Lucene search
HistoryJun 14, 2024 - 6:15 a.m.
CVE-2024-5155
inquiry cart
wordpress plugin
csrf attack
stored xss payloads
sanitisation
escaping
0.0004 Low
EPSS
Percentile
9.1%
The Inquiry cart WordPress plugin through 3.4.2 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack
Related
cve
cve
CVE-2024-5155
2024-06-14 06:15:13
wpvulndb
wpvulndb
Inquiry Cart <= 3.4.2 - Stored XSS via CSRF
2024-05-24 00:00:00
cvelist
cvelist
CVE-2024-5155 Inquiry Cart <= 3.4.2 - Stored XSS via CSRF
2024-06-14 06:00:05
wpexploit
wpexploit
Inquiry Cart <= 3.4.2 - Stored XSS via CSRF
2024-05-24 00:00:00
vulnrichment
vulnrichment
CVE-2024-5155 Inquiry Cart <= 3.4.2 - Stored XSS via CSRF
2024-06-14 06:00:05
wordfence
wordfence