CVE-2024-0710

CVE-2024-0710 脆弱性: CVE-2024-0710 認証なしフォーム送信による一意識別子の改ざん CVSS: 5.3 Medium ソフトウェア: GP Unique ID gp-unique-id 影響を受けるバージョン: = 1.5.5 修正バージョン: 1.5.6 開発者: Gravity Wiz 研究者: Karl Emil Nikka, Nikka Systems 公開日: 2024-04-10 最終更新日: 2024-04-18 概要...

CVE-2023-2707 Appointment booking addon for Gravity Forms <= 1.9.5.1 - Admin+ Stored XSS

The gAppointments WordPress plugin through 1.9.5.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...