WordPress yPHPlista plugin <= 1.1.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

CVE-2024-53717

What is CVE-2024-53717?

A Cross-Site Request Forgery (CSRF) vulnerability exists in the yPHPlista product by Yonatan Reinberg, enabling attackers to exploit the application and execute unauthorized actions on behalf of the user. This vulnerability can lead to Stored Cross-Site Scripting (XSS), allowing malicious scripts to be saved and executed within the context of the affected application. Such exploits can compromise user data and the integrity of the web application, highlighting the necessity for prompt updates and security patches for versions ranging from n/a through 1.1.1.

References