Beveiligingsadvies

CVE-2022-1112

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-04-18 17:10:56
Laatst bijgewerkt 2024-08-02 23:55:23
Toegewezen door WPScan
CVSS-score geen score
Status PUBLISHED

Beschrijving

The Autolinks WordPress plugin through 1.0.1 does not have CSRF check in place when updating its settings, and does not sanitise as well as escape them, which could allow attackers to perform Stored Cross-Site scripting against a logged in admin via a CSRF attack