CVE-2024-51648

creationtimestamp| type| source ---|---|--- 2024-11-19 19:52:35+00:00| seen| https://infosec.exchange/users/cve/statuses/113511363717929996...

CVE-2024-51648

Cross-Site Request Forgery CSRF vulnerability in hands01 e-shops e-shops-cart2 allows Reflected XSS.This issue affects e-shops: from n/a through = 1.0.3...

CVE-2024-51648

CVE-2024-51648 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin “e-shops” (e-shops-cart2) version

WordPress e-shops Plugin <= 1.0.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software e-shops Type Plugin Vulnerable versions = 1.0.3 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51648 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 41a29a656a44 Credits SOPROBRO Required privilege...