5 matches found
CVE-2024-52477
CVE-2024-52477 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Document & Data Automation from No-nonsense Labs that leads to Stored XSS. Affected versions are prior to 1.6.1; remediation is to update to 1.6.1 or later. The CVSS v3.1 base score is 7.1 (HIGH), with NET...
7.1CVSS7.2AI score0.00166EPSS
SaveExploits0References1
20