CVE-2024-25905

Mô tả

Tham khảo

• patchstack.com/database/vulnerability/multi-step-form/wordpress-multi-step-form-plugin-1-7-17-cross-site-request-forgery-csrf-vulnerability · Third Party Advisory

Lỗ hổng khác của multi step form

• CVE-2024-12427TRUNG BÌNH 5.3The Multi Step Form plugin for WordPress is vulnerable to unauthorized limited file upload due to a missing capability check on the fw_uploa…
• CVE-2024-50428NGHIÊM TRỌNG 9.8Missing Authorization vulnerability in mondula2016 Multi Step Form multi-step-form allows Exploiting Incorrectly Configured Access Control S…
• CVE-2023-50832TRUNG BÌNH 4.8Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mondula GmbH Multi Step Form allows St…
• CVE-2023-47758CAO 8.8Cross-Site Request Forgery (CSRF) vulnerability in Mondula GmbH Multi Step Form plugin <= 1.7.11 versions.
• CVE-2022-4196TRUNG BÌNH 4.8The Multi Step Form WordPress plugin before 1.7.8 does not sanitise and escape some of its form fields, which could allow high privilege use…