Description

A flaw was found in Feedback. Bulk messaging in the activity's non-respondents report did not verify message recipients belonging to the set of users returned by the report.

Remediation

References

CVE-2024-43438

Related Vulnerabilities

WordPress Plugin Smooth Scroll Page Up/Down Buttons Cross-Site Scripting (1.3)

PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2009-3558)

WordPress Plugin Starbox-the Author Box for Humans Cross-Site Scripting (3.0.8)

WordPress 4.4.x Cross-Domain Flash Injection Vulnerability (4.4 - 4.4.13)

Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-21725)

Severity

High

Classification

CVE-2024-43438 CWE-639 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities