Lucene search
WPScanCVELIST:CVE-2024-8054HistorySep 12, 2024 - 6:00 a.m.
CVE-2024-8054 MM-Breaking News <= 0.7.9 - Stored XSS via CSRF
2024-09-1206:00:06
WPScan
www.cve.org
3
wordpress
plugin
stored xss
csrf
attack
admin
vulnerability
sanitisation
escaping
EPSS
0.001
Percentile
17.7%
The MM-Breaking News WordPress plugin through 0.7.9 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.
CNA Affected
[
{
"vendor": "Unknown",
"product": "MM-Breaking News",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThanOrEqual": "0.7.9"
}
],
"defaultStatus": "affected"
}
]Related
vulnrichment
vulnrichment
CVE-2024-8054 MM-Breaking News <= 0.7.9 - Stored XSS via CSRF
2024-09-12 06:00:06
nvd
nvd
CVE-2024-8054
2024-09-12 06:15:25
cve
cve
CVE-2024-8054
2024-09-12 06:15:25
wordfence
wordfence