versions

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

AI Score

6.8

Confidence

Low

EPSS

Percentile

9.0%

JSON

Cross-Site Request Forgery (CSRF) vulnerability in Martyn Chamberlin Don’t Muck My Markup.This issue affects Don’t Muck My Markup: from n/a through 1.8.

Affected configurations

Vulners

Node

martyn_chamberlindon\'t_muck_my_markupRange≤1.8wordpress

VendorProductVersionCPE
martyn_chamberlindon\'t_muck_my_markup*cpe:2.3:a:martyn_chamberlin:don\'t_muck_my_markup:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
martyn_chamberlin	don\'t_muck_my_markup	*	cpe:2.3:a:martyn_chamberlin:don\'t_muck_my_markup::::::wordpress::*

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "dont-muck-my-markup",
    "product": "Don't Muck My Markup",
    "vendor": "Martyn Chamberlin",
    "versions": [
      {
        "lessThanOrEqual": "1.8",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/dont-muck-my-markup/wordpress-don-t-muck-my-markup-plugin-1-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

AI Score

6.8

Confidence

Low

EPSS

Percentile

9.0%

JSON

Related for CVE-2024-23510