CVE-2024-0256

概要

参考情報

• plugins.trac.wordpress.org/changeset/3029599/starbox · Patch
• wordfence.com/threat-intel/vulnerabilities/id/0eafe473-9177-47c4-aa1e-2350cb827447 · Third Party Advisory

starbox のその他の脆弱性

• CVE-2024-8239中 5.4The Starbox WordPress plugin before 3.5.3 does not properly render social media profiles URLs in certain contexts, like the malicious user'…
• CVE-2024-7955中 4.8The Starbox WordPress plugin before 3.5.2 does not sanitise and escape some of its settings, which could allow high privilege users such as…
• CVE-2024-1273中 6.1The Starbox WordPress plugin before 3.5.0 does not sanitise and escape some parameters, which could allow users with a role as low as Contri…
• CVE-2023-6806中 5.4The Starbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Job Settings user profile fields in all versions up to…
• CVE-2024-0366中 4.3The Starbox – the Author Box for Humans plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and in…