CVE-2024-10533

概要

参考情報

• plugins.trac.wordpress.org/browser/wp-whatsapp/tags/3.6.7/includes/Cross.php · Product
• plugins.trac.wordpress.org/browser/wp-whatsapp/trunk/includes/Cross.php · Product
• plugins.trac.wordpress.org/changeset/3186930/wp-whatsapp/trunk/includes/Cross.php · Patch
• wordfence.com/threat-intel/vulnerabilities/id/26f73bfe-f41a-4045-9d72-21181a9a704f · Third Party Advisory

wp chat app のその他の脆弱性

• CVE-2024-4664中 4.8The WP Chat App WordPress plugin before 3.6.5 does not sanitise and escape some of its settings, which could allow high privilege users such…
• CVE-2024-2837中 5.4The WP Chat App WordPress plugin before 3.6.4 does not sanitise and escape some of its settings, which could allow high privilege users such…
• CVE-2024-2513中 5.4The WP Chat App plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'imageAlt' block attribute in all versions up to, …
• CVE-2024-1761中 5.4The WP Chat App plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widget/block in all versions up to, and i…
• CVE-2023-51370中 4.8Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NinjaTeam WP Chat App allows Stored XS…