CVE-2024-35773

Cross-Site Request Forgery (CSRF) vulnerability in WPJohnny, zerOneIT Comment Reply Email allows Cross-Site Scripting (XSS).This issue affects Comment Reply Email: from n/a through 1.3.

Score

CVSS 3.1 7.1 High

Status

Deferred - audit@patchstack.com

Published

2024-07-12

Last modified

2026-04-28

Weaknesses

CWE-352

Affected products

• Comment Reply Email (Wpjohnny Zeroneit)

References

• https://patchstack.com/database/vulnerability/comment-reply-email/wordpress-comment-reply-email-plugin-1-3-csrf-to-stor…