CVE-2024-0366

概要

参考情報

• plugins.trac.wordpress.org/browser/starbox/trunk/core/UserSettings.php · Issue Tracking
• plugins.trac.wordpress.org/changeset/3028775/starbox/trunk · Issue Tracking
• wordfence.com/threat-intel/vulnerabilities/id/c47601b4-bf16-4f59-b5f3-584a8eac7c67 · Third Party Advisory

starbox のその他の脆弱性

• CVE-2024-8239中 5.4The Starbox WordPress plugin before 3.5.3 does not properly render social media profiles URLs in certain contexts, like the malicious user'…
• CVE-2024-7955中 4.8The Starbox WordPress plugin before 3.5.2 does not sanitise and escape some of its settings, which could allow high privilege users such as…
• CVE-2024-1273中 6.1The Starbox WordPress plugin before 3.5.0 does not sanitise and escape some parameters, which could allow users with a role as low as Contri…
• CVE-2023-6806中 5.4The Starbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Job Settings user profile fields in all versions up to…
• CVE-2024-0256中 5.4The Starbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Profile Display Name and Social Settings in all versio…