PT-2024-30806 · Latepoint · Latepoint

Name of the Vulnerable Software and Affected Versions: LatePoint versions through 4.9.91 Description: A Cross-Site Request Forgery CSRF issue affects LatePoint, allowing unauthorized actions to be performed on behalf of a user without their knowledge. This can be exploited by an attacker to perfo...

CVE-2024-43992

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Latepoint LatePoint allows Stored XSS.This issue affects LatePoint: from n/a through 4.9.91...

WordPress LatePoint Plugin <= 4.9.91 is vulnerable to Cross Site Request Forgery (CSRF)

Software LatePoint Type Plugin Vulnerable versions = 4.9.91 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-43945 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 6bcffe080a16 Credits Ananda Dhakal Patchstack...