Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.

Products

WordPress Plugin sitetweet

Source

contact@wpscan.com

CVE-2024-5767 details

Published : July 2, 2024, 6:15 a.m.
Last Modified : July 2, 2024, 12:09 p.m.

Description

The sitetweet WordPress plugin through 0.2 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack

CVSS Score

1	2	3	4	5	6	7	8	9	10

Weakness

Weakness	Name	Description

References

URL	Source
https://wpscan.com/vulnerability/e4ba26b4-5f4f-4c9e-aa37-885b30ef8088/	contact@wpscan.com

This website uses the NVD API, but is not approved or certified by it.

CVE-2024-5767