Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8
CVE-2024-6926
- EPSS 65.97%
- Published 04.09.2024 06:15:17
- Last modified 07.10.2024 15:29:08
The Viral Signup WordPress plugin through 2.1 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection
4.8
CVE-2024-6927
- EPSS 0.08%
- Published 29.08.2024 11:15:28
- Last modified 07.10.2024 15:56:30
The Viral Signup WordPress plugin through 2.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallow...
1