3 matches found
CVE-2024-43252 WordPress Crew HRM plugin <= 1.1.1 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Crew HRM Crew HRM hr-management.This issue affects Crew HRM: from n/a through = 1.1.1...
9CVSS0.00442EPSS
SaveExploits0References1
CVE-2024-43252
CVE-2024-43252 affects the WordPress plugin "Crew HRM" (Employee, Leave and Recruitment Management System) version
9CVSS5.9AI score0.00442EPSS
SaveExploits0References1
WordPress Crew HRM Plugin <= 1.1.1 is vulnerable to PHP Object Injection
Software Crew HRM Type Plugin Vulnerable versions = 1.1.1 Fixed in 1.1.2 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-43252 Patch priority High CVSS severity High 9 Developer Sekander Badsha PSID e529c4ddfdc3 Credits CatFather Required privilege Unauthenticated...
9CVSS6.8AI score0.00442EPSS
SaveExploits0References2Affected Software1
20