One Article Review
| Source |  CVE Liste |
|---|---|
| Identifiant | 4024851 |
| Date de publication | 2022-01-24 08:15:08 (vue: 2022-01-24 12:06:27) |
| Titre | CVE-2021-24974 |
| Texte | The Product Feed PRO for WooCommerce WordPress plugin before 11.0.7 does not have authorisation and CSRF check in some of its AJAX actions, allowing any authenticated users to call then, which could lead to Stored Cross-Site Scripting issue (which will be triggered in the admin dashboard) due to the lack of escaping. |
| Envoyé | Oui |
| Condensat | 2021 24974 actions admin ajax allowing any authenticated authorisation before call check could cross csrf cve dashboard does due escaping feed have issue its lack lead not plugin pro product scripting site some stored then triggered users which will woocommerce wordpress |
| Tags | Guideline |
| Stories | |
| Notes | |
| Move | 
|
L'article ne semble pas avoir été repris aprés sa publication.
L'article ne semble pas avoir été repris sur un précédent.