CVE-2024-32138

概要

参考情報

• patchstack.com/database/vulnerability/shorten-url/wordpress-short-url-plugin-1-6-8-cross-site-scripting-xss-vulnerability · Third Party Advisory

short url のその他の脆弱性

• CVE-2023-2921高 8.8The Short URL WordPress plugin through 1.6.8 does not properly sanitise and escape a parameter before using it in SQL statement, leading to …
• CVE-2022-46860緊急 9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in KaizenCoders Short URL allows SQL Inje…
• CVE-2023-45058高 8.8Cross-Site Request Forgery (CSRF) vulnerability in KaizenCoders Short URL plugin <= 1.6.8 versions.
• CVE-2023-3130中 4.8The Short URL WordPress plugin before 1.6.5 does not sanitise and escape some of its settings, which could allow high privilege users such a…
• CVE-2023-1602中 4.8The Short URL plugin for WordPress is vulnerable to stored Cross-Site Scripting via the 'comment' parameter due to insufficient input saniti…