CVE-2022-41978

🗓️ 09 Nov 2022 15:46:23Reported by PatchstackType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 79 Views

CVE-2022-41978 Auth. (subscriber+) Arbitrary Options Update vulnerability in Zoho CRM Lead Magnet plugin <= 1.7.5.

Reporter	Title	Published	Views	Family All 11
CNNVD	WordPress Plugin Zoho CRM Lead Magnet 权限许可和访问控制问题漏洞	9 Nov 202200:00	–	cnnvd
Cvelist	CVE-2022-41978 WordPress Zoho CRM Lead Magnet plugin <= 1.7.5.8 - Auth. Arbitrary Options Update vulnerability	9 Nov 202215:46	–	cvelist
EUVD	EUVD-2022-45082	3 Oct 202520:07	–	euvd
NVD	CVE-2022-41978	9 Nov 202216:15	–	nvd
OSV	CVE-2022-41978	9 Nov 202216:15	–	osv
Patchstack	WordPress Zoho CRM Lead Magnet plugin <= 1.7.6.1 - Auth. Arbitrary Options Update vulnerability	27 Oct 202200:00	–	patchstack
Prion	Code injection	9 Nov 202216:15	–	prion
Positive Technologies	PT-2022-26197 · Zoho · Zoho Crm Lead Magnet Plugin	9 Nov 202200:00	–	ptsecurity
Vulnrichment	CVE-2022-41978 WordPress Zoho CRM Lead Magnet plugin <= 1.7.5.8 - Auth. Arbitrary Options Update vulnerability	9 Nov 202215:46	–	vulnrichment
wpexploit	Zoho CRM Lead Magnet < 1.7.6.2 - Subscriber+ Arbitrary Options Update	27 Oct 202200:00	–	wpexploit

NVD

Vulners

Node

zohocorp zoho_crm_lead_magnetRange≤1.7.5.8wordpress

[
  {
    "product": "Zoho CRM Lead Magnet (WordPress plugin)",
    "vendor": "Zoho CRM",
    "versions": [
      {
        "lessThanOrEqual": "1.7.5.8",
        "status": "affected",
        "version": "<= 1.7.5.8",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
wordpress	www.wordpress.org/plugins/zoho-crm-forms/
patchstack	www.patchstack.com/database/vulnerability/zoho-crm-forms/wordpress-zoho-crm-lead-magnet-plugin-1-7-5-6-auth-arbitrary-options-update-vulnerability