Lucene search
Tsubasa ImaizumiPATCHSTACK:6F461A941AEA0F7F3B47E5159286B22AHistoryJun 01, 2022 - 12:00 a.m.
WordPress Mobile Browser Color Select plugin <= 1.0.1 - Stored Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability
2022-06-0100:00:00
Tsubasa Imaizumi
patchstack.com
6
0.001 Low
EPSS
Percentile
50.5%
Stored Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability was discovered by Tsubasa Imaizumi (Cryptography Laboratory at Tokyo Denki University) in the WordPress Mobile Browser Color Select plugin (versions <= 1.0.1).
Solution
Deactivate and delete. This plugin has been closed as of April 29, 2022 and is not available for download. This closure is temporary, pending a full review.
| CPE | Name | Operator | Version |
|---|---|---|---|
| mobile browser color select | le | 1.0.1 |
Related
cve
cve
CVE-2022-1969
2022-06-13 14:15:08
cnvd
cnvd
WordPress Mobile browser color select plugin跨站请求伪造漏洞
2022-06-15 00:00:00
prion
prion
Cross site request forgery (csrf)
2022-06-13 14:15:00
cvelist
cvelist
CVE-2022-1969
2022-06-13 13:15:13
wpvulndb
wpvulndb
Mobile Browser Color Select <= 1.0.1 - Stored Cross-Site Scripting via CSRF
2022-06-01 00:00:00
nvd
nvd
CVE-2022-1969
2022-06-13 14:15:08