Threat Entry Updated 2024-11-21

CVE-2022-29411 - Hermit Plugin

SQL Injection (SQLi) vulnerability in Mufeng's Hermit 音乐播放器 plugin

PLUGIN Hermit

CVE-2022-29411

HIGH CVSS 8.3 2022-04-28

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2024-11-21

CVE-2022-29412 - Hermit Plugin

Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Hermit 音乐播放器 plugin

PLUGIN Hermit

CVE-2022-29412

MEDIUM CVSS 5.4 2022-04-28

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2024-11-21

CVE-2022-29413 - Hermit Plugin

Cross-Site Request Forgery (CSRF) leading to Stored Cross-Site Scripting (XSS) in Mufeng's Hermit 音乐播放器 plugin

PLUGIN Hermit

CVE-2022-29413

MEDIUM CVSS 4.7 2022-04-28

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2024-11-21

CVE-2022-29410 - Hermit Plugin

Authenticated SQL Injection (SQLi) vulnerability in Mufeng's Hermit 音乐播放器 plugin

PLUGIN Hermit

CVE-2022-29410

HIGH CVSS 7.4 2022-04-28

Risk Score

Open Full Technical Breakdown