WordPress WP Flipkart Importer plugin <= 1.4 - CSRF to Stored XSS vulnerability

CVE-2024-54432

What is CVE-2024-54432?

The vulnerability in WP Flipkart Importer, developed by Shambhu Prasad Patnaik, is a Cross-Site Request Forgery (CSRF) flaw that enables attackers to execute unauthorized actions on behalf of the user. This weakness can be exploited to inject malicious scripts, resulting in Stored Cross-Site Scripting (XSS). Affected users of versions below 1.4 are at risk, as this flaw allows for potential security breaches and compromise of sensitive data when interacting with the affected plugin.

References