CVE-2024-8761
Share This Image <= 2.03 - Open Redirect via link Parameter
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
The Share This Image plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 2.03. This is due to insufficient validation on the redirect url supplied via the link parameter. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action.
El complemento Share This Image para WordPress es vulnerable a Open Redirect en todas las versiones hasta la 2.03 incluida. Esto se debe a una validación insuficiente en la URL de redireccionamiento proporcionada a través del parámetro de enlace. Esto hace posible que atacantes no autenticados redirijan a los usuarios a sitios potencialmente maliciosos si logran engañarlos para que realicen una acción.
CVSS Scores
SSVC
- Decision:Attend
Timeline
- 2024-09-12 CVE Reserved
- 2024-09-16 CVE Published
- 2024-09-17 CVE Updated
- 2024-09-28 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
CAPEC
References (6)
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Mihail-barinov Search vendor "Mihail-barinov" | Share This Image Search vendor "Mihail-barinov" for product "Share This Image" | <= 2.03 Search vendor "Mihail-barinov" for product "Share This Image" and version " <= 2.03" | en |
Affected
| ||||||