Lucene search
HistoryJun 14, 2024 - 6:15 a.m.
CVE-2024-3993
azan plugin
wordpress
csrf
vulnerabilities
data sanitisation
stored xss payloads
0.0004 Low
EPSS
Percentile
9.1%
The AZAN Plugin WordPress plugin through 0.6 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack
Related
cvelist
cvelist
CVE-2024-3993 AZAN Plugin <= 0.6 - Stored XSS via CSRF
2024-06-14 06:00:04
wpvulndb
wpvulndb
AZAN Plugin <= 0.6 - Stored XSS via CSRF
2024-05-24 00:00:00
wpexploit
wpexploit
AZAN Plugin <= 0.6 - Stored XSS via CSRF
2024-05-24 00:00:00
vulnrichment
vulnrichment
CVE-2024-3993 AZAN Plugin <= 0.6 - Stored XSS via CSRF
2024-06-14 06:00:04
cve
cve
CVE-2024-3993
2024-06-14 06:15:12
wordfence
wordfence