CVE-2024-22287

MEDIO 6.1CVE-2024-22287 · Published 31/01/2024 · updated 17/06/2026

En resumen

CVE-2024-22287 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a better anchor links (ludek).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.18%, mayor que el 7.1% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
better anchor links ludek	`≤ 1.7.5`	No fix yet

Description

Cross-Site Request Forgery (CSRF) vulnerability in Luděk Melichar Better Anchor Links allows Cross-Site Scripting (XSS).This issue affects Better Anchor Links: from n/a through 1.7.5.

References

patchstack.com/database/vulnerability/better-anchor-links/wordpress-better-anchor-links-plugin-1-7-5-csrf-to-xss-vulnerability · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free