CVE-2023-6806

概要

参考情報

• plugins.trac.wordpress.org/changeset/3029599/starbox · Patch
• wordfence.com/threat-intel/vulnerabilities/id/1f413fc2-8543-4478-987d-d983581027bf · Third Party Advisory

starbox のその他の脆弱性

• CVE-2024-8239中 5.4The Starbox WordPress plugin before 3.5.3 does not properly render social media profiles URLs in certain contexts, like the malicious user'…
• CVE-2024-7955中 4.8The Starbox WordPress plugin before 3.5.2 does not sanitise and escape some of its settings, which could allow high privilege users such as…
• CVE-2024-1273中 6.1The Starbox WordPress plugin before 3.5.0 does not sanitise and escape some parameters, which could allow users with a role as low as Contri…
• CVE-2024-0256中 5.4The Starbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Profile Display Name and Social Settings in all versio…
• CVE-2024-0366中 4.3The Starbox – the Author Box for Humans plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and in…