Today > vulnerabilities - You can now download lists of IOCs here!

CVE-2024-10515

Nov. 21, 2024, 1:57 p.m.

CVSS Score

3.5 / 10

Product(s) Impacted

Squirrly SEO WordPress plugin

before 12.3.21

Description

In the process of testing the SEO Plugin by Squirrly SEO WordPress plugin before 12.3.21, a vulnerability was found that allows you to implement Stored XSS on behalf of the editor by embedding malicious script, which entails account takeover backdoor

Weaknesses

Date

Published: Nov. 20, 2024, 6:15 a.m.

Last Modified: Nov. 21, 2024, 1:57 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

contact@wpscan.com

CVSS Data

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

Base Score

3.5

Exploitability Score

0.9

Impact Score

2.5

Base Severity

LOW

CVSS Vector String

The CVSS vector string provides an in-depth view of the vulnerability metrics.

View Vector String

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N

References

https://wpscan.com/ contact@wpscan.com