CVE-2023-36686

概要

参考情報

• patchstack.com/database/vulnerability/cartflows-pro/wordpress-cartflows-pro-plugin-1-11-11-reflected-cross-site-scripting-xss-vulnerability · Third Party Advisory

cartflows のその他の脆弱性

• CVE-2020-36736中 4.3The WooCommerce Checkout & Funnel Builder by CartFlows plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, a…
• CVE-2019-25151中 4.3The Funnel Builder plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the activate_plugin funct…
• CVE-2021-24330中 4.8The Funnel Builder by CartFlows – Create High Converting Sales Funnels For WordPress plugin before 1.6.13 did not sanitise its facebook_pixe…