CVE-2024-9589
- EPSS 0.09%
- Veröffentlicht 22.10.2024 08:15:04
- Zuletzt bearbeitet 29.10.2024 16:07:54
The Category and Taxonomy Meta Fields plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'new_meta_name' parameter in the 'wpaft_option_page' function in versions up to, and including, 1.0.0 due to insufficient input sanitizati...
CVE-2024-9590
- EPSS 0.09%
- Veröffentlicht 22.10.2024 08:15:04
- Zuletzt bearbeitet 29.10.2024 16:07:43
The Category and Taxonomy Meta Fields plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the image meta field value in the 'wpaft_add_meta_textinput' function in versions up to, and including, 1.0.0 due to insufficient input saniti...
CVE-2024-9588
- EPSS 0.03%
- Veröffentlicht 22.10.2024 08:15:03
- Zuletzt bearbeitet 25.10.2024 21:15:39
The Category and Taxonomy Meta Fields plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.0. This is due to missing or incorrect nonce validation on the 'wpaft_option_page' function. This makes it po...