CVE-2024-52477

Cross-Site Request Forgery CSRF vulnerability in docxpresso Document & Data Automation document-data-automation allows Stored XSS.This issue affects Document & Data Automation: from n/a through = 1.6.1...

CVE-2024-52477

creationtimestamp| type| source ---|---|--- 2024-12-02 15:06:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113583848117318001...

CVE-2024-52477

CVE-2024-52477 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Document & Data Automation from No-nonsense Labs that leads to Stored XSS. Affected versions are prior to 1.6.1; remediation is to update to 1.6.1 or later. The CVSS v3.1 base score is 7.1 (HIGH), with NET...

WordPress Document & Data Automation Plugin <= 1.6.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Document & Data Automation Type Plugin Vulnerable versions = 1.6.1 Fixed in 1.6.2 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-52477 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID c4664f023a91 Credits SOPROBRO...