Improper Control of Generation of Code ('Code Injection') vulnerability in Sunjianle allows Code Injection.This issue affects ajax-extend: from n/a through 1.0.
History

Wed, 16 Oct 2024 14:15:00 +0000

Type Values Removed Values Added
First Time appeared Sunjianle
Sunjianle ajax Extend
CPEs cpe:2.3:a:sunjianle:ajax_extend:*:*:*:*:*:*:*:*
Vendors & Products Sunjianle
Sunjianle ajax Extend
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Wed, 16 Oct 2024 13:30:00 +0000

Type Values Removed Values Added
Description Improper Control of Generation of Code ('Code Injection') vulnerability in Sunjianle allows Code Injection.This issue affects ajax-extend: from n/a through 1.0.
Title WordPress ajax-extend plugin <= 1.0 - Remote Code Execution (RCE) vulnerability
Weaknesses CWE-94
References
Metrics cvssV3_1

{'score': 10, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H'}


cve-icon MITRE

Status: PUBLISHED

Assigner: Patchstack

Published: 2024-10-16T13:15:00.412Z

Updated: 2024-10-16T13:40:52.943Z

Reserved: 2024-10-14T10:39:26.356Z

Link: CVE-2024-49254

cve-icon Vulnrichment

Updated: 2024-10-16T13:40:41.734Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-10-16T14:15:11.040

Modified: 2024-10-16T16:38:14.557

Link: CVE-2024-49254

cve-icon Redhat

No data.