WordPress Custom Post Type to Map Store plugin <= 1.1.0 - CSRF to Stored XSS vulnerability
CVE-2024-53769

7.1HIGH

Key Information:

Vendor

WordPress
Status
Custom Post Type To Map Store
Vendor
CVE Published:
2 December 2024

What is CVE-2024-53769?

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Custom Post Type to Map Store plugin developed by Ludovic RIAUDEL. This flaw permits an attacker to induce users to perform unintended actions on their behalf, potentially leading to a Stored Cross-Site Scripting (XSS) scenario. The issue primarily affects versions from n/a up to 1.1.0, compromising the security integrity of web applications using this plugin. Remediation is crucial to prevent unauthorized data exposure and manipulation.

Affected Version(s)

Custom Post Type to Map Store 0 <= 1.1.0

References

https://patchstack.com/database/Wordpress/Plugin/cpt-to-m...
vdb-entry

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

SOPROBRO (Patchstack Alliance)
.