Microsoft

Clarity

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2024-0590

  • EPSS 30.3%
  • Published 29.02.2024 01:43:22
  • Last modified 04.03.2025 12:24:19

The Microsoft Clarity plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.9.3. This is due to missing nonce validation on the edit_clarity_project_id() function. This makes it possible for unauthen...

5.4

CVE-2021-33850

Exploit
  • EPSS 0.62%
  • Published 19.11.2021 16:15:07
  • Last modified 21.11.2024 06:09:41

There is a Cross-Site Scripting vulnerability in Microsoft Clarity version 0.3. The XSS payload executes whenever the user changes the clarity configuration in Microsoft Clarity version 0.3. The payload is stored on the configuring project Id page.