CVE-2024-53712

Cross-Site Request Forgery CSRF vulnerability in kevmimcc Kevin's kevins-plugin allows Stored XSS.This issue affects Kevin's: from n/a through = 2.0.0...

CVE-2024-53712

creationtimestamp| type| source ---|---|--- 2024-12-02 17:36:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113584438574544520...

CVE-2024-53712 WordPress Kevin's plugin <= 2.0.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in kevmimcc Kevin's kevins-plugin allows Stored XSS.This issue affects Kevin's: from n/a through = 2.0.0...

CVE-2024-53712

CVE-2024-53712 is a Cross-Site Request Forgery leading to Stored XSS in the WordPress plugin Kevin's Plugin (versions n/a through 2.0.0). The vulnerability affects Kevin's Plugin

WordPress Kevin's Plugin <= 2.0.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Kevin's Type Plugin Vulnerable versions = 2.0.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-53712 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 3dc43c4ca7f8 Credits SOPROBRO Required privilege...