PT-2024-39350 · WordPress · Broken Link Checker

🗓️ 30 Sep 2024 00:00:00Reported by Positive TechnologiesType

WordPress Broken Link Checker up to 2.4.0 has a reflected cross site scripting flaw via add_query_arg in admin notices; update or restrict access.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2024-8981	1 Oct 202406:02	–	circl
CNNVD	WordPress plugin Broken Link Checker 安全漏洞	1 Oct 202400:00	–	cnnvd
CVE	CVE-2024-8981	1 Oct 202402:33	–	cve
Cvelist	CVE-2024-8981 Broken Link Checker <= 2.4.0 - Reflected Cross-Site Scripting	1 Oct 202402:33	–	cvelist
EUVD	EUVD-2024-49521	3 Oct 202520:07	–	euvd
NVD	CVE-2024-8981	1 Oct 202403:15	–	nvd
OpenVAS	WordPress Broken Link Checker Plugin < 2.4.1 XSS Vulnerability	30 Oct 202400:00	–	openvas
Patchstack	WordPress Broken Link Checker Plugin <= 2.4.0 is vulnerable to Cross Site Scripting (XSS)	1 Oct 202400:00	–	patchstack
Patchstack	WordPress Broken Link Checker plugin <= 2.4.0 - Reflected Cross-Site Scripting vulnerability	1 Oct 202406:09	–	patchstack
RedhatCVE	CVE-2024-8981	4 Feb 202522:30	–	redhatcve

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-8981
twitter	www.twitter.com/cracbot/status/1842082323850002609
twitter	www.twitter.com/cracbot/status/1842807041280417955
twitter	www.twitter.com/CVEnew/status/1840945246643064912
plugins	www.plugins.trac.wordpress.org/changeset/3159860/broken-link-checker/trunk/app/admin-notices/features/class-view.php
t	www.t.me/latest_high_impact_cve/1239
plugins	www.plugins.trac.wordpress.org/browser/broken-link-checker/tags/2.4.0/app/admin-notices/features/class-view.php
twitter	www.twitter.com/AegisLens/status/1842108900570431838
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/429fe34a-5fa9-4032-9b21-4de114dbc9d1
twitter	www.twitter.com/VulmonFeeds/status/1840989352471478589

06 Oct 2024 00:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.17.1

EPSS0.02356

SSVC