CVE-2023-49824

概要

参考情報

• patchstack.com/database/vulnerability/product-catalog-feed/wordpress-product-catalog-feed-by-pixelyoursite-plugin-2-1-1-cross-site-request-forgery-csrf-vulnerability · Third Party Advisory

product catalog feed のその他の脆弱性

• CVE-2023-1805中 6.1The Product Catalog Feed by PixelYourSite WordPress plugin before 2.1.1 does not sanitise and escape the page parameter before outputting it…
• CVE-2023-1804中 6.1The Product Catalog Feed by PixelYourSite WordPress plugin before 2.1.1 does not sanitise and escape the edit parameter before outputting it…