CVE-2024-13057
Last modified
CVE-2024-13057 is a high-severity vulnerability rated 7.1/10 on the CVSS scale. The Dyn Business Panel WordPress plugin through 1.0.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.. EPSS estimates a 0.15% chance of exploitation in the next 30 days.
Description
The Dyn Business Panel WordPress plugin through 1.0.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Phycticio | Dyn Business Panel | 1.0.0 |
References
- https://wpscan.com/vulnerability/6f869a3d-1ac1-4d31-8fe5-9b9795b15b5b/Exploit, Third Party Advisory
- https://wpscan.com/vulnerability/6f869a3d-1ac1-4d31-8fe5-9b9795b15b5b/Exploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-13057?
How severe is CVE-2024-13057?
How do I fix CVE-2024-13057?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-13051Ashlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Ov…7.8
- CVE-2024-13052The Dental Optimizer Patient Generator App WordPress plugin …7.1
- CVE-2024-13053The Form Maker by 10Web WordPress plugin before 1.15.33 doe…4.8
- CVE-2024-13054An issue was discovered in GitLab CE/EE affecting all versio…6.5
- CVE-2024-13055The Dyn Business Panel WordPress plugin through 1.0.0 does n…7.1
- CVE-2024-13056The Dyn Business Panel WordPress plugin through 1.0.0 does n…7.1
- CVE-2024-13058An issue exists in SoftIron HyperCloud where authenticated,…4.8
- CVE-2024-13059A vulnerability in mintplex-labs/anything-llm prior to versi…7.2
- CVE-2024-1306The Smart Forms WordPress plugin before 2.6.94 does not hav…5.4
- CVE-2024-13060A vulnerability in AnythingLLM Docker version 1.3.1 allows u…4.3
- CVE-2024-13061The Electronic Official Document Management System from 2100…9.8
- CVE-2024-13062An unintended entry point vulnerability has been identified …7.2
Are you affected by CVE-2024-13057?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST