The RB Internal Links WordPress plugin through 2.0.16 lacks CSRF protection & allows Stored XSS attacks
Reporter | Title | Published | Views | Family All 7 |
---|---|---|---|---|
Cvelist | CVE-2022-1759 RB Internal Links <= 2.0.16 - Stored Cross-Site Scripting via CSRF | 13 Jun 202212:42 | β | cvelist |
Prion | Cross site scripting | 13 Jun 202213:15 | β | prion |
CNVD | WordPress RB Internal Links pluginθ·¨η«θ―·ζ±δΌͺι ζΌζ΄ | 15 Jun 202200:00 | β | cnvd |
WPVulnDB | RB Internal Links <= 2.0.16 - Stored Cross-Site Scripting via CSRF | 23 May 202200:00 | β | wpvulndb |
NVD | CVE-2022-1759 | 13 Jun 202213:15 | β | nvd |
wpexploit | RB Internal Links <= 2.0.16 - Stored Cross-Site Scripting via CSRF | 23 May 202200:00 | β | wpexploit |
Patchstack | WordPress RB Internal Links plugin <= 2.0.16 - Stored Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability | 23 May 202200:00 | β | patchstack |
[
{
"product": "RB Internal Links",
"vendor": "Unknown",
"versions": [
{
"lessThanOrEqual": "2.0.16",
"status": "affected",
"version": "2.0.16",
"versionType": "custom"
}
]
}
]
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. ContactΒ us for a demo andΒ discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo