2024-07-15 14:03:11 +00:00

25 lines
997 B
JSON

{
"id": "CVE-2024-3632",
"sourceIdentifier": "contact@wpscan.com",
"published": "2024-07-13T06:15:02.617",
"lastModified": "2024-07-15T13:00:34.853",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Smart Image Gallery WordPress plugin before 1.0.19 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack"
},
{
"lang": "es",
"value": "El complemento Smart Image Gallery de WordPress anterior a 1.0.19 no tiene activada la verificaci\u00f3n CSRF al actualizar su configuraci\u00f3n, lo que podr\u00eda permitir a los atacantes hacer que un administrador que haya iniciado sesi\u00f3n los cambie mediante un ataque CSRF."
}
],
"metrics": {},
"references": [
{
"url": "https://wpscan.com/vulnerability/9b11682d-4705-4595-943f-0fa093d0b644/",
"source": "contact@wpscan.com"
}
]
}