cve/2024/CVE-2024-2950.md

18 lines
914 B
Markdown
Raw Permalink Normal View History

2024-05-25 21:48:12 +02:00
### [CVE-2024-2950](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2950)
![](https://img.shields.io/static/v1?label=Product&message=BoldGrid%20Easy%20SEO%20%E2%80%93%20Simple%20and%20Effective%20SEO&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=*%3C%3D%201.6.14%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-200%20Information%20Exposure&color=brighgreen)
### Description
The BoldGrid Easy SEO Simple and Effective SEO plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.6.14 via meta information (og:description) This makes it possible for unauthenticated attackers to view the first 130 characters of a password protected post which can contain sensitive information.
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/fkie-cad/nvd-json-data-feeds