CVE-2024-54439 WordPress Amazon Product Price plugin <= 1.1 - CSRF to Stored XSS vulnerability

🗓️ 16 Dec 2024 14:41:13Reported by PatchstackType

Cross-Site Request Forgery vulnerability in Amazon Product Price plugin allows Stored XSS attack.

Reporter	Title	Published	Views	Family All 4
CVE	CVE-2024-54439	16 Dec 202415:15	–	cve
NVD	CVE-2024-54439	16 Dec 202415:15	–	nvd
Cvelist	CVE-2024-54439 WordPress Amazon Product Price plugin <= 1.1 - CSRF to Stored XSS vulnerability	16 Dec 202414:13	–	cvelist
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (December 9, 2024 to December 15, 2024)	19 Dec 202417:13	–	wordfence

Source	Link
patchstack	www.patchstack.com/database/wordpress/plugin/amazon-product-price/vulnerability/wordpress-amazon-product-price-plugin-1-1-csrf-to-stored-xss-vulnerability

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

16 Dec 2024 14:13Current

6.8Medium risk

Vulners AI Score6.8

CVSS37.1

EPSS0.0004

SSVC

CWE-352