CVE-2024-2093

概要

参考情報

• vektor-inc/vk-all-in-one-expansion-unit#1072 · Issue Tracking
• plugins.trac.wordpress.org/changeset · Patch
• wordfence.com/threat-intel/vulnerabilities/id/ea2b5dca-42a5-49d4-800d-b268572968a9 · Third Party Advisory

vk all in one expansion unit のその他の脆弱性

• CVE-2024-52268中 4.8Cross-site scripting vulnerability exists in VK All in One Expansion Unit versions prior to 9.100.1.0. If this vulnerability is exploited, a…
• CVE-2024-37956中 5.4Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Vektor,Inc. VK All in One Expan…
• CVE-2024-2170中 5.4The VK All in One Expansion Unit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the child page index widget in all ve…
• CVE-2023-28367中 5.4Cross-site scripting vulnerability in CTA post function of VK All in One Expansion Unit 9.88.1.0 and earlier allows a remote authenticated a…
• CVE-2023-27926中 5.4Cross-site scripting vulnerability in Profile setting function of VK All in One Expansion Unit 9.88.1.0 and earlier allows a remote authenti…