amCharts <=1.4.4 Reflected XSS via CSRF Vulnerability Advisory

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Name: amCharts: Charts and Maps <= 1.4.4 - Reflected Cross-Site Scripting via Cross-Site Request Forgery 2. Vulnerability Type: Cross-Site Scripting (XSS) via Cross-Site Request Forgery (XSRF) 3. Affected Versions: <= 1.4.4 4. Patch Status: Patched 5. Patch Version: 1.4.5 6. CVSS Score: 6.1 (Medium) 7. Public Release Date: September 11, 2024 8. Last Updated Date: September 12, 2024 9. Researcher: Krzysztof Zając - CERT PL 10. Vulnerability Description: Due to the lack of non-random validation in the preview feature, an attacker can inject arbitrary JavaScript code to perform arbitrary actions, such as clicking links. 11. Reference Link: plugins.trac.wordpress.org 12. Vulnerability Database: Wordfence Intelligence Vulnerability Database 13. Advisory: Wordfence Intelligence Vulnerability Database 14. Advisory Date: September 12, 2024 15. Advisory Link: plugins.trac.wordpress.org 16. Advisory: Wordfence Intelligence Vulnerability Database 17. Advisory Date: September 12, 2024 18. Advisory Link: plugins.trac.wordpress.org 19. Advisory: Wordfence Intelligence Vulnerability Database 20. Advisory Date: September 12, 2024 21. Advisory Link: plugins.trac.wordpress.org 22. Advisory: Wordfence Intelligence Vulnerability Database 23. Advisory Date: September 12, 2024 24. Advisory Link: plugins.trac.wordpress.org 25. Advisory: Wordfence Intelligence Vulnerability Database 26. Advisory Date: September 12, 2024 27. Advisory Link: plugins.trac.wordpress.org 28. Advisory: Wordfence Intelligence Vulnerability Database 29. Advisory Date: September 12, 2024 30. Advisory Link: plugins.trac.wordpress.org 31. Advisory: Wordfence Intelligence Vulnerability Database 32. Advisory Date: September 12, 2024 33. Advisory Link: plugins.trac.wordpress.org 34. Advisory: Wordfence Intelligence Vulnerability Database 35. Advisory Date: September 12, 2024 36. Advisory Link: plugins.trac.wordpress.org 37. Advisory: Wordfence Intelligence Vulnerability Database 38. Advisory Date: September 12, 2024 39. Advisory Link: plugins.trac.wordpress.org 40. Advisory: Wordfence Intelligence Vulnerability Database 41. Advisory Date: September 12, 2024 42. Advisory Link: plugins.trac.wordpress.org 43. Advisory: Wordfence Intelligence Vulnerability Database 44. Advisory Date: September 12, 2024 45. Advisory Link: plugins.trac.wordpress.org 46. Advisory: Wordfence Intelligence Vulnerability Database 47. Advisory Date: September 12, 2024 48. Advisory Link: plugins.trac.wordpress.org 49. Advisory: Wordfence Intelligence Vulnerability Database 50. Advisory Date: September 12, 2024 51. Advisory Link: plugins.trac.wordpress.org 52. Advisory: Wordfence Intelligence Vulnerability Database 53. Advisory Date: September 12, 2024 54. Advisory Link: plugins.trac.wordpress.org 55. Advisory: Wordfence Intelligence Vulnerability Database 56. Advisory Date: September 12, 2024 57. Advisory Link: plugins.trac.wordpress.org 58. Advisory: Wordfence Intelligence Vulnerability Database 59. Advisory Date: September 12, 2024 60. Advisory Link: plugins.trac.wordpress.org 61. Advisory: Wordfence Intelligence Vulnerability Database 62. Advisory Date: September 12, 2024 63. Advisory Link: plugins.trac.wordpress.org 64. Advisory: Wordfence Intelligence Vulnerability Database 65. Advisory Date: September 12, 2024 66. Advisory Link: plugins.trac.wordpress.org 67. Advisory: Wordfence Intelligence Vulnerability Database 68. Advisory Date: September 12, 2024 69. Advisory Link: plugins.trac.wordpress.org 70. Advisory: Wordfence Intelligence Vulnerability Database 71. Advisory Date: September 12, 2024 72. Advisory Link: plugins.trac.wordpress.org 73. Advisory: Wordfence Intelligence Vulnerability Database 74. Advisory Date: September 12, 2024 75. Advisory Link: plugins.trac.wordpress.org 76. Advisory: Wordfence Intelligence Vulnerability Database 77. Advisory Date: September 12, 2024 78. Advisory Link: plugins.trac.wordpress.org 79. Advisory: Wordfence Intelligence Vulnerability Database 80. Advisory Date: September 12, 2024 81. Advisory Link: plugins.trac.wordpress.org 82. Advisory: Wordfence Intelligence Vulnerability Database 83. Advisory Date: September 12, 2024 84. Advisory Link: plugins.trac.wordpress.org 85. Advisory: Wordfence Intelligence Vulnerability Database 86. Advisory Date: September 12, 2024 87. Advisory Link: plugins.trac.wordpress.org 88. Advisory: Wordfence Intelligence Vulnerability Database 89. Advisory Date: September 12, 2024 90. Advisory Link: plugins.trac.wordpress.org 91. Advisory: Wordfence Intelligence Vulnerability Database 92. Advisory Date: September 12, 2024 93. Advisory Link: plugins.trac.wordpress.org 94. Advisory: Wordfence Intelligence Vulnerability Database 95. Advisory Date: September 12, 2024 96. Advisory Link: plugins.trac.wordpress.org 97. Advisory: Wordfence Intelligence Vulnerability Database 98. Advisory Date: September 12, 2024 99. Ad

Goal Reached Thanks to every supporter — we hit 100%!

amCharts <=1.4.4 Reflected XSS via CSRF Vulnerability Advisory

More from this source