CVE-2024-32456

概要

参考情報

• patchstack.com/database/vulnerability/envo-extra/wordpress-envo-extra-plugin-1-8-11-cross-site-scripting-xss-vulnerability · Third Party Advisory

envo extra のその他の脆弱性

• CVE-2024-10770中 4.3The Envo Extra plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.9.3 via the 'elementor-tem…
• CVE-2024-5645中 5.4The Envo Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘button_css_id’ parameter within the Button widget …
• CVE-2024-4385中 5.4The Envo Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in versions up to, and including, 1…