CVE-2024-53789 Cross-site request forgery in Advanced What should we write next about
Attackers can exploit CSRF to inject stored XSS payloads, allowing script execution in victim browsers via the Advanced What should we write next about plugin.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2024-53789?
CVE-2024-53789 is a high-severity vulnerability in Ritesh Sanap Advanced What should we write next about, published on 2 Dec 2024. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Cross-Site Request Forgery (CSRF) vulnerability in Ritesh Sanap Advanced What should we write next about advanced-what-should-we-write-about-next allows Stored XSS.This issue affects Advanced What should we write next about: from n/a through <= 1.0.3.
Weakness: CWE-352
Which versions are affected by CVE-2024-53789?
How do I fix CVE-2024-53789?
No fix has been published for CVE-2024-53789 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-53789 being exploited?
There is no known exploitation of CVE-2024-53789 in the wild and no public exploit code.
Sources
Also known as GHSA-fqh5-5gj6-jjx8.