Lucene search
+L

6 matches found

Cvelist
Cvelist
•added 2024/12/02 1:48 p.m.•30 views

CVE-2024-52477 WordPress Document & Data Automation plugin <= 1.6.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in docxpresso Document & Data Automation document-data-automation allows Stored XSS.This issue affects Document & Data Automation: from n/a through = 1.6.1...

7.1CVSS0.00173EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/02 1:48 p.m.•8 views

CVE-2024-52477 WordPress Document & Data Automation plugin <= 1.6.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in No-nonsense Labs Document & Data Automation allows Stored XSS.This issue affects Document & Data Automation: from n/a through 1.6.1...

7.1CVSS6.8AI score0.00173EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/02 1:48 p.m.•61 views

CVE-2024-52477

CVE-2024-52477 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Document & Data Automation from No-nonsense Labs that leads to Stored XSS. Affected versions are prior to 1.6.1; remediation is to update to 1.6.1 or later. The CVSS v3.1 base score is 7.1 (HIGH), with NET...

7.1CVSS7.2AI score0.00173EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/02 12:00 a.m.•5 views

CVE-2024-52477: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in docxpresso Document & Data Automation document-data-automation allows Stored XSS.This issue affects Document & Data Automation: from n/a through = 1.6.1...

7.1CVSS5.8AI score0.00173EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/02 12:00 a.m.•14 views

PT-2024-35317 · No Nonsense · Document & Data Automation

Name of the Vulnerable Software and Affected Versions: No-nonsense Labs Document & Data Automation versions prior to 1.6.1 Description: The issue is related to a Cross-Site Request Forgery CSRF problem that allows Stored XSS. This means an attacker can trick a user into performing unintended...

7.1CVSS9.4AI score0.00173EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/12/02 12:00 a.m.•15 views

WordPress plugin Document & Data Automation 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

7.1CVSS8.1AI score0.00173EPSS
SaveExploits0References1
Rows per page
Query Builder