CVE-2024-32138

Description

References

• patchstack.com/database/vulnerability/shorten-url/wordpress-short-url-plugin-1-6-8-cross-site-scripting-xss-vulnerability · Third Party Advisory

Altre vulnerabilità di short url

• CVE-2023-2921ALTO 8.8The Short URL WordPress plugin through 1.6.8 does not properly sanitise and escape a parameter before using it in SQL statement, leading to …
• CVE-2022-46860CRITICO 9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in KaizenCoders Short URL allows SQL Inje…
• CVE-2023-45058ALTO 8.8Cross-Site Request Forgery (CSRF) vulnerability in KaizenCoders Short URL plugin <= 1.6.8 versions.
• CVE-2023-3130MEDIO 4.8The Short URL WordPress plugin before 1.6.5 does not sanitise and escape some of its settings, which could allow high privilege users such a…
• CVE-2023-1602MEDIO 4.8The Short URL plugin for WordPress is vulnerable to stored Cross-Site Scripting via the 'comment' parameter due to insufficient input saniti…