CVE-2023-39165

Description

References

• patchstack.com/database/vulnerability/sign-up-sheets/wordpress-sign-up-sheets-plugin-2-2-8-cross-site-request-forgery-csrf-vulnerability · Third Party Advisory

Weitere Schwachstellen in sign-up sheets

• CVE-2024-6020MITTEL 6.1The Sign-up Sheets WordPress plugin before 2.2.13 does not escape some generated URLs, as well as the $_SERVER['REQUEST_URI'] parameter befo…
• CVE-2021-24441HOCH 8.0The Sign-up Sheets WordPress plugin before 1.0.14 does not not sanitise or validate the Sheet title when generating the CSV to export, which…
• CVE-2021-24440MITTEL 4.8The Sign-up Sheets WordPress plugin before 1.0.14 did not sanitise or escape some of its fields when creating a new sheet, allowing high pri…