WordPress Yahoo! WebPlayer plugin <= 2.0.6 - CSRF to Stored XSS vulnerability

CVE-2024-53779

What is CVE-2024-53779?

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in Yahoo! WebPlayer developed by Max Engel. This vulnerability enables an attacker to exploit the application and perform actions on behalf of the user, potentially leading to stored Cross-Site Scripting (XSS) attacks. The issue affects all versions of Yahoo! WebPlayer up to and including 2.0.6, posing a significant risk for users. Effective mitigations should be implemented promptly to address this security concern, especially for those using the affected versions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References