Lucene search

K
patchstackVinay Varma Mudunuri and Krishna Harsha KondaveetiPATCHSTACK:5F08411943BAA5151E22FBFE106FC7ED
HistoryApr 20, 2022 - 12:00 a.m.

WordPress Social Stickers plugin <= 2.2.9 - Stored Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability

2022-04-2000:00:00
Vinay Varma Mudunuri and Krishna Harsha Kondaveeti
patchstack.com
8

0.001 Low

EPSS

Percentile

32.3%

Stored Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability discovered by Vinay Varma Mudunuri and Krishna Harsha Kondaveeti in WordPress Social Stickers plugin (versions <= 2.2.9).

Solution

Deactivate and delete. This plugin has been closed as of April 19, 2022 and is not available for download. This closure is permanent.

CPENameOperatorVersion
social stickersle2.2.9

0.001 Low

EPSS

Percentile

32.3%

Related for PATCHSTACK:5F08411943BAA5151E22FBFE106FC7ED