Lucene search
WPScanCVELIST:CVE-2024-5155HistoryJun 14, 2024 - 6:00 a.m.
CVE-2024-5155 Inquiry Cart <= 3.4.2 - Stored XSS via CSRF
2024-06-1406:00:05
WPScan
www.cve.org
5
cve-2024-5155
inquiry cart
wordpress plugin
stored xss
csrf
admin
attack
0.0004 Low
EPSS
Percentile
9.0%
The Inquiry cart WordPress plugin through 3.4.2 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack
CNA Affected
[
{
"vendor": "Unknown",
"product": "Inquiry cart",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThanOrEqual": "3.4.2"
}
],
"defaultStatus": "affected"
}
]Related
cve
cve
CVE-2024-5155
2024-06-14 06:15:13
wpvulndb
wpvulndb
Inquiry Cart <= 3.4.2 - Stored XSS via CSRF
2024-05-24 00:00:00
nvd
nvd
CVE-2024-5155
2024-06-14 06:15:13
vulnrichment
vulnrichment
CVE-2024-5155 Inquiry Cart <= 3.4.2 - Stored XSS via CSRF
2024-06-14 06:00:05
wpexploit
wpexploit
Inquiry Cart <= 3.4.2 - Stored XSS via CSRF
2024-05-24 00:00:00
wordfence
wordfence