CVE-2024-27197 WordPress BeePress plugin <= 6.9.8 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Bee BeePress allows Stored XSS.This issue affects BeePress: from n/a through 6.9.8...

CVE-2024-27197

CVE-2024-27197 is a CSRF-to-Stored XSS vulnerability in the WordPress BeePress plugin (Beepress) affecting versions through 6.9.8. Exploitation details in connected sources indicate the issue can be triggered via beepress-pro.php, enabling stored XSS. Remediation/recommendations are not consisten...

WordPress BeePress Plugin <= 6.9.8 is vulnerable to Cross Site Request Forgery (CSRF)

Software BeePress Type Plugin Vulnerable versions = 6.9.8 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-27197 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 23f23a1e9a56 Credits Majed Refaea Required...