nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2024-34557 CVE-2024-34557
MEDIUM
WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.5.4 - Cross Site Request Forgery (CSRF) vulnerability
Record summary
CVE-2024-34557 has a selected CVSS score of 4.3 (medium).
Description
Cross-Site Request Forgery (CSRF) vulnerability in Dmitry V. (CEO of "UKR Solution") Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders.This issue affects Barcode Scanner with Inventory & Order Manager: from n/a through <= 1.5.4.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Jun 12, 2024 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Barcode Scanner with Inventory & Order ManagerBrowse Dmitry V. (CEO of "UKR Solution") / Barcode Scanner with Inventory & Order Managerbarcode-scanner-lite-pos-to-manage-products-inventory-and-ordersDefault status: unaffected | CVE List | Through 1.5.4 | affected |
References
3patchstack.comvdb entry
https://patchstack.com/database/Wordpress/Plugin/barcode-scanner-lite-pos-to-manage-products-inventory-and-orders/vulnerability/wordpress-barcode-scanner-with-inventory-order-manager-plugin-1-5-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve patchstack.comvdb entry
https://patchstack.com/database/vulnerability/barcode-scanner-lite-pos-to-manage-products-inventory-and-orders/wordpress-barcode-scanner-with-inventory-order-manager-plugin-1-5-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve