CVE-2024-3076

The MM-email2image WordPress plugin through 0.2.5 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

CVE-2024-3076

The MM-email2image WordPress plugin through 0.2.5 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

CVE-2024-3076 MM-email2image <= 0.2.5 - Stored XSS via CSRF

The MM-email2image WordPress plugin through 0.2.5 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

CVE-2024-3076 MM-email2image <= 0.2.5 - Stored XSS via CSRF

The MM-email2image WordPress plugin through 0.2.5 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

CVE-2024-3076

CVE-2024-3076 affects the MM-email2image WordPress plugin (versions up to 0.2.5). Public Red Hat/NVD entries describe lack of CSRF checks in some areas and missing sanitisation/escaping, enabling a logged-in admin to store XSS payloads via CSRF. Public sources corroborate Stored XSS via CSRF in M...

WordPress MM-email2image Plugin <= 0.2.5 is vulnerable to Cross Site Request Forgery (CSRF)

Software MM-email2image Type Plugin Vulnerable versions = 0.2.5 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-3076 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID d22a3c43fc0d Credits Bob Matyas Required...