Lucene search
MitreCVELIST:CVE-2018-6357HistoryOct 03, 2022 - 4:21 p.m.
CVE-2018-6357
2022-10-0316:21:47
mitre
www.cve.org
cve-2018-6357
acurax-social-media-widget
function.php
csrf
recordsarray parameter
wp-admin/admin-ajax.php
xss
The acx_asmw_saveorder_callback function in function.php in the acurax-social-media-widget plugin before 3.2.6 for WordPress has CSRF via the recordsArray parameter to wp-admin/admin-ajax.php, with resultant social_widget_icon_array_order XSS.
Related
nvd
nvd
CVE-2018-6357
2018-01-27 17:29:00
patchstack
patchstack
cve
cve
CVE-2018-6357
2022-10-03 16:21:47
prion
prion
Cross site request forgery (csrf)
2018-01-27 17:29:00
wpvulndb
wpvulndb
Social Media Widget by Acurax <= 3.2.5 - Stored XSS & CSRF
2018-01-07 00:00:00