5 matches found
CVE-2024-43984
Cross-Site Request Forgery CSRF vulnerability in Podlove Podlove Podcast Publisher allows Code Injection.This issue affects Podlove Podcast Publisher: from n/a through 4.1.13...
CVE-2024-43984
Cross-Site Request Forgery CSRF vulnerability in Podlove Podlove Podcast Publisher allows Code Injection.This issue affects Podlove Podcast Publisher: from n/a through 4.1.13...
CVE-2024-43984
CVE-2024-43984 affects Podlove Podlove Podcast Publisher for WordPress (versions prior to 4.1.14). The issue is CSRF that enables remote code execution (RCE) via code injection. Remediation: upgrade to Podlove Podlove Podcast Publisher 4.1.14 or newer (or apply vendor-provided fixes); patch detai...
CVE-2024-43984 WordPress Podlove Podcast Publisher plugin <= 4.1.13 - CSRF to Remote Code Execution (RCE) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Podlove Podlove Podcast Publisher allows Code Injection.This issue affects Podlove Podcast Publisher: from n/a through 4.1.13...
WordPress Podlove Podcast Publisher Plugin <= 4.1.13 is vulnerable to Cross Site Request Forgery (CSRF)
Software Podlove Podcast Publisher Type Plugin Vulnerable versions = 4.1.13 Fixed in 4.1.14 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-43984 Patch priority High CVSS severity High 9.6 Developer Claim ownership PSID b38f22b27679 Credits...