CVE-2024-2702 — WordPress Olive One Click Demo Import plugin <= 1.1.1 - Broken Access Control vulnerability

CVE-2024-2702

WordPress Olive One Click Demo Import plugin <= 1.1.1 - Broken Access Control vulnerability PUBLISHED

Description (CNA)

Missing Authorization vulnerability in Olive Themes Olive One Click Demo Import allows importing settings and data, ultimately leading to XSS.This issue affects Olive One Click Demo Import: from n/a through 1.1.1.

Affected (CNA)

Vendor / product	Versions
Olive Themes / Olive One Click Demo Import	affected n/a through 1.1.1

CWE

CWE-862

References

https://patchstack.com/database/vulnerability/olive-one-click-demo-import/wordpress-olive-one-click-demo-import-plugin-1-1-1-broken-access-control-vulnerability?_s_id=cve

ADP enrichment

CVE

No English description supplied.

https://patchstack.com/database/vulnerability/olive-one-click-demo-import/wordpress-olive-one-click-demo-import-plugin-1-1-1-broken-access-control-vulnerability?_s_id=cve

CISA-ADP

No English description supplied.

No references supplied.